Health Data Notice

1. What health information we process

• Your health declaration: what you write when we ask whether there is anything a coach should know before your class, such as an injury, a medical condition or a pregnancy.
• Your answer that you have nothing to report. In that case we keep no description of your health, only the date you answered.
• The health note a studio writes about you in its own client records. That note is the studio's responsibility, and Fraym only stores it on the studio's behalf.

We do not collect health information from your phone, smartwatches or other apps, we do not use Apple Health, and we do not infer anything about your health from your bookings.

2. Where it comes from

From you, when you write it while creating your account, in your profile or in the health question; and from the studio, when it writes its own note.

3. What we use it for

Only so the studios where you book and their coaches know how to look after your safety in class. It is shown next to your name on the attendee list and on your record inside the studio's panel.

We never use it for advertising, promotions, profiling, segmentation or statistics; we never send it to artificial intelligence models; we never sell it; and we never use geofencing or your location in connection with your health.

4. Your consent

When you choose to tell us something about your health we ask for two separate consents, which you tick yourself: one for Fraym to keep it and one for the studios where you book and their coaches to see it. Without both, nothing is saved. This is how we meet the express written consent Mexican law requires for sensitive data, and the separate consent required by the health data laws of Washington, Nevada and Connecticut. If you are between 13 and 17, your parent or guardian also authorises it when your account is created.

You can withdraw your consent whenever you want by choosing No, nothing to report in your profile: we delete it immediately and the studios stop seeing it.

5. Who we share it with

• The studios, spas, salons and brands where you are a client, and their staff, who need it to look after you.
• Our database and hosting providers (Supabase, Inc. and Vercel Inc., in the United States), which only store it on our behalf and may not use it for anything else.

We do not share it with any other third party, including affiliates, advertisers, insurers or artificial intelligence providers.

6. Your rights

You can ask us, free of charge, to:

• Confirm whether we process your health information and give you access to it, together with the list of studios and providers that have received it.
• Delete it. From your profile you delete it instantly; if you delete your account we also delete it from every studio's records. We delete it from our backups within 90 days at the latest.
• Withdraw your consent, as explained in section 4.

Write to privacidad@joinfraym.com from your account's email. We reply within 45 days, which we may extend once by another 45 if needed, letting you know. If we deny your request, you may appeal by replying to our email with the word Appeal; we decide within 45 days and, if you disagree, you may contact your state's Attorney General (in Washington, www.atg.wa.gov). In Mexico you can also exercise your ARCO rights as explained in the Privacy Notice.

7. Security and retention

It can only be seen by the people at the studios where you are a client and by the Fraym staff who need it to support you. We keep it until you delete it or delete your account.

8. Contact

Fraym Growth Systems, S.A. de C.V., Av. Santa Fe No. 546, Int. 39 E, Col. Santa Fe Cuajimalpa, Cuajimalpa de Morelos, Ciudad de México, C.P. 05348, México. Email: privacidad@joinfraym.com. This notice is part of our Privacy Notice.