Privacy Policy

• Full name, date of birth (optional), and gender (optional) — collected at registration
• Email address
• Payment information — processed exclusively by Stripe. We never store your card details.
• Video watch progress, viewing history (video, trainer, and seconds watched — retained 2 years), favourites, bookmarks, playlist and trainer follows, content-category interests, and playback preferences — to power your personalised experience
• Marketing attribution — UTM campaign parameters (source, medium, campaign) are stored in your account record; a referral attribution cookie (st_referral) is also set for 30 days when you arrive via a trainer link
• Trainer video audio — used to generate automatic subtitles (applies to trainers only, not regular members)

To activate your account, process payments, send transactional and lifecycle emails (verification, password reset, payment reminders, account notifications) via SendGrid, personalise your content feed, and improve the platform.

We never sell your data. Data is shared only with the following processors:

• Stripe — payment processing. Your email address and account metadata are shared with Stripe when you subscribe. Card details are entered directly on Stripe's secure form and are never stored by Salem Moves.
• Cloudflare — hosting, file storage, video delivery, automatic subtitle translation (Workers AI), bot prevention (Turnstile — used on sign-in and registration forms), and privacy-first page analytics (Cloudflare Web Analytics, loaded on all pages)
• ElevenLabs — trainer video audio is sent to ElevenLabs for Speech-to-Text subtitle generation. Audio is processed under ElevenLabs' standard data-retention policy.
• Google Analytics — visit analytics, enabled only if you opt in via the cookie-consent banner
• SendGrid (Twilio) — transactional and lifecycle email delivery. Your email address and the full content of emails sent to you (verification, password reset, welcome, payment notifications) are transmitted to SendGrid's API for delivery.

If you are an EU or UK resident, GDPR grants you these rights:

• Access to your personal data
• Correction of inaccurate information
• Right to deletion — submit a request via our support channel (WhatsApp); requests are processed manually
• Restriction of processing

Contact us via WhatsApp to exercise any of these rights.

We use the following cookies:

• Essential: authentication cookies (HttpOnly, SameSite=Strict) — required for sign-in to work. A locale-preference cookie (NEXT_LOCALE, 1-year lifetime) remembers your language choice.
• Functional: referral/attribution cookie (st_referral) — 30-day lifetime, used to attribute visitors to referring trainers. The cookie identifier is also stored server-side to link your visit to the referring trainer. This is not an advertising cookie and does not share data with third parties.
• Analytics (with consent): Google Analytics — activated only if you choose "Analytics" in the cookie-consent banner.

Your account data is retained while your account is active. Specific retention periods apply to certain data: viewing history — 2 years; in-app notifications — 1 year; security and audit logs (including IP address and browser information) — 2 years; session tokens — 30 days. To request full account deletion, contact us via WhatsApp — requests are handled manually. Self-serve account deletion from the dashboard is not currently available.

Privacy questions: WhatsApp