Privacy Policy

The short version

The binding detail is in the sections below; this summary is for orientation.

• We collect what the Service actually needs: your quiz answers, your email address, your purchase details, optional measurements and progress photos inside the member area, and usage events.
• Your quiz answers describe your body and wellness habits, so we treat them as sensitive: we process them only with your explicit consent, which we ask for before the quiz begins; we use them to build your plan, and we never sell them or give them to advertising services.
• Progress photos are optional, off by default, and governed by the exact promises shown in the app: private storage, no human or AI review, EXIF removal, instant deletion controls, automatic deletion within 90 days after your membership ends, and never any marketing use.
• Marketing email is strictly opt-in — the checkbox is never pre-selected — and every marketing email has a one-click unsubscribe link.
• Analytics and advertising tools (PostHog, the Meta pixel) load in your browser only if you choose Accept in the cookie banner — and if you reject, our servers send those companies nothing either. Reject is a real choice; everything works without them.
• We do not sell personal data. Ever.
• You can access, correct, export, or delete your data by emailing help@getcellufix.com — we honor these requests for EU and US visitors alike.

Who is responsible for your data

Company registration is being completed; the operator's legal name, registered address, and registration number will appear here once final. Questions in the meantime: help@getcellufix.com.

For anything in this policy — questions, requests, complaints — contact help@getcellufix.com. We read and answer this inbox ourselves.

Information you give us

We keep collection to what the Service actually needs:

• Quiz answers — your responses about your goals, the areas you want to focus on, how noticeable the appearance feels to you, how long it has bothered you, what you have tried, your age band, activity level, available time, nutrition style, and motivation. Height and weight are explicitly optional and skippable, and are used only to size your meal suggestions. See "Health-related answers" below for how carefully these are handled.
• Email address and your marketing preference — collected at the end of the quiz so we can save your progress and send your access details. The marketing checkbox ("occasional tips and offers") is unchecked by default and is never pre-selected.
• Purchase data — which plan you bought, amounts, currency, and subscription status. Card details go directly to our payment processor (Stripe); we never see or store full card numbers.
• Measurements (optional, member area) — if you choose to log them: waist, hips, thigh, and weight values, plus your workout completion and streaks.
• Progress photos (optional, member area) — only if you expressly turn the feature on. These have their own section below, and their own consent screen in the app.
• Messages you send us — emails to our support address, kept so we can help you and keep a record of what we promised.

Information collected automatically

• Usage events — pages viewed, quiz steps completed, checkout started, purchases, and similar product events, recorded in our own first-party event log.
• Technical data — your IP address and basic information such as browser type and device characteristics that arrive with any web request. Server request logs that include IP addresses are kept only short-term by our hosting provider and deleted automatically.
• Cookies — described in full in "Cookies and the consent banner" below.

Health-related answers get special care

Your quiz answers describe your body and wellness — the areas you select, how noticeable the appearance feels to you, how long it has bothered you, what you have tried, your age band, your activity level, and your optional height and weight — so European law treats them as health-related data deserving extra protection. The same applies to the optional measurements you may log in the member area.

• We process these answers on the basis of your explicit consent, which we ask for before the quiz begins: a separate, never pre-ticked checkbox — "I agree that CelluFix may process my answers about my body and habits to build my program" — with a link to this policy. We record the moment you gave that consent, and the consent text itself is versioned, so the wording you agreed to can always be established. Height and weight are explicitly optional and skippable; the other questions are needed to build your plan.
• We use them for exactly one thing: assembling and maintaining your personalized program. They are never sold, never used for advertising, and never shared with advertising services.
• You can withdraw this consent at any time by emailing help@getcellufix.com and asking us to delete your quiz answers and measurements. We will honor it promptly. The one consequence is practical: without these answers we cannot keep a personalized plan for you.

Progress photos — optional, private, and yours

The photo feature exists only inside the member area, is off by default, and starts only after you tick an unbundled consent checkbox on the Photos tab. We record which version of the consent text you accepted and when. These are the promises we make on that consent screen, reproduced here word for word — each one is an enforced technical control, not marketing copy:

• Stored privately. Never shown to anyone else; no person and no AI reviews them.
• Location and camera data (EXIF) is removed the moment a photo is saved.
• Delete any photo, or everything, instantly — the button is right on this tab.
• If your membership ends, all photos are automatically deleted within 90 days.
• Never used in marketing. There is no setting that could change that.

In practice this means: photos live in private, access-controlled storage with no public links, and can be viewed only through your own signed-in session; location (GPS) and camera metadata is stripped before a photo is ever written to storage; and an automatic daily job deletes all photos within 90 days after your membership ends. If you choose to add an optional check-in score (0–3, "how does the appearance feel to you"), that score is stored with the photo set and is never a judgment or a target. Our event log records only that a photo was added, scored, or deleted — never the image itself.

