Bod by Bree Privacy Policy
Effective date: October 2026
Bod by Bree LLC ("Bod by Bree," "we," "us" or "our") operates bodbybree.com and the Bod by Bree mobile and web apps (together, the "Service"). This policy explains what personal information we collect, how we use and share it, and the choices you have. We use your information to provide and improve the Service. By using the Service, you agree to this policy. Terms not defined here have the meanings in our Terms of Use at bodbybree.com/terms.
Definitions
• Personal Data means information about a living person who can be identified from that information, alone or combined with other information we have or are likely to have.
• Usage Data means information collected automatically when you use the Service, such as how long you spend on a page.
• Cookies are small pieces of data stored on your device.
• Data Controller means the person or company that decides why and how Personal Data is processed. For this policy, Bod by Bree LLC is the Data Controller of your Personal Data.
• Data Processor (or Service Provider) means any person or company, other than our employees, that processes Personal Data on our behalf.
• Data Subject or User means the living person using the Service whose Personal Data we process.
1. Information we collect
Information you give us
• Name and email address, including the email you use for the app if it differs from your billing email
• Phone number and billing address, if you provide them
• Profile details, posts, comments, messages and journal entries you add in the app
• Health and fitness information you choose to share for personal training or nutrition guidance, such as goals, injuries or health conditions, measurements, progress photos, food preferences and allergies
• Messages you send us
Payment information. Payments are processed by Stripe, Apple, Google or Authorize.net. We do not store your full card number. We receive limited details such as your plan, payment status and the last four digits of your card.
These processors use your payment information under their own privacy policies and follow the PCI-DSS security standard, managed by the PCI Security Standards Council (a joint effort of brands like Visa, Mastercard, American Express and Discover): Stripe, Apple App Store, Google Play, Authorize.net.
Information collected automatically
• Usage data: the pages and workouts you view, when, and for how long; your device type, operating system, browser, IP address and device identifiers
• Cookies and similar technologies, used to keep you logged in, remember your preferences, keep the Service secure and, where described below, measure and personalize our advertising. We use session cookies to operate the Service, preference cookies to remember your settings, and security cookies for security. We and our partners may also use beacons, tags and scripts to analyze the Service. You can set your browser to refuse cookies or to tell you when a cookie is sent, but parts of the Service may not work. Where the law requires it, such as in the EU and UK, we ask for your consent before using non-essential cookies, and you can change your choice at any time. Our emails may contain web beacons or tracking pixels that tell us whether an email was opened or a link was clicked, so we can improve our messages; you can limit this by turning off automatic image loading in your email app.
Location data. If you give us permission, we may use and store information about your location to provide and improve features of the Service. You can turn location services on or off at any time in your device settings.
Information from others. We receive payment confirmations and plan details from our payment processors when you buy a membership or program. If you sign in with a third-party service such as Facebook, we receive the information that service shares with us, such as your name, email address and profile picture, as permitted by your settings with that service.
2. How we use your information
• To create and run your account and give you access to your membership and programs
• To process payments, renewals and cancellations, and send receipts and billing notices
• To send service messages, such as login details, welcome emails and changes to our terms, and text messages if you opt in
• To send news, offers and fitness content. You can unsubscribe from marketing emails at any time using the link in any email.
• To let you use interactive features, such as community walls and messaging, and to provide customer support
• To understand how the Service is used and improve it
• To keep the Service secure, prevent fraud or misuse, and detect and fix technical issues
• To comply with the law and enforce our terms
Health and fitness information. We use the health and fitness information you share only to provide and personalize your training and nutrition guidance and to keep you safe. We never sell it or use it for advertising, and only Bod by Bree and the service providers that store it for us can access it. You can ask us to delete it at any time. Where the law treats it as sensitive information, such as in the EU and UK, we process it only with your explicit consent, which you can withdraw at any time.
3. How we share your information
We do not sell your personal information. We share it only as follows:
Service providers who help us run the Service and may only use your information to do that work:
• Stripe: Payment processing for memberships and programs bought on our website
• Apple and Google: In-app purchases made through the App Store or Google Play
• BuildFire: Hosts the Bod by Bree app and your app account
• GoHighLevel: Customer records and email
• Zapier: Connects our systems, for example to set up your app access after purchase
• Google Analytics: Website and app usage statistics. Google may use this data under its own policies, including to personalize ads in its network.
