Your information, handled with care.

• We collect what's needed to run the app and serve you well.
• We use a small set of trusted vendors to operate the site.
• You can request a copy of your data or ask us to delete it.
• We never sell your data.

• Account info — name, email, phone number when you sign up, book a service, or contact us.
• Bookings & orders — services chosen, appointment times, products purchased.
• Messages — anything you send us through forms, SMS, or email.
• Our own site statistics, only if you click Accept on the cookie banner — the pages you view (without anything after a "?" in the address), the website that sent you here (its domain only), campaign tags in the link, your browser and device type and approximate country, the steps of the booking form, and a random visitor ID kept on your device. We use this to improve content and fix problems. If you don't click Accept, we don't record these ourselves (our host's visit statistics are described below).
• Error and performance reports — when a page is slow or breaks, a report goes to us, and performance and error measurements go to our platform partner Multraverse (below). Without Accept a report carries only the page path, the measurements and a short description of the error and where in our code it happened, with e-mail addresses, phone numbers, web addresses and long codes removed, and nothing is stored on your device. With Accept it may also carry the page address, the technical details of the error, the random visitor ID, your account ID if you're signed in, and your browser and device type. Separately, our website host's own script records page errors, including their technical details, on every visit (see below). Private link codes (such as the code in a payment or intake link) are removed from every report we send.
• Cookies and similar storage — without Accept, the site stores what it needs to work, such as your sign-in, your cart and your cookie choice, plus our host's statistics cookie, which lasts about 30 minutes (below). Accept adds the random visitor IDs described above. Our payment processor, Stripe, loads its checkout and sets its own fraud-prevention cookies only when you open checkout to pay. Our fonts are served from this site, not from a third party.

Our website host, Lovable, also records visits to this site for site statistics. It does this on every visit, whatever you choose on the cookie banner, using a session cookie that lasts about 30 minutes, and records the page address, the address of the page that sent you here, your browser and device type, your approximate country, and page errors (including their technical details) and loading times.

• Run your account, bookings, orders, and customer support.
• Send transactional messages (appointment confirmations, receipts, account notices).
• Share wellness content and offers you've opted into. You can opt out anytime.
• Keep the app secure and prevent abuse.

This app is built and operated as a tenant on the Multraverse.ai platform. Multraverse provides the underlying infrastructure that powers parts of the app — including authentication, SMS and email delivery, push notifications, payments routing, file storage, and AI features.

When you use those features, the necessary data (for example, your phone number when we send an SMS, or your email when we send a transactional message) is processed by Multraverse on our behalf as a service provider. Multraverse does not own your data and does not use it to market to you. GPWA remains responsible for how your information is handled in this app.

We share data only with vendors that help us run the app:

• Hosting, database, and authentication infrastructure.
• Payment processors (e.g. Stripe) for orders and bookings.
• Communications providers for SMS, email, and push delivery (routed through Multraverse).
• Our website host (Lovable), which also records visit statistics (see "What we collect").
• We use no advertising tools.

Each vendor is bound by contract to use your data only to provide their service to us.

If you give us your phone number or email, we may send you account, booking, and order messages. Marketing messages are opt-in only. Reply STOP to any SMS to unsubscribe, or use the unsubscribe link in any marketing email. Message and data rates may apply.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

Phone numbers are shared only with the messaging providers that deliver texts on our behalf, and only so those messages can be sent to you.

• Access, correct, or delete your data — email us anytime.
• Opt out of marketing messages.
• Choose Accept or Reject on the cookie banner, and change your mind any time with "Cookie settings" at the bottom of every page. Your choice is kept on this device for 6 months, then we ask again. Reject deletes the visitor IDs from your device straight away.
• Close your account by writing to kate@mygpwa.com.

We keep your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

When you submit a booking, we record the attempt — your name, email, phone, the time you asked for, and your browser and device details — so we can follow up if the payment fails. If you accepted cookies, we also save what you had typed before submitting and the booking steps you took, so we can help if you got stuck. These records are deleted after 60 days.

The app isn't directed to children under 13. If you believe a child has provided information to us, contact us and we'll remove it.

We'll update this page when our practices change and revise the "Last updated" date above. Significant changes will be announced in-app.

Questions? Email kate@mygpwa.com. See also our Terms of Service.