Privacy Policy - The Complete Bodybuilder

Privacy Policy

Last updated: September 12, 2026 · Effective: September 12, 2026

  1. Who we are & scope. 27:17 Fitness LLC (7004 Luminary Dr., Las Vegas, NV 89119) operates The Complete Bodybuilder / Sharpened Fitness (the "Tool"). This policy covers our web app and marketing site. The Tool is for U.S. adults 18+. Contact: privacy@sharpenedfitness.com.
  2. Information we collect. Account & profile (name, email, password, plan); health & fitness inputs (sensitive) — intake answers, training/nutrition data, check-ins, lab values you enter, goals; physique photos (sensitive); payment — processed by Stripe (we receive limited billing metadata like last-4 and status, not full card numbers); usage/device — logs, device/browser, feature usage, cookies (marketing site); coach mode — data you share is visible to the coach you choose.
  3. Sensitive data & consent. Physique photos and health inputs are sensitive personal information. We collect them only with your action/consent, use them only to provide the Tool to you (and your coach if you choose one), and never for advertising or sale.
  4. How we use your data. To operate and personalize the Tool; generate AI-assisted educational content; provide coach features; process payments; secure the service; comply with law. We do not use your health data or photos to train third-party public AI models.
  5. AI processing. Some features send your inputs to third-party AI providers to generate educational content. Outputs can be wrong or incomplete and are not medical advice.
  6. How we share. We do not sell or share personal information for cross-context behavioral advertising. We disclose to service providers/subprocessors under contract (below), to your coach at your direction, as required by law or to protect rights/safety, and in a business transfer with notice.
  7. Subprocessors.
    Subprocessor Purpose Data Location
    Microsoft Azure Cloud hosting / storage All app data US
    Stripe Payments Billing metadata US
    Shopify Marketing site / storefront Site visitor + order data US
    Google Analytics (Google LLC) Aggregate product usage analytics (no health data or photos) Usage/device events US
    AI provider(s) AI-generated educational content Inputs you submit US
    Email / support provider Transactional email / support Email, ticket content US
    Nutrition data API Nutrition lookups Query data US
    We update this list as providers change.
  8. Retention. We keep account data while your account is active and for 24 months after closure, then delete or anonymize it, except where we must keep records longer for legal/tax/security reasons. Physique photos and health inputs are deleted within 30 days of your deletion request. Billing records are retained for 7 years.
  9. Your rights (DSAR). You can access, export, correct, and delete your data via Account → Privacy (self-serve Download my data / Delete my account) or privacy@sharpenedfitness.com. We verify identity, respond within 45 days (extendable as permitted by law), and don't discriminate for requests. We do not sell your personal information.
  10. Security. Encryption in transit and at rest, access controls, least-privilege access to photos/health data. No system is perfectly secure. We provide breach notice per applicable law and the FTC Health Breach Notification Rule where it applies.
  11. Children. 18+ only; we don't knowingly collect data from anyone under 18 (COPPA-consistent).
  12. State disclosures. California (CCPA/CPRA): categories collected, purposes, and rights as described above; other state laws as they apply. (US-only v1.)
  13. Changes. We post updates here with a new "Last updated" date and notice of material changes.
  14. Contact. privacy@sharpenedfitness.com · 27:17 Fitness LLC, 7004 Luminary Dr., Las Vegas, NV 89119.