Privacy notice

1. Information we process

We may process your email address and authentication information, records of programs you can access, support messages and website feedback you send, and basic technical information needed to operate and secure the site. The homepage feedback form does not ask for your name or email; it records the response, page, device category, and anonymous browser identifier when available. Payment card details are collected and processed by Paddle rather than stored by LegitBodyFix.

Our first-party analytics records the page visited, random browser and per-tab session identifiers, general device category, referring website domain, campaign tags included in a link, and approximate country, region, city, and administrative area. Hosting-edge coordinates may be sent to OpenStreetMap's Nominatim service to derive a city, county, district, town, or township label; the coordinates themselves are not retained. We also store a keyed, non-reversible representation of the public IP address to recognize repeat networks without retaining the raw address. These analytics identifiers are not connected to a customer account. We do not store names, email addresses, precise GPS location, raw IP addresses, or full referring URLs in analytics.

2. Why we use it

• To sign you in and provide purchased content.
• To connect a completed purchase to your library.
• To answer support requests and restore access.
• To operate, secure, troubleshoot, and improve the service.
• To comply with legal, tax, fraud-prevention, and accounting obligations.

3. Service providers

We use service providers to operate LegitBodyFix, including Supabase for authentication, database, and file storage; Paddle for checkout, payments, tax, receipts, and transaction support; Cloudflare for video delivery and infrastructure; Vercel for application hosting and deployment; and OpenStreetMap's Nominatim service for approximate administrative-area labels. These providers process data under their own terms and privacy notices.

4. Retention and security

We keep information only as long as reasonably needed for the purposes described above, including providing ongoing purchased access, understanding aggregate site use, and meeting legal obligations. Analytics records are separated from customer account information. We use reasonable technical and organisational safeguards, but no online system can be guaranteed completely secure.

5. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a copy of personal information. Some records may need to be retained where required by law or to document a transaction. You may also contact Paddle directly about payment information it controls.

6. International processing

Our service providers may process information in countries other than your own. Where required, they use recognised safeguards for international data transfers.

7. Operator and contact

LegitBodyFix is operated by Song J. For a privacy question or request, email thriveinside@protonmail.com. For information Paddle processes as merchant of record, see Paddle’s Privacy Notice.