You can withdraw photo consent at any time on the Photos tab. The app states this plainly before you confirm: "Withdrawing consent deletes all your progress photos now." Withdrawal takes effect immediately and the deletion of your photos is permanent; the feature returns to off, and you can choose to turn it on again later.

The legal basis for photo processing is your explicit consent. There is no photo feature, upload surface, or photo prompt anywhere before purchase.

Why we use your data, and the legal basis for each purpose

We do not sell personal data. Under the GDPR, every use needs a legal basis — here is ours, purpose by purpose:

• Building and delivering your personalized plan — quiz answers and optional measurements — your explicit consent, asked for before the quiz begins (see "Health-related answers" above).
• Providing your account, processing your purchase, managing your subscription, and sending transactional email (your plan access, receipts, sign-in links, renewal notices) — performance of our contract with you.
• Marketing email — your consent, given by an unticked checkbox and withdrawable at any time with one click.
• Progress photos — your explicit consent, given and withdrawable on the Photos tab.
• Analytics and ad measurement (PostHog and the Meta pixel in your browser, plus the server-side event copies described below) — your consent, given via the cookie banner's Accept button. If you reject, nothing loads and nothing is sent.
• Our first-party event log (which quiz steps, checkouts, and purchases happened) — our legitimate interest in operating the Service, measuring its key steps, and preventing abuse. This log identifies events, not advertising profiles; it lives in our own database and is handled only by providers acting on our documented instructions.
• Server-side conversion confirmation to Meta — your consent, given via the same cookie-banner Accept button (if you reject, our server sends Meta nothing). This covers three kinds of conversion events — email captured, checkout started, and purchases (including the optional one-time add-on) — carries your email only in SHA-256-hashed form, and never includes quiz answers, measurements, or photos.
• Security, fraud prevention, and defending legal claims — our legitimate interest in keeping the Service and its members safe.
• Bookkeeping and tax records — our legal obligations.

Your plan is generated automatically

When you finish the quiz, software assembles your program automatically by matching your answers to a library of vetted plan templates — for example, your selected body areas and activity level determine which workout phases and progressions you receive. No free-form AI generates advice, and no decision with legal or similarly significant effect is made about you. If you ever want a human to review how your plan was put together, email help@getcellufix.com.

Who processes data for us — and who receives it

Most of the companies below are processors: they handle personal data only on our documented instructions, under data-processing agreements. Two of them — Stripe and Meta — also process some data under their own responsibility, so we describe them separately and accurately.

Processors acting on our instructions:

• Supabase (database and photo storage) — stores the data described in this policy, including the private photo storage, on servers in the United States (US East region).
• Resend (email delivery) — sends our transactional email and, only with your consent, marketing email. US provider.
• Vercel (hosting and scheduled jobs) — runs the website and the automated jobs described in this policy, such as the photo-retention deletion job. US provider.
• PostHog (product analytics) — measures how the site and quiz are used. Its browser tools load, and our server sends it copies of first-party events, only after you Accept in the cookie banner. US cloud.

Independent recipients

• Stripe (payments) — processes checkout, card data, subscription billing, fraud prevention, and receipts. Stripe receives your payment details directly and acts as an independent controller for payment processing under its own terms; we never hold card numbers. US company.
• Meta Platforms (advertising measurement) — receives conversion events so we can measure our ads, and only if you chose Accept in the cookie banner (this applies to the browser pixel and to our server-side sends alike). For the transmission of these events, we and Meta are joint controllers; Meta's further use is governed by its own terms. Server-side, Meta receives only the conversion events listed above with a hashed email. Meta never receives your quiz answers, measurements, or photos — photo events are structurally excluded from what can be sent. US company.

No other company receives your personal data, except where the law compels disclosure. If we ever change providers, we will hold the new ones to the same commitments and update this policy.

When data leaves the EU or the UK

We are established in the European Union, and the providers above process data in the United States. The safeguard we rely on, per provider:

• Stripe — EU–US Data Privacy Framework (DPF) certification.
• Meta Platforms — EU–US Data Privacy Framework (DPF) certification.
• PostHog — EU–US Data Privacy Framework (DPF) certification.
• Vercel — EU–US Data Privacy Framework (DPF) certification.
• Supabase — the European Commission's Standard Contractual Clauses, together with supplementary technical measures (encryption in transit, access controls, and the private-storage design described above).
• Resend — the European Commission's Standard Contractual Clauses, together with the same supplementary measures.

For transfers from the UK, we rely on the UK Extension to the Data Privacy Framework where the provider is certified for it, and otherwise on the UK International Data Transfer Addendum to the Standard Contractual Clauses. You can request a copy of the relevant safeguards at help@getcellufix.com.

