World Spa App Privacy Policy

Effective date: October 9, 2026

This policy explains how THEWORLDSSPA LLC (“World Spa”, “we”, “us”) collects, uses and protects personal information in the World Spa mobile apps (“The World Spa” on Google Play and on the App Store, together the “App”). Our website has its own Website Privacy Policy.

World Spa, 1571 McDonald Ave, Brooklyn, NY 11230, USA. Privacy contact: [email protected], +1 718 500 3772.

1. Information we collect

Information you give us

Account: salutation, first and last name, email address, mobile phone number, password, country; optionally your address, title and birthday; your answer to whether you are 18 or older.
Guests under 18: the name and address of a parent or legal guardian.
Members: your World Spa member number and last name or email when you sign in as a member.
Bookings and purchases: the access passes and treatments you book, dates, times, number of guests, add-ons, your therapist gender preference, promo codes, and your orders.
Second guest (couples treatments): the salutation, name, email address and phone number of the guest you book for.
Payment: on our secure payment page the cardholder’s name and billing address. Card numbers are entered directly into the payment form of our payment provider (Adyen, through TAC’s TACPay); World Spa and the App do not receive or store your full card details.

Information collected automatically

App usage and diagnostics: through Google Firebase (Analytics, Crashlytics and Remote Config) we collect how the App is used (screens viewed, sessions), crash logs, device and app information, and app identifiers such as the Firebase installation ID.
Approximate location: Google Analytics derives an approximate location (such as city or region) from your IP address. The App does not access your precise location.
Push notifications: if you allow notifications in the World Spa app while signed in, the app gives us a token from Google’s Firebase Cloud Messaging that lets us reach the app on your phone. We keep it with your account’s email address and use it only to send you news and offers from World Spa. You can turn notifications off at any time in your phone’s settings. When you sign out of the app or delete your account, the app asks us to delete the token.
The App does not use the advertising ID and contains no ads. It does not access your contacts, photos, camera, microphone or files.

Stored only on your device

Your sign-in tokens and name are stored securely on your device and are excluded from cloud backups.

2. How we use information

To create and manage your account and let you sign in.
To book and hold your visits and treatments, take payment and send confirmations.
To provide customer service and contact you about your bookings.
If you agree, to send text messages such as appointment reminders, transactional updates and offers.
To keep the App secure, fix crashes and improve the App.
To meet legal, tax and accounting obligations.

3. How we share information

We do not sell your personal information. We share it only with service providers that process it on our behalf and under our instructions:

TAC, our booking and point-of-sale system, which stores guest profiles, bookings and orders;
Adyen (through TAC’s TACPay), which processes card payments;
Google Firebase, for analytics, crash reporting, app configuration and push notifications;
the providers that send our emails and text messages.

We may also disclose information when required by law, to protect our rights and the safety of our guests, or as part of a business transfer.

4. Data retention and deletion

We keep your account information while your account is active. You can delete your account at any time in the App (Journey > profile icon > Edit Profile > Delete Account) or as described on our account deletion page. When you delete your account we delete your guest profile and sign you out of all devices. We keep the records of your orders, invoices and passes for as long as legal, tax and accounting rules require, and then delete them. App usage and crash data is kept for limited periods set in our Firebase configuration.

5. Your choices

You can view and update your profile in the App.
You can withdraw consent to marketing text messages or emails at any time by contacting us.
Depending on where you live, you may have rights to access, correct or delete your personal information. Contact us at [email protected].

6. Security

All data between the App and our servers is encrypted in transit (HTTPS). Card payments are handled by a payment provider that meets the payment card industry’s security standards.

7. Guests under 18

World Spa is a facility for guests 18 and older; guests aged 16 and 17 may visit with a parent or guardian. If a guest under 18 registers in the App, we ask for the details of a parent or legal guardian. The App is not directed to children and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

8. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date.

9. Contact us

THEWORLDSSPA LLC (World Spa), 1571 McDonald Ave, Brooklyn, NY 11230, USA
Email: [email protected]
Phone: +1 718 500 3772