1. Who controls your data
Naynesh Yadev, trading as Mean Truth Fitness, is the data controller.
For anything about your data, email support@meantruthfitness.com. We answer within one month.
2. What we collect and why
When you buy
Your email address, your order reference and what you bought. We need this to supply the product and to handle refunds and support. The lawful basis is performance of our contract with you.
Payment is taken by our payment provider. Card details go to them, not to us. We never see or store them.
When you join the newsletter
Your email address, and which list you asked for. The lawful basis is your consent, which you give by submitting the form and can withdraw at any time.
When you email us
Whatever you put in the email, so we can answer it. The lawful basis is our legitimate interest in replying to you.
When you use the member area
Your progress, measurements, logged sessions and preferences are stored in our database, run by Supabase in the EU, and in your own browser using local storage. The copy in our database is what lets you sign in on another device and carry on where you left off. The lawful basis is performance of our contract with you.
3. Cookies and similar storage
We do not use advertising or analytics cookies, and we do not track you across other sites.
The member area uses your browser local storage to hold your sign in and a copy of your progress, alongside the copy in our database, so the app works at all. That is storage you asked for by using the app, not tracking.
4. Who else processes your data
We use a small number of providers who process data on our instructions under a contract:
- A payment provider, to take payment.
- A database provider, Supabase, to store your account and progress in the EU.
- An email provider, to send the newsletter.
- A hosting provider, to serve this website.
Some of these operate outside the UK. Where data leaves the UK we rely on the safeguards the law requires for international transfers, such as the UK addendum to standard contractual clauses.
We do not sell your data. We do not share it for anyone else to market to you.
5. How long we keep it
- Order records: six years, because tax law requires it.
- Marketing lists: until you unsubscribe, then we keep a suppression record so we do not email you again by mistake.
- Support emails: two years from the last message.
- Member area data: in our database until your account is deleted, and in your browser until you log out or clear it.
6. Your rights
Under UK GDPR you can ask us to:
- Give you a copy of the data we hold about you.
- Correct it if it is wrong.
- Erase it, where we have no continuing reason to keep it.
- Restrict what we do with it while a dispute is sorted out.
- Give it to you, or to someone else, in a portable form.
- Stop processing it where we rely on legitimate interests.
- Stop marketing to you, at any time and for any reason.
Email support@meantruthfitness.com. We respond within one month. There is no charge.
7. Complaining
Tell us first and we will try to fix it. If you are not satisfied you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk.
8. Security
We keep the data we hold to a minimum, which is the most effective protection available to a business this size. Access is limited to people who need it.
No transmission over the internet is completely secure. We cannot guarantee absolute security, and we do not pretend otherwise.
9. Changes
If we change this policy we will update the date at the top of this page. Material changes to how we use your data will be notified to you directly where we hold your email address.