Cookies and the consent banner

Essential cookies keep the Service working and are always on:

• cf_sid — a signed cookie carrying your quiz session and progress; expires after 7 days.
• cf_member — a signed cookie keeping you signed in to the member area; expires after 30 days.
• cf_consent — remembers your cookie-banner choice (accept or reject); expires after 12 months.

Everything else is consent-gated. PostHog analytics and the Meta pixel load in your browser only after you choose Accept in the cookie banner. Accept and Reject are presented as equal choices, and Reject is real — the entire Service works without non-essential cookies. To change your mind at any time, use the "Cookie settings" link in the footer of any page — it reopens the banner, and your new choice replaces the old one as easily as the first was made.

One thing happens server-side regardless of the banner, and we want to be plain about it: our own server keeps a first-party log of funnel events (for example, that a quiz step was completed or a purchase happened) in our own database — this is how we operate the Service, it places nothing on your device, and it goes to no advertising company. Everything else follows your banner choice: if you chose Reject, PostHog receives no events (from your browser or from our server) and Meta receives nothing at all.

Links in our emails use expiring tokens rather than tracking cookies: unsubscribe and plan-resume links expire after 90 days, and sign-in links after 30 minutes.

How long we keep your data

We keep data no longer than each purpose needs:

• Quiz sessions and answers that never become a purchase — deleted or anonymized within 24 months.
• Customer records (account, purchases, your plan, measurements, workout progress) — kept while your account exists, and afterwards only as long as bookkeeping and tax law require.
• Progress photos — until you delete them or withdraw consent, which takes effect immediately; and in every case, automatically deleted within 90 days after your membership ends.
• Consent and unsubscribe records (your marketing choice, your photo consent and its version, your cookie choice) — kept as long as needed to honor and prove the choice you made.
• First-party event log — raw event entries are deleted or anonymized within 24 months, matching the quiz-session rule above; where possible we aggregate sooner.
• Hosting and server request logs (which include IP addresses) — kept only short-term by our hosting provider and deleted automatically.
• Cookies and email tokens — the lifetimes listed in the section above.

Your rights, and how to actually use them

Wherever you live, email help@getcellufix.com to access, correct, export, or delete your data — deletion requests are honored for EU and US visitors alike, and exercising any right never affects the service or price you receive. If you are in the EU/EEA (or the UK), the GDPR gives you the right to:

• Access your data and receive a copy.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing, including any processing based on our legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw any consent at any time, as easily as you gave it, without affecting past processing.

The fastest routes are built in: one click on the unsubscribe link in any marketing email stops all marketing to your address (no sign-in needed, and transactional email such as receipts continues); the Photos tab deletes any photo, any set, or everything instantly; and photo-consent withdrawal is one control on the same tab. For everything else, email us — we will verify the request against the email address on your quiz or purchase, respond within one month, and never charge for a first request.

Complaints

If you believe we have handled your data wrongly, we would genuinely like the chance to put it right first — help@getcellufix.com. You also have the right, at any time, to lodge a complaint with a data-protection supervisory authority — either the authority of the EU country where we are established, or the one in the country where you live (for the UK, the Information Commissioner's Office).

If you live in the United States

We treat the rights above as a floor, not an EU-only feature: US visitors can request access, correction, and deletion at help@getcellufix.com and we will honor them. In the language of US state privacy laws (such as the California Consumer Privacy Act): we do not sell personal data; we do not use or disclose sensitive personal information for purposes beyond providing the Service you asked for; and we will never discriminate against you for exercising a privacy right. The only data flow to an advertising company is the Meta measurement described above — it happens only if you chose Accept in the cookie banner (in your browser and from our server alike), and it is limited to conversion events (email captured, checkout started, and purchases, including the one-time add-on) with a hashed email — never your quiz answers, measurements, or photos. If you have questions about how a specific state law applies to you, email us.

If you live in Washington or Nevada, your quiz answers, measurements, and progress photos are "consumer health data" under your state's law. Our separate Consumer Health Data Privacy Policy explains those rights in detail — it is also linked in the footer of every page, and we honor it for everyone, wherever you live.

Children

The Service is for adults 18 and over. It is not directed to minors, and we do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

Security

All traffic to the Service is encrypted in transit. Session and sign-in cookies are cryptographically signed; the database and photo storage are access-controlled so that data is readable only through the server acting for your own session; photos have no public links; and card data never touches our servers — it goes directly to Stripe. No system is perfectly secure, but we design so that the sensitive things (your answers, your photos) have the fewest possible places to be.

Changes to this policy

When we change this policy, we update the date at the top. For material changes — anything that expands what we collect or how we use it — we will tell you by email or in the Service before the change takes effect, and where the law requires it, we will ask for your consent again rather than assume it.

Contact us

Company registration is being completed; the operator's legal name, registered address, and registration number will appear here once final. Questions in the meantime: help@getcellufix.com.

Email: help@getcellufix.com