PRIVACY POLICY Hot Body Fitness hotbodyfitnessapp.com Last updated: October 6, 2026

Protecting your privacy is important to us. This Privacy Policy explains how Click Digital, Inc. ("Hot Body Fitness," "Hot Body," "we," "us," or "our") collects, uses, shares, and protects information in connection with the Hot Body Fitness mobile application, the website at hotbodyfitnessapp.com, and related online or offline offerings (together, the "Service" or "Services").

This Privacy Policy does not apply to third-party websites, services, or applications, even if they are accessible through the Service. Unless we define a term here, capitalized words have the same meanings as in our Terms of Service. This Privacy Policy is incorporated by reference into our Terms of Service. Please read both.

This Privacy Policy is intended to meet requirements in the jurisdictions where we operate, including the United States (including California), and, where applicable, other regions. It applies to current, prospective, and former customers, users, visitors, and guests (together, "Individuals" or "you").

Account deletion. You may delete your account at any time in the app account settings, or by emailing privacy@hotbodyfitnessapp.com. We describe what deletion covers in Section 8 below.

1. Revisions

Information collected through the Service is covered by the Privacy Policy in effect at the time it is collected. We may revise this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and notify you by posting the revised policy on the Service, in the app, or by email or other notice required by law. If you continue to use the Service after the updated policy is posted, you will be deemed to have accepted it. If you do not agree, stop using the Service. Before we use personal information for a new purpose that is not reasonably compatible with the purposes described here, we will provide notice and, where required, a chance to opt out or additional consent.

2. Information We Collect

What we collect depends on how you use the Service. We try to collect only what is relevant to the purposes described in this policy.

2.1 Information you provide

- Account information: email address, username, password or other authentication credentials, and similar details needed to create and secure your account. - Profile information: name, date of birth or age, sex, height, starting weight, goals, preferences, and other details you choose to provide. - Communications: email address, phone number, mailing address, and the contents of messages when you request information, join a newsletter or program, request customer or technical support, or otherwise contact us. - Workout and check-in data: workout logs, sets and repetitions, exercises performed, body measurements, progress check-ins, and personal notes. - Nutrition data: meals and foods you log (including by photo or voice), nutrition targets and macro calculations, and meal plans generated for you. - Bloodwork and lab results: if you upload a lab report, we extract and store the test results and values so they can be tracked over time and used to answer questions through AI coaching features. - Photos: progress photos you choose to upload, stored privately and associated with your account. - AI chat data: messages you send to and receive from our AI coaching assistant, and any photos or documents you attach (for example, a bloodwork report). - Surveys, contests, and sweepstakes: information you voluntarily provide if you participate. Contact information may be used to administer the promotion and, unless you opt out, for other promotional purposes disclosed on the entry form. - Public posts: if you post on blogs, community forums, fun pages, or similar features, we collect what you submit. Content you place in a public area is public and is not subject to the same privacy protections as private account data. - Referrals: if you use a "tell a friend" or similar feature, we use the email address you provide only to send the content or invitation you request.

2.2 Information collected automatically

As you use the Service, we and our providers may collect technical and usage information, including IP address, cookie identifiers, mobile carrier, mobile advertising identifiers, device identifiers (such as an advertising ID), browser type and language, hardware type, operating system, app version, Internet service provider, pages or screens you visit before and after using the Service, date and time, time spent, links clicked, diagnostic data, and other actions taken in the Service.

Location. We may collect approximate location by converting your IP address into a rough geolocation, or precise or coarse location from your device if you enable location services. We use location to operate and personalize the Service. You can disable location in your device settings.

2.3 Information from other sources

We may receive information from third parties to supplement what you provide. If you create an account with login credentials from a social networking service, we may access your name and other information your privacy settings on that service allow. We may also receive information from app stores, payment processors, analytics providers, and advertising or attribution partners, limited to what is needed to operate the Service.

