Legal

Privacy policy

Last updated 1 September 2026

This policy explains what we do with your personal data. It is written to comply with the UK General Data Protection Regulation and the Data Protection Act 2018.

Who we are

LEGAL_ENTITY, of TRADING_ADDRESS, is the data controller for the personal data described here. You can reach us at SUPPORT_EMAIL.

What we collect and why

Data	Why	Lawful basis
Name and email address	To deliver your access and support you	Performance of a contract
Payment confirmation and order reference	To confirm your purchase and handle refunds	Performance of a contract; legal obligation
Answers you give the app (age band, goal, dietary restrictions)	To generate your routine	Performance of a contract
Your progress in the app (lessons watched, habits ticked)	To show your dashboard and save your place	Performance of a contract
Marketing emails	To send you tips and offers	Consent, or soft opt-in for existing customers
Website analytics and advertising identifiers	To understand what works and measure our ads	Consent

Card details. We never see or store them. Payments are processed entirely by PAYMENT_PROVIDER, who acts as a separate controller for that transaction under their own privacy policy.

Health-related information

Some answers you give the app may touch on your health. We treat these as special category data. We only use them to generate your routine inside the app, we do not use them for advertising, we do not sell them, and we do not share them with any third party for their own purposes. If you would rather not provide them, you can skip those questions and the app will give you a general routine instead.

Who we share it with

We share the minimum necessary with processors who help us run the service: PAYMENT_PROVIDER for payments, EMAIL_PROVIDER for sending email, and our hosting provider for storing the site and app. Each is bound by contract to use your data only on our instructions.

We do not sell your personal data, and we do not share it with data brokers.

Cookies and advertising

We use cookies that are strictly necessary for the site to work, which do not require your consent. Anything beyond that — analytics and advertising pixels, including those operated by Meta and Google — is only set after you agree via our cookie banner. You can change your mind at any time through the banner or your browser settings.

Where an advertising pixel is used, information about your visit may be shared with that platform for measurement and audience building. You can usually control this in your own ad settings on that platform.

International transfers

Some of our providers are based outside the UK, including in the United States. Where data leaves the UK, it is protected by UK adequacy regulations or by the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Account and access data: for the length of your access period, plus two years — so that your progress is still there if you come back.
Purchase and tax records: six years, as required by HMRC.
Marketing consent records: until you withdraw consent, plus two years.
Support emails: two years from the last message.

Your rights

Under UK data protection law you have the right to be informed, the right of access, and the rights to rectification, erasure, restriction, portability and objection. You can also withdraw consent at any time where consent is the basis we rely on.

To exercise any of these, email SUPPORT_EMAIL. We respond within one month, and we do not charge for it.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

Marketing emails

Every marketing email we send has an unsubscribe link that works immediately. Unsubscribing from marketing does not affect the emails we must send you about your purchase and your access.

Children

This product is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Security

Access to the site and app is served over HTTPS. Access to member data is restricted to those who need it to run the service. No system is perfectly secure, and we will tell you and the ICO without undue delay if a breach is likely to affect your rights.

Changes

If we change this policy we will update the date at the top, and for material changes we will email active members.