Privacy Policy

Effective: April 1, 2026

HippUp Fitness ("HippUp," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use our platform at hippupfitness.com.

1. Information We Collect

Account Information: When you sign up, we collect your email address, display name, and age group selection. If you sign in with Google, we receive your name and email from your Google account.

Payment Information: When you subscribe to a paid plan, payment details (card number, billing address) are collected and processed directly by Stripe. We do not store your full card number on our servers. We receive a record of your subscription status, plan type, and billing history from Stripe.

Usage Data: We collect information about how you use the platform, including which videos you watch, your progress, and general interaction patterns. This helps us improve the service and recommend relevant content.

Device & Technical Data: We automatically collect basic technical information such as browser type, device type, and IP address for security and performance purposes.

2. How We Use Your Information

• Provide the service: Authenticate your account, manage your subscription, deliver video content, and track your workout progress.
• Improve the platform: Understand usage patterns to improve our content library, user experience, and features.
• Communicate with you: Send account-related emails (welcome, billing confirmations, password resets, subscription changes). We may also send occasional product updates, which you can opt out of at any time.
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access.

3. Third-Party Services

We work with trusted third-party services to operate HippUp. These providers only access your data as needed to perform their services:

• Supabase — Authentication and user account management.
• Stripe — Payment processing and subscription billing.
• Bunny.net — Video content delivery (CDN). Bunny.net delivers video streams but does not have access to your personal account information.
• Cloudflare — Website hosting, performance, and security.

We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers or data brokers.

4. Cookies & Local Storage

We use minimal cookies and browser local storage, limited to:

• Authentication session: Keeps you logged in between visits.
• Preferences: Remembers your settings (e.g., video playback preferences).

We do not use tracking cookies, advertising cookies, or third-party analytics trackers.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information from our systems within 30 days, except where we are required to retain certain records for legal or financial compliance purposes (such as billing records, which may be kept for up to 7 years).

6. Your Rights

You have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Delete your account: Contact us to permanently delete your account and associated data.
• Export your data: Request a portable copy of your data.
• Opt out of marketing: Unsubscribe from promotional emails at any time using the link in the email or by contacting us.
• Correct your information: Update your account details from your account settings.

To exercise any of these rights, email us at [email protected].

7. Children's Privacy

HippUp offers a Kids program designed for children ages 6-12. We take children's privacy seriously.

• Children under 13 cannot create their own accounts. A parent or guardian must create the account and provide consent.
• We collect only the minimum information necessary to provide the service for child users (name and age group).
• We do not knowingly collect personal information from children under 13 without verified parental consent, in compliance with COPPA (Children's Online Privacy Protection Act).
• Parents may review, update, or request deletion of their child's information at any time by contacting us.

8. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication through Supabase, and PCI-compliant payment processing through Stripe. While no system is 100% secure, we take reasonable precautions to safeguard your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email. The "Effective" date at the top of this page will always reflect the most recent version.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at:
[email protected]