PRIVACY POLICY

We take your privacy seriously. This policy explains what data we collect, why we collect it, and how you can control it. If you have questions, email support@lockedinclub.app.

INFORMATION WE COLLECT

We collect information you provide directly to us when you create an account, complete onboarding, or contact us. This includes:

• —Account data: Your name, email address, and password (stored as a secure hash via Supabase Auth).
• —Profile data: Fitness goals, fitness level, available equipment, workout duration preferences, and dietary preferences — collected during onboarding to personalize your experience.
• —Payment data: Billing information is processed by Stripe. We store only your Stripe customer ID and subscription status — we never see or store your full card number.
• —Usage data: Pages visited, content viewed, check-ins completed, courses started, and community posts — used to improve the product and personalize your feed.
• —Communications: Messages you send via the community, support requests, or feedback forms.

HOW WE USE YOUR INFORMATION

We use the information we collect to:

• —Create and manage your account and membership
• —Personalize your workout, nutrition, and course recommendations
• —Process your subscription payments via Stripe
• —Send transactional emails (receipts, password resets, membership status)
• —Send product and community emails if you have opted in via MailerLite
• —Improve the platform, fix bugs, and develop new features
• —Enforce our Terms of Service and prevent fraud or abuse
• —Comply with legal obligations

THIRD-PARTY SERVICES

We share data with trusted third-party services that help us operate the platform:

• —Supabase — Database and authentication. Your account data, profile, and content interactions are stored on Supabase's infrastructure. Supabase is SOC 2 compliant. See supabase.com/privacy.
• —Stripe — Payment processing. Stripe handles all credit card data. We never store raw payment details. See stripe.com/privacy.
• —MailerLite — Email marketing. If you subscribe to our newsletter or membership, your email and name are synced to MailerLite for transactional and marketing emails. You can unsubscribe at any time via the link in any email. See mailerlite.com/legal/privacy-policy.
• —Netlify — Hosting and CDN. Our app is served via Netlify's infrastructure. See netlify.com/privacy.
• —Google Analytics — Aggregate, anonymized usage analytics (page views, session counts). We do not share personally identifiable information with Google Analytics.

We do not sell your personal data to any third party.

COOKIES

We use cookies and similar technologies to:

• —Keep you logged in across sessions (Supabase Auth session cookie)
• —Remember your preferences
• —Collect anonymized analytics via Google Analytics

You can control cookie behavior through your browser settings. Disabling cookies may affect your ability to log in or use certain features.

DATA RETENTION

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance reasons (e.g., financial records for tax purposes).

YOUR RIGHTS

Depending on your location, you have the following rights regarding your personal data:

• —Access: Request a copy of the personal data we hold about you.
• —Correction: Request that we correct inaccurate or incomplete data.
• —Deletion: Request that we delete your account and associated personal data. We will complete deletion within 30 days except where retention is required by law.
• —Export / Data Portability: Request a machine-readable export of your data in a common format.
• —Restriction: Request that we restrict processing of your data in certain circumstances.
• —Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in any email, or by emailing us directly.

**California Residents (CCPA):** If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information to third parties. To exercise your CCPA rights, email support@lockedinclub.app with the subject line "CCPA Request."

**EU / UK Residents (GDPR):** If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation including the right to access, correct, delete, and port your data, the right to object to or restrict certain processing, and the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing is contract performance (to provide the service you signed up for) and legitimate interests (to improve and operate the platform). To exercise your GDPR rights, email support@lockedinclub.app.

To exercise any of these rights, email us at support@lockedinclub.app. We will respond within 30 days.

DATA BREACH NOTIFICATION

In the event of a data breach that is reasonably likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and within 72 hours of becoming aware of the breach, as required by applicable law. Notification will be sent to the email address associated with your account and will describe the nature of the breach, the data affected, and the steps we are taking to address it.

CHILDREN'S PRIVACY

Locked In Club is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the platform after changes constitutes your acceptance of the updated policy. For material changes, we will send an email notification to active members.

CONTACT

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

support@lockedinclub.app

Locked In Club lockedinclub.app