yoga · pilates · barre

Privacy Policy

Last updated: April 21, 2026
BY ACCESSING OR USING THE MITHO APP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND ACCEPTED THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE APP.

1. Data Controller

MITHO S.A.S.
Bogotá D.C., Colombia
Email: hola@mitho.co
Support: Support Center

2. Data We Collect

We collect the data listed below solely to operate the MITHO app and deliver our services.

CategoryDataSource
Contact Info Full name, date of birth App registration
Contact Info Email address, phone number App registration
Usage Data Class preferences, booking and attendance history App usage
Health & Fitness Physical practice preferences (yoga, pilates, barre). We do not collect clinical health data or biometric metrics. App registration
Purchases Transaction history, active plan type. We do not store card data. Mercado Pago
Identifiers Push notification token iOS / Android OS
Diagnostics Device type, OS version, preferred language Operating system

3. How We Use Your Data

PurposeLegal Basis
Account management and authenticationContract performance
Process bookings and paymentsContract performance
Send class push notifications and remindersConsent
Personalize class recommendationsLegitimate interest
Marketing and promotionsConsent
Analytics and service improvementLegitimate interest
Legal and accounting complianceLegal obligation

4. We Do Not Sell Your Data

MITHO does not sell, rent, or trade your personal data to any third party under any circumstances. We do not share your data for third-party advertising purposes.

5. Push Notifications

If you grant notification permission on your iOS or Android device, we use your push token — managed via Expo, Apple APNs, and/or Google FCM — to send class reminders, credit alerts, and studio communications. You can revoke this permission at any time in your device settings under Settings → Notifications.

6. Service Providers

We share data only with the following providers to operate our service:

7. International Data Transfers

Your data may be stored on servers located in the United States (DigitalOcean — New York). We maintain appropriate contractual and technical safeguards to protect your data in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013.

8. Data Retention

9. Your Rights

Under Colombian Law 1581 of 2012 and applicable international standards, you have the right to:

To exercise these rights, email hola@mitho.co. We respond within 15 business days.

10. Account Deletion

You can delete your account directly inside the app: Profile → Delete my account. Your email and password are deactivated immediately upon confirmation.

You can also request deletion by emailing hola@mitho.co. Transaction records are retained anonymously for 5 years to comply with legal obligations.

11. Security

We protect your data with: HTTPS/TLS encryption in transit, bcrypt password hashing (12 rounds), mandatory SSL database connections, and role-based access controls. No card data is stored on our servers.

12. Children

The MITHO app is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at hola@mitho.co and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after notification constitutes acceptance of the updated policy.

14. Contact and Supervisory Authority

Privacy inquiries: hola@mitho.co
Support: Support Center
Colombian supervisory authority: Superintendencia de Industria y Comercio (SIC)www.sic.gov.co