Privacy Policy
Last updated: October 23, 2026
1. Data Controller and Contact Information
This Privacy Policy explains how personal data is processed in connection with Tai Chi Walking, including the website and quiz funnel at taichiwalkingcoach.app, the member area at home.taichiwalkingcoach.app, the Tai Chi Walking programme, personalized movement and nutrition-related guidance, AI-supported features, subscriptions, customer support, and related online services (collectively, the "Services").
This Privacy Policy governs personal-data processing only. Commercial rights relating to purchases, subscriptions, cancellation, refunds, or Money-Back Guarantees are governed by the applicable checkout terms, Terms of Service, Subscription Terms, Money-Back Policy, and mandatory law.
Default data controller: PMC Baltic FZ-LLC. Registration / Licence No.: 45001684. Registered address: SFFO0507 Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.
Privacy / support email: hello@taichiwalkingcoach.app
The data controller may differ from the Seller, contracting party, Merchant of Record, billing entity, payment processor, gateway, acquiring partner, or payment administrator for a particular transaction. Handling a payment does not by itself make an entity the controller of all Tai Chi Walking data.
2. Categories of Personal Data
2.1 Data You Provide
Depending on how you use the Services, you may provide:
- email address, account and contact information;
- quiz or questionnaire answers and personalization inputs;
- movement and wellness check-ins, including stiffness, energy, ease of movement, tension, balance, posture, breathing, daily routines, goals, and related observations;
- information about joint discomfort, past injuries, current conditions, areas that need to be treated gently, movements that aggravate discomfort, and other health- or wellness-related information you choose to provide;
- meal, snack, drink, ingredient, cooking, timing, appetite, sleep, stress, and energy information;
- meal or snack photos, ingredient-label or nutrition-panel photos, and related descriptions that you choose to upload;
- messages or prompts submitted to AI-supported or personalized features, and responses or outputs generated through those features;
- programme progress, completed activities, session history, preferences, and other in-Service inputs;
- feedback, customer-support communications, complaints, technical reports, cancellation, refund, or dispute requests and supporting evidence; and
- information used to verify a privacy-rights request where applicable.
2.2 Automatically Collected Data
When you use the Services, technical and usage information may be collected where implemented, including IP address, browser and device information, language, time zone, referring URLs, session identifiers, timestamps, pages or screens viewed, feature interactions, login and access events, security logs, and related metadata. Campaign, attribution, advertising, or analytics identifiers may also be collected where those activities are implemented and permitted by applicable law.
2.3 Payment and Transaction Data
Complete payment-card details are generally handled by the applicable payment provider rather than stored directly by the Service where that payment flow is used. We may receive limited payment and transaction metadata such as customer or transaction identifiers, secure tokens, payment-method information, limited card information where provided by the payment provider, amount, currency, timestamp, payment status, subscription status, refund or reversal status, and dispute or chargeback information where relevant.
2.4 Sensitive, Special-Category and Health-Related Information
Because the Services may invite information about pain or discomfort, injuries or current conditions, mobility, stress, sleep, energy, food and nutrition, and other aspects of physical or mental well-being, some information you provide may qualify as sensitive, special-category, or consumer health data under applicable law.
Providing this information is voluntary. Where explicit consent or another special legal basis is required before processing sensitive or special-category information, we will rely on the appropriate legal basis for the relevant processing activity. Withdrawal of consent does not retroactively invalidate processing that was lawful before withdrawal.
Where a jurisdiction requires a separate Consumer Health Data Privacy notice or additional health-data consent, that separate notice or consent process may apply.
2.5 AI and Personalized Feature Data
Messages, prompts, photos, health- or wellness-related inputs, meal information, progress information, and other relevant personalization data may be processed to generate personalized movement guidance, routines, food or meal suggestions, progress summaries, schedules, and other Service outputs.
Where third-party AI, hosting, or technical providers are used to support these features, they may process relevant data only as necessary for the applicable functionality and subject to the roles and safeguards described in this Policy and applicable law.
3. Purposes and Legal Bases
Depending on the processing activity and jurisdiction, personal data may be processed to:
- provide and administer the Services, accounts, subscriptions, member access, programme content, personalization, and customer support under a contract or to take steps at your request before entering into a contract;
- personalize movement guidance, routines, meal-related educational content, and other features using the information you provide;
- process payments, administer subscriptions, handle refunds or reversals, maintain accounting records, and comply with legal obligations;
- protect accounts, prevent fraud and abuse, manage risk, and maintain Service security based on legitimate interests or legal obligations where applicable;
- analyze and improve the Services using consent where required or another lawful basis where permitted, but only for analytics tools that are actually implemented;
- send transactional and service communications necessary for the Services or legal compliance;
- send marketing communications using ActiveCampaign or another configured communication tool where permitted by law, using consent where required;
- operate advertising, attribution, or experimentation only where those activities are actually implemented and permitted, subject to applicable consent or opt-out requirements; and
- establish, exercise, or defend legal claims and resolve refunds, complaints, disputes, chargebacks, and alleged unauthorized transactions.