Advertising. We may use advertising services from Google and Meta (Facebook) that use cookies to show you our ads on other sites based on your visits to our Service. You can opt out through Google Ads Settings, Meta's ad preferences, or aboutads.info/choices.
Opt-out links
• Google Analytics: install the Google Analytics Opt-out Browser Add-on. Google's practices: Google Privacy Policy.
• Google ads personalization: Google Ads Settings.
• Facebook and Instagram (Meta) ads: Meta's instructions for opting out of interest-based ads. Meta's practices: Meta Privacy Policy.
• Many advertising companies at once: Digital Advertising Alliance, or your phone's ad settings.
Outside the United States: Digital Advertising Alliance of Canada and European Interactive Digital Advertising Alliance.
Other sharing
• If the law requires it or a court or government agency validly requests it, or to protect the rights, property or safety of Bod by Bree, our members or others, to prevent or investigate possible wrongdoing in connection with the Service, or to protect against legal liability
• If our business is sold or merged, in which case we will notify you before your information becomes subject to a different policy
• With your permission
4. How long we keep it
We keep your information while your account is active and as long as needed to provide the Service, keep financial and tax records, resolve disputes and enforce our agreements. Usage data is generally kept for a shorter time, unless it is needed for security, to improve the Service or because the law requires it. We may keep information longer if there is a complaint or we reasonably believe there may be a legal dispute. When information is no longer needed, we delete or anonymize it. Anonymized information can no longer be linked to you, and we may use it for research or statistics indefinitely.
5. Your choices and rights
You can update most account details in the app. You can also email bree@bodbybree.com to:
• Get a copy of the personal information we hold about you
• Receive the information you gave us in a commonly used electronic format, so you can move it elsewhere (data portability)
• Correct or update information that is wrong or incomplete
• Delete your account and personal information, subject to records we must keep by law
• Limit or object to how we use your information
• Withdraw any consent you gave us, at any time
• Stop marketing emails and texts (or use the unsubscribe link, or reply STOP)
We may ask you to confirm your identity before acting on a request. Where the law allows, we may decline requests that are repetitive, require disproportionate effort, put others' privacy at risk or are otherwise unreasonable. If you delete your account, we may keep some information for our records as the law allows. Content you posted publicly in community areas, and information already shared with service providers as described in this policy, may remain and is subject to their policies. Even if you opt out of marketing, we may still contact you about important matters such as your account, billing or security. We do not sell your personal information. If you live in California or another state with its own privacy law, you may have additional rights; email us and we will respond as that law requires.
Do Not Track. The Service does not currently respond to browser Do Not Track signals.
Members in the EU, UK and other countries. If data protection laws such as the EU or UK General Data Protection Regulation (GDPR) apply to you:
• Why we use your information (legal bases): to perform our contract with you (your membership, programs and training); with your consent (for example, marketing, non-essential cookies, location and health information); for our legitimate interests in running, securing and improving the Service; and to comply with the law.
• Your rights: in addition to the rights above, you can ask us to restrict processing, and you can complain to the data protection authority in your country.
• Response time: we respond to requests within one month, or within the time your local law requires.
• Members in other countries, such as Canada, Australia or Brazil, have the rights their local law gives them. Email us and we will respond as that law requires.
6. Security
We use encryption in transit (SSL/TLS) and other reasonable measures to protect your information, and our payment processors follow the PCI-DSS card security standard. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Please help protect your account by using a strong, unique password and keeping it private.
7. Where your information is stored
We are based in the United States, and your information is stored and processed in the United States. If you use the Service from another country, you agree to your information being transferred to the United States, where privacy laws may differ from yours. We take reasonable steps to make sure your information is handled securely and in line with this policy wherever it is processed, and we do not transfer it to an organization or country without adequate controls in place. Where required, such as for transfers from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as the Standard Contractual Clauses our service providers offer, or on your consent.
8. Children
The Service is not intended for children under 13, or under the minimum age for consenting to data use in your country (up to 16 in some European countries), and we do not knowingly collect their personal information without verified parental consent. If you believe a child under 13 has given us information, email bree@bodbybree.com and we will delete it.
9. Links to other sites
The Service may link to sites we do not operate. Their privacy practices are governed by their own policies, which we encourage you to review. We have no control over and are not responsible for their content or practices.
10. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date and, for material changes, notify active members by email or in the app before the change takes effect. We encourage you to review this policy periodically.
11. Contact us
Bod by Bree LLC, Carlsbad, CA 92009 · bree@bodbybree.com
