Privacy Policy - The Complete Bodybuilder
Privacy Policy
Last updated: September 12, 2026 · Effective: September 12, 2026
- Who we are & scope. 27:17 Fitness LLC (7004 Luminary Dr., Las Vegas, NV 89119) operates The Complete Bodybuilder / Sharpened Fitness (the "Tool"). This policy covers our web app and marketing site. The Tool is for U.S. adults 18+. Contact: privacy@sharpenedfitness.com.
- Information we collect. Account & profile (name, email, password, plan); health & fitness inputs (sensitive) — intake answers, training/nutrition data, check-ins, lab values you enter, goals; physique photos (sensitive); payment — processed by Stripe (we receive limited billing metadata like last-4 and status, not full card numbers); usage/device — logs, device/browser, feature usage, cookies (marketing site); coach mode — data you share is visible to the coach you choose.
- Sensitive data & consent. Physique photos and health inputs are sensitive personal information. We collect them only with your action/consent, use them only to provide the Tool to you (and your coach if you choose one), and never for advertising or sale.
- How we use your data. To operate and personalize the Tool; generate AI-assisted educational content; provide coach features; process payments; secure the service; comply with law. We do not use your health data or photos to train third-party public AI models.
- AI processing. Some features send your inputs to third-party AI providers to generate educational content. Outputs can be wrong or incomplete and are not medical advice.
- How we share. We do not sell or share personal information for cross-context behavioral advertising. We disclose to service providers/subprocessors under contract (below), to your coach at your direction, as required by law or to protect rights/safety, and in a business transfer with notice.
-
Subprocessors.
We update this list as providers change.Subprocessor Purpose Data Location Microsoft Azure Cloud hosting / storage All app data US Stripe Payments Billing metadata US Shopify Marketing site / storefront Site visitor + order data US Google Analytics (Google LLC) Aggregate product usage analytics (no health data or photos) Usage/device events US AI provider(s) AI-generated educational content Inputs you submit US Email / support provider Transactional email / support Email, ticket content US Nutrition data API Nutrition lookups Query data US - Retention. We keep account data while your account is active and for 24 months after closure, then delete or anonymize it, except where we must keep records longer for legal/tax/security reasons. Physique photos and health inputs are deleted within 30 days of your deletion request. Billing records are retained for 7 years.
- Your rights (DSAR). You can access, export, correct, and delete your data via Account → Privacy (self-serve Download my data / Delete my account) or privacy@sharpenedfitness.com. We verify identity, respond within 45 days (extendable as permitted by law), and don't discriminate for requests. We do not sell your personal information.
- Security. Encryption in transit and at rest, access controls, least-privilege access to photos/health data. No system is perfectly secure. We provide breach notice per applicable law and the FTC Health Breach Notification Rule where it applies.
- Children. 18+ only; we don't knowingly collect data from anyone under 18 (COPPA-consistent).
- State disclosures. California (CCPA/CPRA): categories collected, purposes, and rights as described above; other state laws as they apply. (US-only v1.)
- Changes. We post updates here with a new "Last updated" date and notice of material changes.
- Contact. privacy@sharpenedfitness.com · 27:17 Fitness LLC, 7004 Luminary Dr., Las Vegas, NV 89119.