Where processing is based on consent, you may withdraw that consent at any time. Where processing is based on legitimate interests, you may have the right to object under applicable law.
5. Payments, Subscriptions, Refunds and Disputes
Transaction data may be processed to administer purchases and subscriptions, confirm access, handle failed payments, process refunds or reversals, prevent fraud, maintain accounting records, investigate allegedly unauthorized transactions, respond to payment-provider or card-network disputes, and manage chargebacks.
Where reasonably necessary, order records, checkout or acceptance records, transaction terms, delivery or access logs, cancellation records, usage status, support and refund communications, payment-provider records, fraud indicators, and chargeback history may be retained and used to resolve disputes, establish amounts owed, enforce applicable policies, and establish, exercise, or defend legal claims.
This Privacy Policy does not determine whether a refund or Money-Back Guarantee claim is eligible.
6. Storage, Retention, Deletion and International Transfers
6.1 Retention
Personal data is retained only for as long as reasonably necessary for the purposes described in this Policy, subject to legal, accounting, tax, fraud-prevention, security, dispute, chargeback, refund, regulatory, and limitation-period requirements. Retention may differ by data category and operational purpose. De-identified information may be retained while it remains non-identifying, subject to applicable law.
6.2 Deletion and Account Closure
A valid deletion request is handled subject to applicable law and lawful retention exceptions. Closing or deleting an account does not necessarily require immediate deletion of every transaction, accounting, consent, fraud, security, support, dispute, refund, chargeback, or legal-claim record that the controller is permitted or required to retain. When personal data is no longer required, it will be deleted or de-identified in accordance with the applicable retention framework.
6.3 International Transfers
Some service providers may process personal data outside your country of residence. Where personal data is transferred outside the European Economic Area, the United Kingdom, or another jurisdiction that restricts international transfers, legally recognized safeguards will be used as applicable, which may include adequacy mechanisms, Standard Contractual Clauses, or other lawful transfer tools. No participation in a specific transfer framework is claimed unless separately confirmed.
7. Recipients and Service Providers
Personal data may be disclosed to service providers and other recipients only as reasonably necessary for the purposes described in this Policy. Recipient categories may include, where relevant to the Services:
- ActiveCampaign for email, CRM, and communication functions;
- payment, billing, Merchant of Record, acquiring, banking, or card-network participants applicable to the relevant transaction;
- hosting, database, authentication, security, and technical infrastructure providers used by the Services;
- AI or automated-processing providers, where actually used to deliver the AI-supported features;
- analytics, experimentation, advertising, or attribution providers only where actually implemented;
- professional advisers, insurers, accountants, and legal service providers; and
- public authorities, regulators, courts, payment networks, banks, card issuers, or law-enforcement bodies where required or permitted by law.
Depending on the activity, a third party may act as a processor or service provider, or may independently determine purposes and means of processing under its own privacy notice.
8. Privacy Rights and Choices
Depending on applicable law and your location, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or other legally available privacy choices, subject to applicable conditions and exceptions. You may also have rights concerning targeted advertising, statutory sale or sharing, or sensitive-data processing where the applicable law and actual data practices create those rights.
We may need to verify your identity or authority before acting on a privacy-rights request. Privacy-rights requests may be submitted to hello@taichiwalkingcoach.app.
8.1 Marketing Choices
Where marketing communications are sent, you may use the unsubscribe mechanism provided in the message or contact us to exercise an applicable marketing choice. Opting out of promotional marketing does not stop necessary transactional, account, billing, subscription, security, support, policy, or legal communications.
9. Security
Reasonable administrative, technical, and organizational measures are used to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage can be guaranteed to be completely secure. Security and incident-related records may be retained where reasonably necessary for investigation, prevention, documentation, legal compliance, or claims.
10. Third-Party Services
Payment providers, hosting providers, email or CRM providers, AI providers, analytics or advertising services, and other third parties may independently process some information under their own privacy notices. This Policy describes processing controlled by or carried out on behalf of the controller identified above in connection with the Services. A request concerning data controlled solely by a third party may need to be directed to that third party.
11. Business Transfers
Personal data may be reviewed, disclosed, or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, insolvency, dissolution, or transition of the Services to another operator, subject to applicable safeguards and mandatory law.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the Services, technology, vendors, payment infrastructure, business practices, group operations, or legal requirements. Where applicable law requires additional notice or consent for a material privacy change, that notice or consent will be provided or obtained.
13. Language
The English version of this Privacy Policy is the original version. If a translated or localized version differs from the English version, the English version controls to the extent permitted by applicable law. Mandatory local-language requirements remain unaffected.
Contact Information
Email: hello@taichiwalkingcoach.app
Operator: PMC Baltic FZ-LLC
Registration / Licence No.: 45001684
Registered address: SFFO0507 Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates