REKOOP Privacy Policy

Last updated: 4 August 2026

This policy describes how REKOOP (“we”, “us”) handles your information when you use the REKOOP mobile app and member web app (the “Service”). REKOOP membership is by invitation: you can create a sign-in with Sign in with Apple, with Google, or with an email address and password, but bookings, credits and recovery protocols are only available to members whose account we have set up.

Information we collect

• Account information — your name and email address, provided when your membership account is created, and your login credentials (passwords are stored only as secure hashes by our authentication provider). If you sign in with Google, we receive your Google account email and name. If you use Sign in with Apple, we receive only your name and email address — and if you choose “Hide My Email”, we receive only Apple’s private relay address and never see your real one.
• Wellness check-ins — the answers you submit in the daily check-in (mood, energy, sleep quality, soreness, stress). These are used to personalise your experience.
• Bio-scan results — the wellness measurements derived from a face scan, such as pulse rate, breathing rate, heart-rate variability, stress and wellness indices. See Camera and the bio-scan below for how the camera is used.
• Bookings and membership activity — sessions you book, reschedule or cancel, your recovery protocol, and your session-credit balance and history.
• Usage data — in-app events (e.g. screens viewed, actions taken) tied to your account, used to improve the Service.

We do not collect payment card details in the app (there are no in-app purchases), precise location, contacts, your photo library, or advertising identifiers, and we do not track you across other apps or websites.

How we use your information

• Provide the Service: sign-in, daily check-ins, recovery recommendations, session bookings and credit management.
• Personalise your recovery experience and let the REKOOP team tailor your protocol.
• Operate, secure and improve the Service.

We do not sell your personal information, and we do not use your data for third-party advertising or cross-app tracking.

Camera and the bio-scan

The optional bio-scan uses your device’s front camera. When you start a scan, the camera frames are analysed entirely on your device by an embedded measurement library (BioSense Signal). Video and images are never recorded, never saved to your device or photo library, and never uploaded to REKOOP or any third party — the frames are discarded as the scan runs.

Only the numeric results of the measurement (for example pulse rate, breathing rate and the stress and wellness indices listed above) are sent to our backend and stored against your account, so you can see your history and so the REKOOP team can tailor your protocol. The camera is used only while a scan is in progress, only after you tap to start it, and only with the camera permission you grant. You can decline camera access and continue to use every other part of the app.

The bio-scan is a wellness feature. It is not a medical device and does not diagnose, treat or monitor any disease or condition.

Where your data lives

Your data is stored with our backend provider Supabase (managed Postgres and authentication). Booking and membership records are also maintained in Salesforce, which the club uses to run its operations. If you contact the concierge, that conversation happens in WhatsApp under WhatsApp’s own terms and privacy policy.

Sharing

We share data only with the processors above (Supabase, Salesforce), and with the REKOOP club team who deliver your membership. We may disclose information if required by law.

Retention & deletion

We keep your data while your membership is active.

Deleting your account. You can delete your REKOOP account yourself, at any time, from inside the mobile app: open Profile, tap Delete account, type DELETE to confirm, and confirm once more. No email, phone call or concierge request is needed.

Deletion is immediate and permanent. It erases your sign-in, your profile, every bio-scan and biomarker reading, your daily check-ins, your past and upcoming bookings, your credit balance and history, and your recovery protocol. Any remaining session credits are forfeited. There is no recovery, and no deactivation-only option — the account is gone.

Operational records the club must keep for its own accounting and legal obligations (for example a record of sessions delivered and paid for, held in Salesforce) may be retained separately from your app account. You can also email us to access or correct your data, and we will action it within 30 days.

Security

Data is encrypted in transit (TLS) and at rest by our providers. Access is restricted to authenticated sessions and role-based rules.

Children

The Service is for adults and is not directed at children under 16.

Changes

We’ll update this page when the policy changes and note the date above.

Contact

REKOOP, Singapore — home@rekoop.asia