2.4 Health and fitness platform data

You may instruct us to share certain information with systems such as Apple HealthKit or Google Fit, and to access information from those systems to improve the services we provide. Before you do, review that system's privacy policy, because information you instruct us to share becomes subject to it. Be careful about allowing other apps, services, or people to access your information through that system.

- We do not use or disclose to third parties data gained through HealthKit or Google Fit for advertising, use-based data mining, or similar purposes, other than to improve health or for health or medical research. - Sharing of HealthKit or Google Fit information is only to enable a third party to provide health or fitness services, or for medical research, and only as you direct or as described here. - We do not sell information gained through HealthKit or Google Fit to advertising platforms, data brokers, or information resellers. - We do not use information obtained through HealthKit or Google Fit for any purpose other than providing health and fitness services in connection with the Service.

2.5 Purchase information

When you buy a subscription or merchandise, payment is processed by a third party, which may include the Apple App Store, Google Play, the Amazon Appstore (together, "App Stores"), or Stripe or another payment processor. The processor collects financial information needed to complete the payment, such as name, email, billing address, and payment details. We receive limited transaction information, such as payment confirmation and subscription status. We do not store your full payment card number.

3. Cookies and Similar Technologies

We and third parties that provide content, advertising, or other functionality may use cookies, pixel tags, local storage, and similar technologies ("Technologies") to recognize your device, remember preferences, measure use, and secure the Service.

- Cookies are small text files placed on your device. We may use session cookies (deleted when you close the browser) and persistent cookies to recognize that you are logged in, understand how you use the Service, monitor aggregate traffic, and customize the Service. You can block or delete cookies in your browser. If you do, some features may not work. This policy covers our use of cookies, not cookies set by third parties for their own purposes. - Pixels (web beacons) are tiny graphics used to deliver or communicate with cookies, measure performance, count visitors, and measure advertising. - Social widgets (for example, a share button) may collect your IP address and the page you are visiting, and may set a cookie. Your interaction with a widget is governed by the provider's privacy policy. - Analytics. We may use Google Analytics, including demographics and interest reporting, to understand visitor behavior. That analytics data is not tied by us to your account profile for advertising. You can learn more at https://www.google.com/policies/privacy/partners/ and opt out at https://tools.google.com/dlpage/gaoptout.

We use these Technologies in four general ways: (1) operationally necessary functions, security, and fraud prevention; (2) performance measurement and analytics; (3) functionality, such as keeping you signed in and remembering preferences; and (4) advertising or targeting, including measuring whether content was useful. You can block, delete, or disable non-essential Technologies in your browser or device. Cookie-based opt-outs must be done on each browser and device. Industry opt-out tools include https://optout.networkadvertising.org/, https://www.youronlinechoices.eu/, and https://optout.aboutads.info/.

Do Not Track. Our Service does not respond to browser "Do Not Track" signals. You can use the cookie and advertising controls described above.

4. How We Use Information

We use personal information to:

- Create, secure, and maintain your account, and provide access to features of the Service. - Provide, personalize, and improve workouts, programs, nutrition tracking, progress tools, and AI-powered coaching. - Process purchases, manage subscriptions, and communicate about billing and account status. - Respond to questions, comments, and support requests, and verify your identity. - Send operational messages you cannot opt out of, such as updates to these terms, security notices, and billing information. - Measure interest in the Service, develop new products, and perform internal quality control and research, including with de-identified or aggregated data. - Send newsletters, offers, and marketing about Hot Body Fitness products and services by email, push notification, phone, or mail, where permitted by law. You can opt out as described below. - Administer surveys, events, sweepstakes, and contests. - Prevent fraud, prohibited or illegal activity, and enforce our Terms. - Comply with law, respond to legal process, and protect the rights, safety, and property of Hot Body Fitness, our users, and others.

We do not sell your personal information. We do not use your health, fitness, nutrition, photo, or bloodwork data for advertising or marketing, and we do not use it to make insurance, credit, or employment decisions about you.

Ideas you submit. If you send us ideas, inventions, concepts, or know-how through the Service, we may use that content to develop and market goods or services. We will not publicize your name in connection with that submission unless you give permission, we notify you first that the submission will be published with your name, or the law requires it.

Anonymized and aggregated information. We may create de-identified or aggregated information (for example, demographic or usage statistics) and use or share it for research, analytics, and other lawful purposes. We maintain and use de-identified data without attempting to re-identify it, except as allowed by law to test our methods.

5. AI-Powered Features

Hot Body Fitness offers optional AI-powered features, including an AI coaching assistant and AI-assisted meal logging from photos or voice. These features are operated by Click Digital, Inc. as part of the Service.

When you use them, the information involved — which may include your chat messages, photos or documents you share (such as a bloodwork report), and, when the assistant looks it up to answer you, your workout, nutrition, weight, check-in, and bloodwork data — is processed by us and by subprocessors we engage to generate a response. We maintain administrative, technical, and physical safeguards designed to protect health-related information processed for these features, consistent with applicable health-privacy standards, and we may retain conversation history to provide ongoing, personalized coaching.

By using these AI features, you consent to that processing. You can decline by not using AI coaching or AI meal logging. The rest of the Service remains available without them. Questions: privacy@hotbodyfitnessapp.com.

6. How We Share Information

We do not share personal information we collect from or about you except as described below.

6.1 Service providers

We engage providers who process information on our behalf and under our instructions, only as needed to perform the contracted services or comply with law. We require them to protect it to a standard consistent with this policy. Categories include:

- Infrastructure and authentication, which stores account, profile, workout, check-in, nutrition, and photo data. - Payment processing and subscription management, including Stripe and the App Stores. Those providers handle payment details under their own privacy policies. - Transactional email, including Resend, for account, welcome, and similar messages. - AI and model-inference subprocessors engaged by Click Digital, Inc. to power the AI features described above. - Customer support, analytics, hosting, security, and IT providers. - Marketing service providers, who may use personal information only to help us market our own products and services and may not transfer it for their own purposes. Opt out at privacy@hotbodyfitnessapp.com.

Workout demonstration videos may be delivered through an embedded YouTube player. Your interaction with that player is subject to Google's privacy practices.

6.2 Business partners and affiliates

We may share personal information with affiliates for internal business purposes, or with a business partner to provide a product or service you requested or that we jointly offer. In a joint offer, the partner's name will appear with Hot Body Fitness. We require affiliates and partners who maintain information on our behalf to keep it confidential and to use it only for the purpose we provided it.

6.3 Legal, safety, and business transfers

We may access, preserve, and disclose information if we believe in good faith that it is necessary or appropriate to: respond to legal process or law-enforcement or national-security requests; protect the rights, property, or safety of you, us, or others; prevent or stop activity we consider illegal, unethical, or legally actionable; respond to your requests; collect amounts owed; prevent physical harm or financial loss; or investigate suspected illegal activity. Server logs, including IP addresses, may be reviewed for security and shared with law enforcement investigating unauthorized activity.

Information we collect is a business asset. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be disclosed or transferred to a successor or counterparty, subject to this policy or a successor policy with notice where required.

We may share aggregated or non-identifying information for industry research, demographic profiling, and similar purposes. Aside from the cases in this section, we do not share your personal information with third parties for their own marketing purposes.

7. Your Choices

Marketing. You can opt out of promotional emails by using the unsubscribe link in the message, and opt out of marketing use of your information by emailing privacy@hotbodyfitnessapp.com. You cannot opt out of transactional messages about your account, billing, security, or changes to our Terms or this policy. We honor do-not-call and do-not-mail requests as required by law, generally within 60 days or sooner if the law requires.

Push notifications and location. Opt out in your device settings.

