Privacy Policy

1. About this policy

This Privacy Policy explains how Let's Get Fit, LLC, a Kentucky limited liability company ("Let's Get Fit," "we," or "us"), collects, uses, shares, and protects your information when you use our websites, apps, and services (the "Service"). It should be read together with our Terms of Service. If you don't agree with this policy, please don't use the Service.

2. Information you give us

When you create an account and use the Service, you give us:

• Account details — your name, email, and login credentials, including two-factor authentication.
• Profile and health information — the meals, workouts, habits, supplements and medications, body and health metrics, goals, and check-ins you choose to log.
• Content and messages — photos, notes, and messages you send to or receive from a coach.
• Support — anything you send us when you contact us.

You control what you log. Some features won't work without certain information, but you decide what to enter.

3. Information we collect automatically

When you use the Service, we collect the limited technical information needed to run and secure it — for example, device and browser type, app version, IP address, and basic usage and error logs. For website and product analytics we use Fathom Analytics, a privacy-friendly, cookieless tool that reports in aggregate and does not build personal profiles or track you across other sites. We use this information to keep the Service working, secure, and reliable — not to build advertising profiles.

4. Health and other sensitive data

We treat the health and fitness data you log as sensitive. We do not sell it, and we do not share identifiable health data with third parties for their own marketing. It's used to provide the features you've asked for — your own tracking, and coaching if you've opted into it — and to keep the Service secure.

5. How we use your information

• to provide, personalise, and maintain the Service;
• to enable the coaching, tracking, messaging, and reminder features you opt into;
• to communicate with you about your account, security, and the Service;
• to keep the Service safe — preventing abuse, fraud, and unauthorised access;
• to improve the Service and fix problems; and
• to meet our legal obligations.

6. How we share information

We share identifiable information only as needed to run the Service:

• With your coach — when you choose to work with a coach, the data you've shared for that relationship is visible to them. You control this.
• With service providers — companies that host, secure, email, or otherwise help us operate the Service, under contracts that limit them to that purpose.
• For legal and safety reasons — when we're required to by law, or to protect the rights, safety, and security of our users or the public.
• In a business transfer — if we're involved in a merger, acquisition, or sale of assets, information may transfer as part of that, subject to this policy.

We do not sell your personal information, and we do not share identifiable personal or health data with third parties for their marketing. Separately, we may share de-identified, aggregated data as described in the next section.

7. De-identified and aggregated data

To help fund the Service and advance health research, we may create de-identified, aggregated data from your information and share it with partners. De-identified data is stripped of anything that identifies you — your name and identity, photos, messages, and raw individual records never leave Let's Get Fit in identifiable form. The partner categories we may share aggregated data with are:

• research and academic partners;
• insurers;
• pharmaceutical and life-sciences companies; and
• employer wellness programs.

You can opt out of having your data included in these de-identified, shared datasets at any time from your settings, and we will honour that choice. You can read the full plan on our Health-data page.

8. AI features

Some features may use automated or AI-assisted tools to help you log entries or surface patterns in your own data. To generate responses, these features may send relevant information to trusted third-party AI providers (currently Anthropic; we may add others). Those providers are contractually prohibited from using your data to train their own models. We may use your information to develop and improve our own features and models. We do not routinely read your AI interactions — a person only reviews one in the rare case where you flag it to us. Before using any AI feature, you'll be asked to accept a separate AI disclaimer. AI features are in development and are not available at launch.

9. Emails and communications

Our outbound emails are link-only: they don't contain message bodies or other private content — to read a message or see your data, you sign in to the Service. We send:

• Account and security emails — required for your account; these can't be turned off.
• Notifications — which you can manage in your settings.
• Product and marketing emails — news and updates, each with a clear unsubscribe link you can use at any time.

10. Cookies

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and keep the Service secure. Our analytics (Fathom) is cookieless, and we don't use advertising cookies. See our Cookie Policy for details and choices.

11. How long we keep your data

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account or specific content, we delete or de-identify it within a reasonable period. Some information may be kept longer where the law requires it — and because much of what you store here is health-related, certain records may be subject to longer legal retention periods than you might expect. We keep only what we need, for as long as we need it. [Retention specifics will be confirmed with counsel.]

12. How we protect your data

We use encryption in transit and at rest, require two-factor authentication, restrict internal access, and keep audit logs. No system is perfectly secure, but security is a core part of how the Service is built. You can read more on our Security page.

13. Data breaches

If a security breach affects your personal information, we will notify affected users and any regulators without undue delay and as required by applicable law.

14. Your rights and choices

You can:

• access and export the data you've logged;
• correct information that's wrong;
• delete your content or your whole account; and
• manage what you share with a coach, and your notification preferences.

Depending on where you live, you may have additional rights over your information. To make a request — or if you have questions about your rights — use the tools in the Service or contact us.

15. Children

The Service isn't for anyone under 18, and we don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.

16. Where your data is processed

We and our service providers currently process and store your information in the United States, and the Service is intended for users in the United States. If we begin offering it in other regions, we'll update this policy and add any data-transfer protections the law requires before we do.

17. Changes to this policy

We may update this policy. If we make material changes, we'll notify registered users — for example, by email — and update the "last updated" date above.

18. Contact

Questions about your privacy or this policy? Reach us through our contact page or at privacy@letsget.fit. You can also write to us at: Let's Get Fit, LLC, 1890 Star Shoot Pkwy, Suite 170 PMB 406, Lexington, KY 40509.