COREHABIT PRIVACY POLICY

Effective Date: October 4, 2026
Last Updated: October 8, 2026

CoreHabit (“CoreHabit,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit CoreHabit.fit, create an account, generate a fitness or nutrition plan, purchase a membership, purchase CoreHabit apparel or other products, communicate with us, or otherwise use our websites, products, and services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We may collect information you provide directly to us, information generated through your use of the Services, and certain information collected automatically.

Account and Contact Information

When you create an account, contact us, join a waitlist, make a purchase, or otherwise interact with CoreHabit, we may collect information such as:

• Name or username
• Email address
• Phone number, when provided
• Account credentials
• Billing information
• Shipping address
• Order information
• Customer support communications

Fitness and Personalization Information

To create personalized fitness and nutrition recommendations, we may ask you to provide information such as:

• Age or date of birth
• Height and weight
• Fitness goals
• Activity level
• Training experience
• Workout preferences
• Available equipment
• Weekly availability
• Nutrition goals and preferences
• Dietary preferences or restrictions
• Progress and check-in information, including days you mark complete or missed and your weekly check-ins
• Workouts and meals you choose to save (like)
• Daily habits you check off, such as protein, water, steps and sleep
• Runs you choose to log, such as date, distance, time, run type, how it felt and notes
• Other information you voluntarily provide when using our fitness tools

Some information you choose to provide may be considered sensitive under applicable privacy laws. We use this information primarily to provide and personalize the Services you request.

CoreHabit is not a healthcare provider, and the Services are not intended to collect or maintain medical records on behalf of healthcare providers.

Purchase and Payment Information

When you purchase a CoreHabit membership or physical product, payment information may be processed by third-party payment processors such as Stripe.

CoreHabit generally does not directly store complete payment card numbers. Payment processors may collect and process payment information according to their own privacy policies.

For apparel and other physical-product purchases, we may also collect information necessary to process and fulfill your order, including your shipping address, products purchased, sizes, quantities, order status, and related transaction information.

Automatically Collected Information

When you use CoreHabit.fit, certain information may be collected automatically, including:

• IP address
• Browser and device type
• Operating system
• Pages viewed
• Referring pages
• Approximate location derived from IP address
• Dates and times of visits
• Interactions with features or advertisements
• Cookie and similar technology identifiers
• Your time zone, used to send reminders at the right local time
• If you turn on phone notifications, a notification address for that device
• Conversion and attribution information

We may use cookies, pixels, analytics tools, and similar technologies to understand how visitors use CoreHabit and to measure the effectiveness of our marketing.

2. How We Use Information

We may use information we collect to:

• Create and manage CoreHabit accounts
• Generate and personalize workout and nutrition plans
• Provide membership features
• Process subscriptions and payments
• Process, fulfill, and support apparel and merchandise orders
• Provide customer support
• Maintain and improve the Services
• Personalize the user experience
• Analyze website and product performance
• Measure advertising and marketing effectiveness
• Communicate about accounts, purchases, memberships, updates, and support requests
• Send reminder emails about your plan, such as workout, weekly check-in, and re-engagement reminders, which you can turn off at any time
• Send marketing communications where permitted by law
• Detect fraud, abuse, security threats, and technical problems
• Enforce our Terms of Service
• Comply with legal obligations

We may also use aggregated or de-identified information for analytics, research, product development, and business purposes where permitted by law.

3. Personalized Fitness and Nutrition Information

CoreHabit uses information supplied by users to generate personalized fitness, nutrition, meal, grocery, and related wellness recommendations.

These recommendations are provided for general educational and informational purposes and are not medical advice, diagnosis, or treatment.

Information generated through CoreHabit should not be treated as a substitute for advice from a physician, registered dietitian, physical therapist, or other qualified healthcare professional.

4. How We Share Information

We do not sell your personal information for money.

We may share information with service providers and partners that help us operate CoreHabit, including providers of:

• Website hosting
• Cloud infrastructure and databases
• Authentication services
• Payment processing
• Order fulfillment and shipping
• Email and communications
• Analytics
• Advertising and attribution
• Fraud prevention
• Customer support

For example, CoreHabit may use services such as Stripe for payment processing, Supabase for account and database infrastructure, Resend for sending email, and Netlify for website hosting and deployment.

These providers may process information according to their own privacy policies and contractual obligations.

We may also disclose information when reasonably necessary to comply with law, legal process, government requests, protect our rights or users, investigate fraud or security incidents, or facilitate a merger, acquisition, financing, restructuring, or sale of some or all of our business assets.

5. Advertising and Analytics

CoreHabit may use advertising and analytics technologies, including services provided by platforms such as Google and Meta.

These technologies may collect information about your interactions with CoreHabit.fit and may help us:

• Measure website traffic
• Understand user behavior
• Measure advertising conversions
• Attribute visits or purchases to marketing campaigns
• Improve advertising performance
• Deliver or measure relevant advertising where permitted

Depending on your location, you may have rights to limit certain forms of advertising-related data processing.

6. Cookies

CoreHabit.fit may use cookies and similar technologies to operate the website, remember preferences, maintain sessions, analyze performance, prevent fraud, and support advertising and measurement.

Your browser may allow you to block or delete cookies. Certain CoreHabit features may not function correctly if necessary cookies are disabled.

Where required by applicable law, we will request consent before using certain non-essential cookies or similar technologies.

7. Membership and Billing Information

If you purchase a CoreHabit membership, we and our payment providers may maintain information regarding:

• Membership status
• Subscription type
• Billing dates
• Payment status
• Subscription renewal
• Cancellation status
• Transaction history

Payment credentials are generally processed by our payment provider rather than stored directly by CoreHabit.

8. Apparel and Physical Product Orders

If you purchase CoreHabit apparel or another physical product, we may collect and use information necessary to:

• Process payment
• Fulfill the order
• Ship the product
• Provide tracking information
• Process returns or refunds
• Communicate regarding the order
• Prevent fraudulent transactions

We may share necessary order information with shipping carriers, fulfillment providers, payment processors, and other providers involved in completing your purchase.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain business and transaction records, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.

Retention periods may differ depending on the type of information and the reason it was collected.

10. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect information under our control.

However, no website, database, transmission method, or storage system can be guaranteed to be completely secure. You use online services at your own risk and are responsible for maintaining the confidentiality of your account credentials.

11. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to request:

• Access to certain personal information
• Correction of inaccurate information
• Deletion of certain information
• A copy or portability of certain information
• Information about how personal information is used or disclosed
• Opt-out of certain targeted advertising, sharing, or similar processing where applicable
• Withdrawal of consent where processing is based on consent

These rights are subject to applicable law and certain exceptions.

You can permanently delete your account and associated plan and progress data at any time using Delete my account in My plan (on the website, or in the CoreHabit app), or by emailing support@corehabit.fit from the email on your account. Payment records kept by our payment processor are retained as required by law.

To submit a privacy request, contact us at support@corehabit.fit.

We may need to verify your identity before processing certain requests.

12. Marketing Communications

If you sign up for early access, product announcements, apparel launch notifications, or similar communications, you may unsubscribe using the link included in those emails.

Members may receive reminder emails about their plan, including workout reminders, weekly check-in reminders, and occasional messages if they have been inactive. You can turn each type off in the Reminders section of My plan, or by using the link included in each reminder. If you turn on phone notifications, reminders may be sent to that device instead; you can turn them off in My plan or in your device settings.

If you use CoreHabit as an installed app, a copy of your latest plan is stored on your device so it can open without a connection. It's removed when you sign out.

Transactional communications related to your account, membership, security, purchases, or orders may still be sent when necessary.

If CoreHabit offers SMS marketing in the future, applicable consent and opt-out terms will be presented when you enroll.

13. Children's Privacy

CoreHabit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Users under the age of majority in their jurisdiction should use the Services only with the involvement and permission of a parent or legal guardian where required by law.

If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.

14. Third-Party Services and Links

CoreHabit may contain links to or integrations with third-party websites, platforms, or services.

We are not responsible for the privacy, security, content, or practices of third parties. You should review the privacy policies of third-party services before providing them with personal information.

15. International Users

CoreHabit is operated from the United States.

If you access the Services from another country, your information may be transferred to, processed in, or stored in the United States or other jurisdictions where our service providers operate.

Applicable privacy rights may vary based on your location.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to CoreHabit, our practices, technologies, or legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this page. Material changes may be communicated through the Services or other appropriate means where required.

17. Contact Us

Questions or requests concerning this Privacy Policy or CoreHabit's privacy practices may be sent to:

CoreHabit
Website: CoreHabit.fit
Email: support@corehabit.fit