Legal

Privacy Policy

Last updated: April 1, 2026

1. Information We Collect

We collect information you provide directly (email, name, profile details), information generated by your use of the Platform (challenge progress, purchases, referral activity, streak data), and technical data (IP address, device type, browser) collected automatically.

2. How We Use Your Information

We use your information to operate the Platform, process payments, send transactional emails (purchase receipts, challenge completion), and improve our services. We do not sell your personal data to third parties.

3. Payment Data

Payments are processed by Stripe. We do not store credit card numbers. Stripe's privacy policy governs their handling of payment data. When a refund is issued, your purchase record is retained for accounting purposes but your access to the challenge is removed immediately.

4. Data Sharing

We share data with: Stripe (payment processing), Supabase (database hosting), Resend (transactional email), and Vercel (hosting). These providers are bound by their own privacy policies and data processing agreements.

5. Coach & Challenger Data Visibility

Coaches can see the number of challengers for their challenges and how many times their challenge referral links have been used. Challengers can choose a display name for public reviews — their email address is never shown publicly. Referral codes and reward coupons are tied to individual accounts and are not visible to other users.

6. Data Retention

We retain your data as long as your account is active. You may request deletion of your account and associated data at any time.

7. Cookies & Analytics

We use two types of cookies. First, strictly necessary cookies set by Supabase to manage your login session — these are required for the Platform to function and do not require your consent. Second, Vercel Analytics, which collects anonymous, aggregated page-view data (page URL, referrer, device type, country) to help us improve the Platform. Vercel Analytics does not use third-party cookies, does not track you across other websites, does not store personal identifiers, and is designed to be GDPR-compliant without requiring a consent banner. No data from either service is sold or used for advertising.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us through the Platform to exercise these rights.

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email.

11. Contact

For privacy questions or data requests, email us at privacy@limitless-challenges.com or open a support ticket from your dashboard.