Privacy Policy

Last updated: 6 September 2026

Spiriators, based in the Netherlands and run by Tessa Frunt and Johannes Huijbregts, is responsible for processing personal data as described in this privacy policy. This policy covers spiriators.com and the iOS app Psoas Reset. Where something applies only to the website or only to the app, we say so.

Contact Details

Website: spiriators.com
E-mail: info@spiriators.com
Support: Contact

Scope: website, app, or both

Website only: Contact forms, e-books, challenges, course portal, cookies/analytics (Google Analytics, Microsoft Clarity), Cloudflare Turnstile on forms.
App only (Psoas Reset): In-app purchases via Apple, redeeming an existing activation code, protocol progress and journal on the device. No Google Analytics or Microsoft Clarity in the app unless we later add an in-app SDK — we will update this policy if we do.
Both: Email address for a web purchase or activation, support emails, videos via Bunny Stream when you play a lesson.

What data do we collect?

Spiriators processes your personal data because you use our services or because you provide it to us:

Contact form & introduction (website): Name, email address, message and any preferences.
E-book, newsletter & challenges (website): Name and email address (via Brevo).
Account / course portal (website): Login details and lesson progress if you create an account (Supabase).
Website visit: Usage statistics via Google Analytics and Microsoft Clarity (after cookie choice where applicable). This is not app tracking.
Psoas protocol web purchase: Name, email, order reference, language, amount and whether the order is paid/fulfilled. Payment is via Tikkie, bunq or bank transfer — there is no card checkout or Stripe widget on the site.
Psoas Reset app — activation: Email address and activation code to link web access (maximum two devices). Support may use the same email address.
Psoas Reset app — purchase via Apple: Apple processes the payment (StoreKit). We receive from Apple whether the purchase is valid (receipt / entitlement), not your full card number.
Health / fitness data: We do not request HealthKit, Clinical Health Records or Motion & Fitness data from the device. Journal, tracker and practice notes in the app stay on the device unless you email them to us for support. We do not use health or fitness data for advertising, marketing or data mining (Apple Review Guideline 5.1.3).

How do we collect this data?

You provide it: forms, email, web order, activation code, portal login.
Automatically, on the website only: cookies/analytics after cookie choice where applicable.
From Apple: whether an in-app purchase or subscription is valid (receipt / entitlement). No card number.
From Bunny Stream when you play a lesson, to deliver the video (including IP for the signed URL).

We do not compile personal information from public databases or other sources without your consent.

Why do we collect this data?

To contact you about your question, booking or registration.
To deliver e-books, challenges, the Psoas protocol (PDF + activation) and (if requested) newsletters.
To validate in-app purchases and web activation codes so you can use the protocol.
To improve the website based on usage statistics (website, not the app).

We do not use this data for targeted advertising or data sales. We do not share personal data with third-party AI. Data collected for one purpose is not reused for another purpose without a new legal basis or consent.

Tracking (app vs website)

The Psoas Reset app does not track you across other companies’ apps and websites for advertising. The app does not use App Tracking Transparency tracking or an advertising identifier (IDFA) for ads. Website analytics (Google Analytics, Microsoft Clarity) applies only to spiriators.com, not the app, and is not advertising tracking.

Analytics & cookies (website)

This website uses analytics tools to understand how visitors use the site. Cookies, similar technologies or IP addresses (anonymized) may be used. See the cookie banner for choices where applicable.

Google Analytics / related Google services: pages, session duration, referrer, global location (country/region). IP addresses are anonymized where possible. More about how Google uses data: How Google uses data when you use our partners’ sites.

Microsoft Clarity: session insights to improve the website experience.

Brevo: email delivery for e-books, challenges and order mail. You can unsubscribe via the link in the email.

How long do we retain data?

Contact inquiries: As long as needed to answer your question and close the correspondence.
Email lists: Until you unsubscribe or request deletion.
Psoas protocol web orders: As long as needed for fulfilment, activation, accounting and statutory retention (typically up to seven years for financial records).
App activation / Apple entitlement: For as long as you have access to the protocol, plus a short period afterwards for support and fraud prevention.
Analytics: According to the tool (for Google Analytics typically up to 26 months).

Sharing with third parties

Spiriators does not sell your data. We only share data with processors needed for the service, or when legally required. Where needed we conclude a data processing agreement.

Vercel — website hosting.
Supabase — accounts, portal, order records (EU).
Brevo — email.
Bunny Stream — video delivery (signed URLs).
Apple — in-app purchases and subscriptions in Psoas Reset; Apple is the merchant of record for IAP.
Tikkie / bunq / your bank — web payment for the protocol; they are payment services, not an ad network.
Google / Microsoft — website analytics, see above.

Any third party with whom we share user data (in compliance with Apple’s App Store Review Guidelines) — such as analytics tools, SDKs and the processors listed above — will provide the same or equal protection of user data as stated in this privacy policy and required by those Guidelines.

Children

The Psoas Reset app is not directed at children and is not in the Kids Category. We do not knowingly collect personal data from children under 16. If you believe we have, email info@spiriators.com and we will delete it. Website articles about yin yoga for children are for parents, not the app.

Your rights

You have the right to view, correct or delete your personal data. You may also withdraw consent or object.

To request deletion or withdraw consent, email info@spiriators.com with the email on your purchase or account. We delete activation records, portal accounts and marketing lists. We keep invoices where Dutch law requires. Deleting your account in the Psoas Reset app removes only the app login and device link — not a website account (portal, course, admin). A purchase via /ebook/psoas-reset stays in the app records (email + activation). On-device journal: delete in the app or uninstall the app. In-app purchase history is controlled by Apple. Website cookies: cookie banner or your browser. Email: unsubscribe link in each message. We respond as soon as possible, within four weeks at the latest.

Security

We take appropriate measures against abuse, loss and unauthorized access. The website uses HTTPS. Protocol videos use signed URLs.

Complaints

If you have a complaint about how we process personal data, please contact us first. You always have the right to file a complaint with the Dutch Data Protection Authority.