Privacy notice

Who we are

Pranamo is run by Messe Asia Co., Ltd., a Thai limited company (registration 0105569070485), Bhiraj Tower at BITEC, Room 23030-02, 23rd Floor, 4345 Sukhumvit Road, Bangna Tai, Bangna, Bangkok 10260, Thailand. We are the data controller.

For anything about your data, write to privacy@pranamo.com. You can also send us a note in the app: Settings → Tell us what to improve.

What we keep, and why

Your account: your name, your email if you give one, and the passkeys you add (a public key and a label, never your fingerprint or face). To give you an account and sign you in. Basis: our contract with you.

Your training: sessions, test results, levels, titles, your equipment and settings, and your reminder time. To plan your sessions and show your progress. Basis: contract.

Health information: the result of the health check (clear, or a doctor said yes; the answers themselves stay on your phone), pain you report after a set, mood check-ins, fasting times, and any reason you give for "Not today". To keep sessions safe and fitted to you. Basis: your explicit consent (PDPA section 26), which you give separately when you join.

People you train with: friends, duels and crews you join, and what they show. Basis: contract.

Reminders: if you turn them on, your browser's push address. Basis: your consent.

Notes you send us: to improve Pranamo. Basis: our legitimate interest.

Abuse limits: a one-way code made from your email or connection address, kept for at most a day, to limit sign-in emails and new guest accounts. Basis: legitimate interest.

We do not sell your data, show ads, use it for advertising, or use analytics or tracking cookies.

Cookies and your browser

One cookie keeps you signed in. Your browser also keeps a few things on your device so the app works offline and remembers your choices (your language, equipment, a session in progress). None of it tracks you.

Guests

A guest account has no email and lives in this browser. Once it has not been used for 30 days it is deleted, with everything in it. Add an email in Settings to keep it.

Who else handles it

Cloudflare, Inc. runs our servers and database and sends our emails, as our processor under its data processing terms. Your data may be stored and processed outside Thailand on its network (PDPA sections 28 and 29).

If you turn reminders on, your phone's push service (Apple, Google or Mozilla) carries them.

Friends and crew members see only what the friend and crew screens show them, such as your name, level and sessions done.

How long we keep it

For as long as your account exists. When you delete it (Settings → Your data → Delete), everything about you is deleted at once; copies in our database provider's backups are gone within 30 days.

Sign-in links last 15 minutes, email confirmations 24 hours, abuse-limit codes a day.

Your rights

You can get a copy of your data (Settings → Your data → Download), have it corrected, have it deleted (Settings → Your data → Delete), object to or restrict its use, and withdraw a consent. Withdrawing the health consent means deleting your account, as sessions cannot be planned safely without it.

Write to privacy@pranamo.com; we answer within 30 days. You can also complain to the Personal Data Protection Committee (PDPC).

Age

Pranamo is for people aged 18 or older.

If something goes wrong

If a breach puts your data at risk, we tell the PDPC within 72 hours and tell you without delay when the risk to you is high.

Changes

We will say in the app when this notice changes, and ask again where your consent is needed.