Privacy Policy

Effective date: June 1, 2026

This Privacy Policy applies to the Reach Mobility app and the reachmobility.co website (collectively, the "Service"), operated by Decy Technologies Inc., operating as Reach Mobility ("we", "us", or "our"). It describes what personal information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service.

Personal information we collect

We collect information in two ways: automatically when you use the Service, and directly when you choose to provide it.

Collected automatically

  • IP address
  • Approximate location inferred from IP address
  • Hardware and software details (device type, operating system, browser)
  • Anonymous session identifier assigned at first app launch
  • Push notification token (a device identifier assigned by Apple or Google, collected only if you enable daily stretch reminders)

Collected when you choose to provide it

  • Email address (optional, only if you create an account for multi-device sync)
  • Activity preferences: the sports or activities you train for (for example, pickleball, tennis, golf)
  • Body area preferences: body parts you want to focus on or avoid during routines
  • Fitness experience level (Beginner, Intermediate, or Pro)

How we use your information

  • Account authentication, security, and data synchronization across your devices
  • Maintaining technical infrastructure
  • Protecting our backend against spam and malicious abuse
  • Detecting and resolving system errors
  • Optimizing performance for different device types

Third-party service providers

We share limited data with the following third-party providers to operate the Service. These providers act as data processors on our behalf.

Supabase, Inc.

Cloud database storage and user authentication.

Data shared: network request metadata (IP address, browser type), unique session identifiers, email address (if you opt in for account persistence), push notification token (if you enable reminders), activity and body area preferences, and completed session records (activity type, duration, and streak progress).

Vercel Inc.

Secure application hosting for the reachmobility.co website.

Data shared: network request metadata (IP address, browser type) collected through standard server-side request logs.

Supabase and Vercel are based in the United States. Data transferred to their infrastructure is subject to applicable US law, including potential access by US law enforcement. We do not sell your personal information to any third party.

Where your data is stored

Your data may be stored and processed in Canada, the United States, and, for users in the European Union or United Kingdom, in those respective regions. Any transfer of personal data outside of the EU or UK is made only where adequate data protection is in place or under standard contractual clauses approved by the relevant authority.

How long we retain your data

We retain your personal information only as long as necessary to fulfill the purposes described in this policy. When data is no longer needed, we delete or anonymize it. If we need to retain data longer for legal reasons, we will notify you.

How we protect your data

  • All data is transmitted over HTTPS (encrypted in transit)
  • Data at rest is encrypted within our cloud infrastructure
  • Supabase database access is controlled by row-level security policies
  • On mobile, your data benefits from iOS and Android app sandboxing protections
  • Authentication uses secure, short-lived tokens

No method of electronic transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

Children

The Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us at info@decy.co and we will promptly delete it.

Your privacy rights (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:

  • Right to be informed about how your data is used
  • Right of access to the personal data we hold about you
  • Right to rectification of inaccurate personal data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing of your data
  • Right to data portability
  • Right to object to processing

To exercise any of these rights, contact us at info@decy.co. We will respond within the timeframes required by applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have provided one) or by posting a notice on the website. The effective date at the top of this page will always reflect when the policy was last updated.

Contact us

If you have questions or concerns about this Privacy Policy, please contact Decy Technologies Inc. at:

Reach Mobility
Decy Technologies Inc.
2803-433 11 Ave SE
Calgary, AB T2G 0C7
Canada
info@decy.co
(403) 861-0725