California Privacy Notice

Last updated:

Introduction

This California Privacy Notice supplements our general Privacy Policy and applies solely to California residents. It describes how we collect, use, disclose, and otherwise process personal information of California residents, as required by the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA).

Categories of Personal Information We Collect

We collect the following categories of personal information about California residents:

CategoryExamplesCollected
IdentifiersName, email address, account ID, IP addressYes
Personal RecordsPayment information, health and nutrition data you provideYes
Protected ClassificationsAge, gender (if provided for personalization)Yes
Commercial InformationSubscription status, purchase history, preferencesYes
Biometric InformationHeart rate, activity data (from connected devices with consent)Yes (with consent)
Internet ActivityApp usage, browsing history within our service, interactionsYes
GeolocationApproximate location based on IP addressYes
Sensory DataProgress photos (if you choose to upload them)Yes (optional)
InferencesHealth goals, dietary preferences, activity patternsYes
Sensitive Personal InformationHealth-related data, precise geolocation (only with explicit consent)Yes (with consent)

Your California Privacy Rights

As a California resident, you have the following rights under the CCPA/CPRA:

Right to Know

You have the right to request that we disclose what personal information we have collected, used, disclosed, and sold about you in the past 12 months.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out of Sale/Sharing

You have the right to opt-out of the “sale” or “sharing” of your personal information. We honor Global Privacy Control (GPC) signals as opt-out requests.

Right to Limit Use of Sensitive Personal Information

You have the right to limit our use of your sensitive personal information to purposes necessary to provide our services.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, “sale” and “sharing” include disclosing personal information to third parties for monetary consideration or for cross-context behavioral advertising purposes.

We do not sell your personal information for monetary consideration.

We may share certain information with advertising partners for targeted advertising. You can opt-out of this sharing by:

  • Clicking the “Cookie Preferences” link in our website footer
  • Enabling Global Privacy Control (GPC) in your browser
  • Contacting us at privacy@gram.fit

We honor GPC signals. When detected, we treat this as an opt-out of sale and sharing.

Important: We do NOT use health data for advertising purposes.

How to Exercise Your Rights

To submit a request to exercise your California privacy rights, you may:

  • Email us: privacy@gram.fit
  • Use in-app settings: Navigate to Settings > Privacy Center to manage your preferences and submit requests

We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

Response Time: We will respond to verifiable consumer requests within 45 days. If we need more time (up to 90 days total), we will inform you of the reason and extension period in writing.

Contact Us

If you have any questions about this California Privacy Notice or our privacy practices, please contact us:

Email: privacy@gram.fit

Response Time: Within 45 days of receiving your verifiable request.