MITHO S.A.S.
Bogotá D.C., Colombia
Email: hola@mitho.co
Support: Support Center
We collect the data listed below solely to operate the MITHO app and deliver our services.
| Category | Data | Source |
|---|---|---|
| Contact Info | Full name, date of birth | App registration |
| Contact Info | Email address, phone number | App registration |
| Usage Data | Class preferences, booking and attendance history | App usage |
| Health & Fitness | Physical practice preferences (yoga, pilates, barre). We do not collect clinical health data or biometric metrics. | App registration |
| Purchases | Transaction history, active plan type. We do not store card data. | Mercado Pago |
| Identifiers | Push notification token | iOS / Android OS |
| Diagnostics | Device type, OS version, preferred language | Operating system |
| Purpose | Legal Basis |
|---|---|
| Account management and authentication | Contract performance |
| Process bookings and payments | Contract performance |
| Send class push notifications and reminders | Consent |
| Personalize class recommendations | Legitimate interest |
| Marketing and promotions | Consent |
| Analytics and service improvement | Legitimate interest |
| Legal and accounting compliance | Legal obligation |
MITHO does not sell, rent, or trade your personal data to any third party under any circumstances. We do not share your data for third-party advertising purposes.
If you grant notification permission on your iOS or Android device, we use your push token — managed via Expo, Apple APNs, and/or Google FCM — to send class reminders, credit alerts, and studio communications. You can revoke this permission at any time in your device settings under Settings → Notifications.
We share data only with the following providers to operate our service:
Your data may be stored on servers located in the United States (DigitalOcean — New York). We maintain appropriate contractual and technical safeguards to protect your data in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013.
Under Colombian Law 1581 of 2012 and applicable international standards, you have the right to:
To exercise these rights, email hola@mitho.co. We respond within 15 business days.
You can delete your account directly inside the app: Profile → Delete my account. Your email and password are deactivated immediately upon confirmation.
You can also request deletion by emailing hola@mitho.co. Transaction records are retained anonymously for 5 years to comply with legal obligations.
We protect your data with: HTTPS/TLS encryption in transit, bcrypt password hashing (12 rounds), mandatory SSL database connections, and role-based access controls. No card data is stored on our servers.
The MITHO app is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at hola@mitho.co and we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after notification constitutes acceptance of the updated policy.
Privacy inquiries: hola@mitho.co
Support: Support Center
Colombian supervisory authority: Superintendencia de Industria y Comercio (SIC) — www.sic.gov.co