1. Who controls your data

Mean Truth Fitness is the data controller.

For anything about your data, email support@meantruthfitness.com. We answer within one month.

2. What we collect and why

When you buy

Your email address, your order reference and what you bought. We need this to supply the product and to handle refunds and support. The lawful basis is performance of our contract with you.

Payment is taken by our payment provider. Card details go to them, not to us. We never see or store them.

When you join the newsletter

Your email address, and which list you asked for. The lawful basis is your consent, which you give by submitting the form and can withdraw at any time.

When you email us

Whatever you put in the email, so we can answer it. The lawful basis is our legitimate interest in replying to you.

When you use the member area

Your progress, measurements, logged sessions and preferences are stored in our database, run by Supabase in the EU, and in your own browser using local storage. The copy in our database is what lets you sign in on another device and carry on where you left off. The lawful basis is performance of our contract with you.

3. Cookies and similar storage

We do not use advertising or analytics cookies, and we do not track you across other sites.

We do count page views, on our own servers, to see which pages get read. A count holds the day, the page, the site you arrived from, whether the screen was a phone, a tablet or a desktop, your country as two letters, and the main language your browser asks for, such as "en". It holds no cookie, no IP address, no browser fingerprint, no account and nothing else that could point at you.

The country comes from our hosting provider, which works it out from the connection and tells our server which country the request came from. We never ask your browser where you are, and we never store the address it came from. We keep the country only, not the city or anything finer.

When you create an account we record the country you created it from, in the same way and as two letters, so we can see where members come from. It is set once and we do not update it if you travel.

The member area uses your browser local storage to hold your sign in and a copy of your progress, alongside the copy in our database, so the app works at all. That is storage you asked for by using the app, not tracking.

4. Who else processes your data

We use a small number of providers who process data on our instructions under a contract:

• A payment provider, to take payment.
• A database provider, Supabase, to store your account and progress in the EU.
• An email provider, to send the newsletter.
• A hosting provider, to serve this website.

Some of these operate outside the UK. Where data leaves the UK we rely on the safeguards the law requires for international transfers, such as the UK addendum to standard contractual clauses.

We do not sell your data. We do not share it for anyone else to market to you.

5. How long we keep it

• Order records: six years, because tax law requires it.
• Marketing lists: until you unsubscribe, then we keep a suppression record so we do not email you again by mistake.
• Support emails: two years from the last message.
• Member area data: in our database until your account is deleted, and in your browser until you log out or clear it.

6. Your rights

Under UK GDPR you can ask us to:

• Give you a copy of the data we hold about you.
• Correct it if it is wrong.
• Erase it, where we have no continuing reason to keep it.
• Restrict what we do with it while a dispute is sorted out.
• Give it to you, or to someone else, in a portable form.
• Stop processing it where we rely on legitimate interests.
• Stop marketing to you, at any time and for any reason.

Email support@meantruthfitness.com. We respond within one month. There is no charge.

7. Complaining

Tell us first and we will try to fix it. If you are not satisfied you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk.

8. Security

We keep the data we hold to a minimum, which is the most effective protection available to a business this size. Access is limited to people who need it.

No transmission over the internet is completely secure. We cannot guarantee absolute security, and we do not pretend otherwise.

9. Changes

If we change this policy we will update the date at the top of this page. Material changes to how we use your data will be notified to you directly where we hold your email address.