Cookies and interest-based ads. Use the browser, device, and industry controls described in Section 3. Opting out on one browser does not opt you out on another device.

Withdrawing consent. Where we rely on consent, you may withdraw it at any time by emailing privacy@hotbodyfitnessapp.com or using in-app controls. Withdrawal does not affect processing that already occurred, and we may still use non-personal information for measurement that is not interest-based advertising.

8. Your Rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to object to or restrict certain processing.

You can update much of your profile in the Service. To request access, correction, deletion, or a portable copy, use the account controls in the app or email privacy@hotbodyfitnessapp.com with your full name, the email on your account, and a description of the request. We will verify your identity before acting. We will process requests in line with applicable law.

Deleting your account removes your personal data from active systems, except where we must retain it for legal, security, fraud-prevention, or dispute reasons, or in backups that are overwritten on a routine cycle. Conversation history used for AI coaching may be retained separately so the feature can function, and may not be deleted at the same moment as the account. Email privacy@hotbodyfitnessapp.com if you want that history removed sooner.

We may decline or limit a request where the law allows — for example, where information is privileged, would compromise someone else's privacy or rights, where the burden is disproportionate, or where information is commercially proprietary. If we limit a request, we will explain why and how to follow up, where required.

8.1 California

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, may give you the right to know, access, correct, and delete personal information, and to opt out of "sale" or "sharing" for cross-context behavioral advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined in California law. We do not use or disclose sensitive personal information for purposes other than those permitted by the CPRA without offering a right to limit. We will not discriminate against you for exercising privacy rights.

California's Shine the Light law lets residents request, once a year, a list of third parties to whom we disclosed personal information for their own direct marketing in the prior calendar year, and the categories disclosed. We do not share personal information with third parties for their own direct marketing. To submit a California request, email privacy@hotbodyfitnessapp.com with the subject line "California privacy request." You may use an authorized agent if you provide proof of authorization and we can verify your identity.

9. Retention

We retain personal information for as long as your account is active or as needed to provide the Service, and afterward as necessary to fulfill the purposes described here, comply with law, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or anonymize it.

10. Security

We use reasonable administrative, physical, and technical measures designed to protect information we collect, including encryption in transit (such as TLS), authentication controls, and access restrictions such as row-level security so that private data — including progress photos and bloodwork — is accessible only to you and authorized personnel. When you submit sensitive information on our forms, we encrypt the transmission. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not accept liability for unintentional disclosure beyond what the law requires.

By using the Service, you agree that we may communicate with you electronically about security, privacy, and administrative issues. If we learn of a breach of security affecting your information, we may notify you by posting a notice on the Service or emailing you, and by other means if the law requires written notice.

11. International Transfers

We are based in the United States. Your information may be transferred to and processed in the United States and other countries where we or our providers operate, which may not provide the same level of protection as your home jurisdiction. By using the Service or providing information to us, you understand that your information will be processed in the United States. Where required, we use appropriate safeguards for cross-border transfers. Disputes about this Privacy Policy are governed by the laws of the United States and the State of California, and by the dispute provisions in our Terms.

12. Children

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service. If we learn that we have collected personal information from a child under 13, or from anyone under 18, we will delete it as soon as reasonably possible. If you believe a child has provided us personal information, email privacy@hotbodyfitnessapp.com.

13. Third-Party Links

The Service may link to websites and services owned or operated by third parties. Information you provide to a third-party service is subject to that party's privacy policy. We are not responsible for the content, privacy, or security practices of third-party services. Review their policies before providing information. Public posts and social-media interactions may be viewed and used by others without restriction. We do not control those uses.

14. Contact

Hot Body Fitness Website: hotbodyfitnessapp.com Privacy requests: privacy@hotbodyfitnessapp.com Support: support@hotbodyfitnessapp.com

You may also use the support options in the app. Individuals whose work includes processing personal information on our behalf are expected to follow this Privacy Policy.