Privacy Policy

We collect information you provide directly to us when you:

• Create an account (name, email address, password)
• Purchase a membership (billing address, payment details processed securely via our payment provider)
• Complete your profile or progress tracker (fitness goals, body measurements, progress photos you choose to upload)
• Contact us via our contact form or email
• Participate in community features, challenges, or events

We also collect certain information automatically when you use our platform, including your IP address, browser type, device identifiers, pages visited, and time spent on the platform.

We use the information we collect to:

• Provide, maintain, and improve our platform and services
• Process your membership subscription and payments
• Send you transactional emails (receipts, password resets, account notifications)
• Send you marketing communications where you have opted in (you can opt out at any time)
• Personalise your experience and track your progress
• Respond to your enquiries and provide customer support
• Monitor and analyse usage patterns to improve our services
• Comply with our legal obligations

Where the UK GDPR or EU GDPR applies, we process your personal data on the following legal bases:

• Contract performance — to deliver the membership services you have purchased
• Legitimate interests — to improve our platform, prevent fraud, and communicate with you about your account
• Consent — for marketing emails and optional analytics cookies
• Legal obligation — where we are required to retain or disclose data by law

We do not sell your personal data. We may share your information with:

• Payment processors — to handle subscription billing securely
• Email service providers — to send transactional and marketing emails
• Analytics providers — to understand how our platform is used (data is anonymised where possible)
• Legal authorities — where required by law or to protect our rights

All third-party providers are contractually required to handle your data securely and in accordance with applicable data protection law.

We retain your personal data for as long as your account is active or as needed to provide our services. If you cancel your membership, we will retain your data for up to 2 years for legal and accounting purposes, after which it will be securely deleted. You may request earlier deletion — see Section 7.

We use cookies and similar tracking technologies to operate our platform and understand how it is used. These include:

• Essential cookies — required for the platform to function (login sessions, security)
• Analytics cookies — to measure usage and improve our service (requires your consent)
• Marketing cookies — to deliver relevant advertising (requires your consent)

You can manage your cookie preferences at any time via your browser settings or our cookie consent banner.

Under UK and EU data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — ask us to limit how we process your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment information is encrypted and processed by PCI-DSS compliant providers — we never store your full card details on our servers.

Your data may be processed by service providers located outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in accordance with applicable law.

Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are significant, notify you by email or via a notice on our platform.

If you have any questions about this Privacy Policy or how we handle your data, please get in touch:

• Email: [email protected]
• Website: rarestrengthapp.com/contact