Website Privacy Policy

Last updated: June 6, 2026

Policy scope

Website TL;DR:

✓You can choose essential cookies only
✓PostHog analytics is enabled only after your consent
✓You can change cookie choice anytime from the footer
✓Website analytics data is used to improve pages and UX

1. Scope

This section applies to the Buli website operated by Buli Fitness Oy (Business ID 3601232-9). It covers website visits, pages, and forms. It does not replace or override the app-specific privacy rules shown in the App rules tab.

2. Website Cookies and Analytics (PostHog)

We use PostHog analytics on the website to understand traffic, improve product pages, and record user sessions (such as clicks, scrolls, and navigation) to diagnose issues and enhance the user experience. PostHog analytics is enabled only after you accept analytics cookies. Form inputs are masked during session recording for your privacy. If you select Essential only, PostHog stays disabled.

3. Data We Process on the Website

We may process technical usage data such as page paths, device and browser information, referral data, and interaction events. If you submit forms, we process the details you provide (for example, email address for waitlist/newsletter), and we also process your IP address for rate limiting and abuse prevention and store a server-side record of the submission (email, the form context/source, and timestamp). We share this data only with processors acting on our behalf: PostHog (product analytics and session recording), Resend (email delivery and newsletter audience), and hCaptcha (spam and abuse prevention).

4. Purpose and Legal Basis

We process website data to operate the site, protect security, measure performance, and improve content. Analytics cookies are processed based on consent where required.

5. Retention

We keep website data only as long as needed: newsletter and waitlist records until you unsubscribe or ask us to delete them; server-side submission records for as long as needed to operate and support the service; rate-limiting and abuse-prevention data only transiently; and PostHog analytics according to our configured retention. We delete or anonymize data once it is no longer needed, unless longer retention is required by law.

6. Your Choices and Rights

You can change analytics consent at any time from Cookie settings in the footer, and withdrawing consent does not affect processing already carried out. Under the GDPR you have the right to access, correct, delete, restrict, or object to processing of your personal data, and the right to data portability; you can exercise these or request deletion via support@bulifitness.fi. Some of our processors (such as PostHog, Resend, and hCaptcha) may process data outside the EU/EEA; where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. The controller is Buli Fitness Oy (Business ID 3601232-9). You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu, www.tietosuoja.fi) or another competent supervisory authority.