Privacy Policy

What we collect

• Your intake answers: goal, sex, age, height, weight, activity level, training days, equipment, lifting experience, athletic-work preference, and eating style. We use them to calculate your plan.
• Health check result only. We don't store which health items you checked. We keep only whether you were good to go, whether you confirmed doctor clearance, how many items you checked, and whether you reported an injury (so athletic work stays off).
• Contact details: your first name and email address.
• Agreements: that you accepted the Terms, Medical Disclaimer, Privacy Policy, and the final-sale policy, when you accepted them, and your email marketing choice.
• Purchases: what you bought, the amount, and the date. Payments are handled by Stripe, which collects your card and billing details. We never see or store your full card number.
• Your progress, when you use tracking: workouts and sets you log, bodyweight entries, weekly check-ins, and progress photos you choose to upload.
• How you found us: campaign tags in the link you arrived from (for example, which Instagram post) and the website that referred you. We keep only the referring site's address, not the full page.
• Technical data: IP address, browser, and device information handled by our hosting and security providers, and error reports when something breaks.

How we use it

• To calculate your calories, protein, meal plan, and training plan
• To process payments, give you access, and log you in
• To send emails about your purchase, your login, and your program
• To send tips and offers, only if you opted in (unsubscribe anytime)
• To understand which content and marketing work, and to fix problems
• To keep records the law requires, such as tax and payment records

We don't sell your data

We don't sell or rent your personal information, and we don't share it for other companies' advertising.

Companies that process data for us

We use these providers to run Apex. Each gets only what it needs to do its job:

• Cloudflare: hosting and security
• Supabase: database, login, and file storage
• Stripe: payments and tax calculation
• Resend: sending email
• Sentry: error monitoring, with personal details removed
• PostHog: product analytics, only if you accept analytics cookies
• Calendly: booking calls, if you book one
• Google Fonts: the site's typeface, which your browser loads from Google

These providers are based in the United States, and your information is stored and processed there.

Cookies and browser storage

• Essential: a cookie that keeps you logged in, and browser storage that saves your intake answers so you can pick up where you left off. These are needed for the site to work.
• Anonymous page counts: we count how many visits reach each step of signing up (for example, the program page or checkout) and which ad or link they came from. These counts use no cookies and store nothing that identifies you or your device.
• Analytics and advertising: used only if you choose “Accept.” If you choose “Essential only,” they're never loaded. Essential only is the default. With your OK we load PostHog (product analytics) and the Meta and TikTok advertising pixels. They see the pages you visit, and when you start checkout or buy, the fact that it happened and the price. We never send them your name, email or health answers.

How long we keep it

We keep your account and progress data until you ask us to delete your account. Intake answers saved in your browser stay there until you finish, start over, or clear your browser data; if you're under 18 or the health check ends the flow, they're cleared immediately.

If you agree to receive emails from us and see your results but don't buy, we keep your first name and email so we can send up to two reminders about your plan. Every reminder has a one-click unsubscribe, and unsubscribing stops them immediately.

We keep order and payment records for as long as tax and accounting law requires, even after an account is deleted.

Your choices and rights

• Get a copy of your data
• Correct anything that's wrong
• Delete your account and personal data, including progress photos
• Unsubscribe from marketing emails with the link in any of them

To make a request, email inclineinvest10k@gmail.com from the address on your account. We'll respond within 30 days. Deleting your account ends your access to your program.

How we protect it

Data is encrypted in transit. Access is locked down so each person can only reach their own information, progress photos are stored privately, and program files are shared only through links that expire. No system is perfectly secure, but we work to keep yours safe and will tell you if a breach affects your information.

Under 18

Apex isn't for anyone under 18. If you enter an age under 18, the intake stops and nothing you entered is saved. If you believe someone under 18 has given us information, email us and we'll delete it.

Changes to this policy

If we make significant changes, we'll email you before they take effect.

Contact

Noah Rychlick, doing business as Apex Fitness Academy. Privacy questions or requests: inclineinvest10k@gmail.com.