Privacy Policy

Last updated: March 2026

PandaSoft SASU ("we", "our") publishes the Tonus+ mobile application ("the App"). This privacy policy describes how we collect, use, and protect your personal data.

1. Data collected

Account data

  • Email address — to create and secure your account
  • Username (optional) — to personalize your experience
  • Age (optional) — to tailor exercise recommendations

Usage data

  • Exercise history — completed sessions, duration, exercises done
  • Daily mood — mood entries you voluntarily submit
  • Points and level — progress in the gamification system
  • Scheduled sessions — dates and times of your planned workouts

Safety data

  • Emergency contact (optional) — name and phone number of a trusted contact

Purchase data

  • Subscription history — subscription type and date, without payment details (handled by Apple/Google)

2. How we use your data

Your data is used exclusively to:

  • Operate the App and its features
  • Save your progress and preferences
  • Send reminder notifications (if enabled)
  • Contact your emergency contact if needed (only upon your action)

We never sell your data. We do not use any advertising tracking tools.

3. Storage and security

Your data is stored on Supabase servers (secure cloud infrastructure). Data access is protected by:

  • Email/password or Google sign-in authentication
  • Per-user data isolation (Row Level Security)
  • Encryption in transit (HTTPS/TLS)

4. Data sharing

We do not share your data with any third party, except:

  • Supabase — database hosting (technical subprocessor)
  • Google — if you use Google sign-in (authentication only)
  • Apple / Google — for subscription payment processing (they do not share your banking details with us)

5. Your rights

In accordance with GDPR, you have the following rights:

  • Access — view the data we hold about you
  • Rectification — correct your personal data
  • Deletion — request deletion of your account and all your data
  • Portability — receive your data in a readable format
  • Objection — object to the processing of your data

To exercise these rights, contact us at: support@pandasoft.contact

We respond to all requests within 30 days.

6. Data retention

Your data is kept as long as your account is active. If you delete your account, all your data is erased within 30 days.

7. Children's data

Tonus+ is intended for adults, particularly seniors. We do not knowingly collect data from minors.

8. Notifications

The App may send push notifications to:

  • Remind you of scheduled sessions
  • Send a daily motivation message

You can disable notifications at any time in your device settings or within the App.

9. Changes

We may update this privacy policy. In case of significant changes, we will notify you through the App.

10. Contact

For any questions regarding your personal data:

PandaSoft SASU Email: support@pandasoft.contact

This policy complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).