Privacy Policy

Information We Collect

Information you provide directly

• Account and contact information — name, email address, and any other details you submit when creating an account or contacting us
• Intake assessment responses — the self-reported information you submit through the Psych, Body, and Focus assessments used to customize your routine. This is sensitive information. See Section 4.
• Purchase information — transactions are processed by ClickBank; we receive confirmation of purchase, order IDs, refund status, and limited transaction metadata. We do not collect, store, or have access to your full payment card details.
• Communications — the content of emails, support tickets, chats, or other messages you send us
• User-generated input — any content, answers, notes, or responses you submit within the program

Information collected automatically

• Device and browser information (device type, operating system, browser type, language, time zone)
• IP address and approximate location (city/region-level)
• Usage data (pages viewed, features used, time spent, links clicked, session timestamps)
• Cookies, pixels, and similar tracking technologies (see Section 8)

Information from third parties

• ClickBank (purchase and refund data, affiliate attribution)
• Email service providers (engagement metrics such as opens and clicks)
• Analytics and advertising platforms (campaign, referral, and conversion data)
• Fraud prevention and security services

How We Use Information

We use the information we collect to:

• Provide, personalize, and operate ANVIL and your account
• Process purchases and refunds through ClickBank and maintain transaction records
• Generate your customized routine from your assessment responses
• Deliver transactional and program communications (access details, updates, support responses)
• Send marketing communications where you have opted in, and respect your opt-out preferences
• Provide customer support and respond to your inquiries
• Improve the Service — including content, user experience, and functionality
• Prevent fraud, abuse, and unauthorized access; enforce our Terms
• Comply with legal obligations and respond to lawful requests

Legal Bases for Processing (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract — to provide the Service you purchased
• Consent — for marketing communications, non-essential cookies, and processing of sensitive health data (see Section 4)
• Legitimate interests — to secure the Service, prevent fraud, improve our offerings, and conduct analytics, where such interests are not overridden by your rights
• Legal obligation — to meet recordkeeping, tax, and regulatory requirements

You have the right to withdraw consent at any time where consent is the legal basis; withdrawal does not affect the lawfulness of processing before withdrawal.

How We Share Information

We do not sell your personal information. We share information only as described below:

• ClickBank — as the retailer of record, for processing purchases, refunds, and affiliate attribution
• Service providers — vendors that host, operate, secure, or support the Service, including web hosting, database, email delivery, customer support tooling, analytics, and fraud prevention providers. These providers are bound by contract to protect the information and use it only for the purposes we authorize.
• Legal and safety reasons — when required by law, subpoena, court order, or governmental request; to enforce our Terms; to protect the rights, safety, or property of us, our users, or others; or to investigate fraud or security issues
• Business transfers — if we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections

Marketing and Email

If you opt in, we may send you emails about product updates, educational content, promotions, and related offers. You can unsubscribe at any time using the link in any marketing email, or by contacting [email protected]. Even after unsubscribing from marketing, you will continue to receive transactional and account-related emails while you maintain access to the Service.

Advertising

We may use advertising platforms (including but not limited to Meta, Google, and similar providers) to promote ANVIL to prospective customers. These platforms may use cookies, pixels, and similar technologies to measure ad performance and identify general audiences. We do not share your intake assessment responses or other sensitive health information with these platforms. Standard website-level signals (such as page visits or general conversion events) may be shared where you have consented to non-essential cookies.

Cookies and Similar Technologies

We use cookies, pixels, tags, local storage, and similar technologies to:

• Keep the Service functional (essential cookies)
• Remember your preferences
• Analyze how the Service is used (analytics cookies)
• Measure marketing performance and attribute referrals (advertising cookies)

You can control cookies through your browser settings. Where required by law, we obtain consent for non-essential cookies through a cookie banner or preference center. Disabling cookies may affect Service functionality.

Data Retention

We retain personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, accounting, and regulatory obligations
• Resolve disputes and enforce agreements
• Support fraud prevention and security

Sensitive health information from the intake assessment is retained only as long as needed to operate your account and will be deleted or anonymized on request or upon account closure, subject to any legal retention requirements. Backups and archived records are deleted on a rolling basis according to our standard retention schedule.

Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and monitoring. No system is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and notifying us of any suspected unauthorized access.

International Transfers

We operate online and may transfer, process, and store information in countries other than the one you reside in, including the United States. Data protection laws in those countries may differ from those in your country. Where required, we use appropriate safeguards — such as Standard Contractual Clauses — for cross-border transfers of data originating in the EEA, UK, or Switzerland.

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that we delete your personal information
• Portability — receive your information in a portable format
• Objection and restriction — object to or restrict certain processing
• Withdraw consent — where processing is based on consent
• Opt out — of marketing communications, sale of personal information (we do not sell), or targeted advertising
• Non-discrimination — we will not retaliate for exercising your rights
• Lodge a complaint — with a data protection authority in your jurisdiction

To exercise these rights, contact [email protected]. We will verify your identity before responding and will reply within the timeframe required by applicable law. You may also authorize an agent to act on your behalf, subject to verification.

California Privacy Rights (CCPA/CPRA)

California residents have the rights described above, including the rights to know, delete, correct, and limit the use and disclosure of sensitive personal information. We have not sold personal information in the preceding 12 months and do not sell or share personal information for cross-context behavioral advertising as defined under California law. The categories of personal information we collect are described in Section 1.

Other U.S. State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) have rights substantially similar to those described in Section 12 and may exercise them by contacting [email protected]. Appeals of our decisions may be submitted to the same address.

Washington My Health My Data Act and Consumer Health Data

Where applicable, including to residents of Washington and other jurisdictions with consumer health data laws, we process consumer health data only with your consent, limit collection to what is necessary to provide the Service, and do not sell consumer health data. You may withdraw consent and request deletion of consumer health data by contacting [email protected].

Do Not Track

Some browsers transmit Do Not Track signals. Because there is no consistent industry standard for how to interpret these signals, we do not currently respond to them. You can manage tracking through the cookie preference tools and opt-out mechanisms described in this Policy.

Third-Party Links and Services

The Service may link to or integrate with third-party websites and services. This Policy does not apply to third parties. We encourage you to review the privacy policies of any third party before providing information to them.

Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact [email protected] and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted with a revised Effective Date. For material changes, we will make reasonable efforts to provide additional notice (for example, by email or through a notice on the Service). Your continued use of the Service after changes take effect constitutes acceptance.

Contact Us

For questions about this Privacy Policy or to exercise your rights:

• Email: [email protected]