Skip to content
Rinpa
Open the app

Legal

Privacy

You can use Rinpa without an account. In that case your answers, progress and preferences are stored only in the browser on your device. Your safety screening answers never leave your device, even if you create an account: our server receives no data about your health. We do not sell your data and we do not show ads.

Controller

  • Owner: José Antonio Neto Suárez (Utropia)
  • Tax ID: ES29607219D
  • Address: C/ Manuel Vela 37, 13, 21440 Lepe, Huelva, Spain
  • Contact: hello@utropia.es

What is stored on your device

Your safety screening answers and any go-aheads you mark, with their dates; your goals, time, time of day, guide and language; the sessions you do and what you answer when you finish them. All of it is kept in your browser’s storage and never reaches us. You can delete it from the app (You › Delete my data from this device) or by clearing the site’s data in your browser.

If you create an account

An account is optional. It lets you save your progress and carry on on another device. All you need is your email: to sign in, we send you a 6-digit code, with no password.

  • What we keep: your email; your profile (goals, time, time of day, guide and language); your progress (sessions done, time practiced and moves practiced); and the state of your access (learning week, plan or free version).
  • What we do not keep: your safety screening answers or your go-aheads. They stay on each device, which is why we ask again if you switch devices.
  • Why: to give you access, sync your progress across devices and send you service emails: your sign-in code, two or three emails about your learning week (with a link to stop them) and, if your plan renews, the notices before each renewal.
  • Legal basis: providing the service you ask for (Article 6(1)(b) GDPR).
  • How long: for as long as you have the account. If you ask us to delete it, we delete its data, except anything the law requires us to keep. If you do not use it for three years, we email you a month before and delete it with everything it holds, unless you have a plan in force.

Reminders

If you turn them on, we remind you at the time you choose with a browser notification, a calendar event or an email. For notifications, we store the technical address your browser creates to receive them, your time zone, the times you chose and the length of your routine, which we use to write the reminder. We use no health data. The legal basis is your consent, and you can turn them off at any time. Without an account, we delete the subscription of a browser that has not opened the app for two years.

Payments

Payments are handled by a payment provider that acts as the seller to you: it charges you, issues the invoice and handles your payment details under its own privacy policy. We never see or store your card details. From that provider we receive what we need to give you access: the plan, its status, its dates and the email you paid with.

Visits to the website

We count how many visits each page gets and where they come from (a search engine, an AI assistant, a social network or a campaign), and which search engine robots read it. These are daily totals: we use no cookies and keep no IP address, browser details or anything else that identifies you.

How the app is used

To learn what works and what does not, we record some usage data ourselves, with no third-party tools: for example, whether a session is started, left at a given step or finished, or whether the payment screen is shown. It never includes your screening answers. If something fails in your browser, we keep the technical error (the message, the page and the type of browser), with nothing about you. Without an account, this data is deleted after two years. The legal basis is our legitimate interest in improving the service (Article 6(1)(f) GDPR), and you can object by writing to us.

Waitlist

If you joined the waitlist, we keep your email, your language, the page you signed up from and the dates you gave and confirmed your consent. We do not keep your name, your IP address or anything about your health.

  • Why: to send you one email to confirm your address and another on launch day. We will send nothing else and never share your email.
  • Legal basis: your consent (Article 6(1)(a) GDPR), given by ticking the box and confirming from the email.
  • How long: if you do not confirm within 7 days, we delete the address. If you confirm, we keep it until we send the launch email and then delete it.
  • Leaving: every email has a link to leave the list, which deletes your email straight away. You can also write to us.

Who helps us

We use hosting and email providers, which process data only on our behalf, as processors. We do not share your data with anyone else unless the law requires it.

Cookies

Neither this website nor the app uses tracking or advertising cookies. They only use the technical cookies and storage they need to work, for example to keep you signed in or to save your progress on your device.

Your rights

You can delete the data on your device from the app (You › Delete my data from this device). For your account or waitlist data, you can ask us for access, correction, erasure, portability or objection by writing to the contact address. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.