Privacy Policy

01 Who We Are

YourFitnessPlans is a brand operated by TradeFlux Labs, a company incorporated in the State of Wyoming, USA. We operate the website yourfitnesplans.com and provide personalized training and nutrition plans based on the answers you submit.

Company: TradeFlux Labs
Address: 30 N Gould St, STE R, Sheridan, WY 82801, USA
Email: hello@yourfitnesplans.com

TradeFlux Labs is the data controller responsible for the personal data described in this policy.

02 Data We Collect

We collect the following categories of data:

Account & purchase data

• Name, email address, billing address
• Payment method details (processed by Stripe — we do not store card numbers)
• Order history and purchase records

Health & fitness profile data (onboarding form)

• Age, gender, height, weight
• Fitness goal (e.g. fat loss, muscle gain)
• Training experience level and available equipment
• Injuries and physical limitations
• Dietary preferences and food allergies
• Training locations, available equipment, schedule, exercise preferences and cardio choices
• Relevant health concerns, medication effects, pregnancy or postpartum needs, and specialist dietary needs
• Food intolerances, preferred and excluded foods, meal routine, cooking facilities, budget and grocery region
• Saved questionnaire drafts, consent version and consent timestamp

Usage data

• Dashboard interactions (workout check-ins, progress logs)
• Browser type, IP address, pages visited (collected via standard web server logs)

Communications

• Messages you send us via the contact form or email

03 How We Use Your Data

• Service delivery: To prepare your personalized training and/or nutrition plan, based on the information you provide.
• Account management: To create and manage your account, process purchases, and send order confirmations.
• Customer support: To respond to your questions, revision requests, and feedback.
• Security: To detect fraud, verify purchases, and protect our platform.
• Legal compliance: To meet applicable tax, accounting, and regulatory obligations.

We do not use your data for advertising profiling, sell it to third parties, or use it for any purpose beyond what is described above.

Legal bases for processing:

• Contract performance — processing necessary to deliver the plan you purchased
• Legitimate interests — fraud prevention and service security
• Legal obligation — tax records and financial reporting
• Consent — health/fitness profile data (you may withdraw at any time)

04 Third Parties & Data Sharing

We share your data only with the following service providers, strictly to operate our service:

• Stripe — payment processing. Your card data goes directly to Stripe and is never stored by us. Stripe Privacy Policy.
• Anthropic (plan-preparation service) — when you request a plan, relevant questionnaire answers are sent to its API to prepare personalized plan content. Account names, email addresses and billing information are not included in that request. Do not enter identifying information or medical records in free-text answers. Anthropic Privacy Policy.
• Our hosting provider — website files and database are hosted on secure managed servers.
• Email service — used solely to deliver order confirmations and plan notifications to you.

We do not share your data with advertisers, data brokers, marketing platforms, or any other third party not listed above.

05 Data Retention

• Account & purchase data: Retained for 7 years to comply with financial and tax obligations.
• Questionnaire drafts: Saved to your account after consent, to let you continue later. Removed when you submit your completed profile or request erasure.
• Health & fitness profile: Retained while your account is active. Deleted within 30 days of an account deletion request.
• Delivered plans: Stored in your account until you request deletion.
• Contact messages: Retained for up to 2 years for customer support purposes.

06 Your Privacy Rights

Regardless of your location, you have the following rights regarding your personal data held by us:

• Right of access — request a copy of all data we hold about you
• Right to correction — correct inaccurate or incomplete data
• Right to deletion — request permanent deletion of your personal data
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a common, machine-readable format
• Right to object — object to certain types of data processing
• Right to withdraw consent — withdraw consent for health data processing at any time

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, email us at hello@yourfitnesplans.com. We will respond within 30 days.

07 Cookies

We use the following cookies:

• Essential cookies — session cookies required for login and checkout to function. Cannot be disabled.
• WooCommerce cookies — shopping cart state and checkout session.
• Preference cookies — your chosen theme (light/dark mode), stored locally in your browser.

We do not use advertising cookies, tracking pixels, or third-party analytics services (such as Google Analytics).

08 Data Security

We implement the following security measures to protect your data:

• HTTPS encryption on all pages
• Passwords stored as one-way cryptographic hashes
• Payment data processed exclusively by Stripe (PCI-DSS Level 1 certified)
• Customers can access only their own questionnaire and profile. Authorized site administrators can access account data for support and privacy requests
• Regular security reviews of our codebase and infrastructure

In the event of a data breach that poses a risk to your personal information, we will notify you promptly via the email address on your account.

09 Children’s Privacy

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify registered users by email. Continued use of the service after changes constitutes acceptance of the updated policy.

11 Contact

For any privacy-related questions, data requests, or concerns: