PRIVACY POLICY & TERMS OF USE

Last updated: June 19, 2026

PRIVACY POLICY

Introduction

This Privacy Policy for Natural Physique ("we," "us," "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use our mobile application (Natural Physique)

• Use Natural Physique, a fitness app that analyzes your body measurements to generate a personalized Blueprint Score, workout split, and nutrition targets

• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at natural.physique01@gmail.com.

1. What Information Do We Collect?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:

• Names

• Phone numbers

• Email addresses

• Usernames

• Passwords

• Debit/credit card numbers

Sensitive Information

When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Health data (body measurements, weight, fitness metrics)

• Financial data

Payment Data

We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Apple. You can find their privacy notice at: apple.com/legal/privacy/data/en/app-store/

Application Data

If you use our application, we may collect the following information if you choose to provide us with access or permission:

• Mobile device access (camera for body measurement photos, storage for app data and other features)

• Usage analytics and performance metrics

This information is primarily needed to maintain the security and operation of our application, for troubleshooting, and for our internal analytics and reporting purposes. If you wish to change our access or permissions, you may do so in your device's settings.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts

• To deliver and facilitate delivery of services to you

• To respond to your inquiries and offer support

• To send administrative information and updates about our products and services

• To fulfill and manage your orders, payments, returns, and exchanges

• To enable user-to-user communications if you use coaching or social features

• To protect our Services (security, fraud prevention, and monitoring)

• To evaluate and improve our Services, products, marketing, and your experience

• To comply with our legal obligations

3. When and With Whom Do We Share Your Information?

We may share your information in specific situations with the following third parties:

Third-Party Service Providers

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. We have contracts in place with our third parties designed to help safeguard your personal information. They cannot use your personal information except as instructed by us and commit to protect the data they hold on our behalf.

Our service providers include:

• Supabase (database and infrastructure)

• Firebase (authentication and analytics)

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. How Do We Handle Social Logins?

If you choose to register or log in using a social media account (such as Facebook, Google, or Apple), we may receive certain profile information about you from that provider. This may include your name, email address, profile picture, and other information you choose to make public. We use this information only for the purposes described in this Privacy Policy. Please review the social media provider's privacy notice to understand how they handle your data.

5. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law. We will retain your personal information for the duration of your account. When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it. If deletion is not possible, we will securely store and isolate your information from further processing until deletion is possible.

6. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise that hackers, cybercriminals, or other unauthorized parties will not be able to defeat our security. Although we do our best to protect your information, transmission of data to and from our Services is at your own risk.

7. Do We Collect Information from Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to such minor's use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and delete such data. Please contact us at natural.physique01@gmail.com if you become aware of any data we may have collected from minors.

8. What Are Your Privacy Rights?

Depending on where you are located, you may have the following rights:

• Right to access your personal data

• Right to correct inaccuracies in your personal data

• Right to request deletion of your personal data

• Right to withdraw your consent at any time

• Right to non-discrimination for exercising your privacy rights

How to Exercise Your Rights

To exercise any of these rights, you can contact us using the contact information below. We will verify your identity before processing your request and will respond within the timeframe required by applicable law.

9. Controls for Do-Not-Track Features

Most web browsers and mobile operating systems include a Do-Not-Track ("DNT") feature. At this stage, there is no uniform technology standard for recognizing and implementing DNT signals. As such, we do not currently respond to DNT browser signals or other mechanisms that automatically communicate your choice not to be tracked online. If an industry standard is adopted that we must follow in the future, we will inform you about that practice in an updated version of this Privacy Policy.

10. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have additional rights under your state's privacy laws, including:

• Right to know whether or not we process your personal data

• Right to opt out of targeted advertising or the sale of personal data

• Right to limit use and disclosure of sensitive personal data

11. Do We Make Updates to This Notice?

Yes, we may update this Privacy Policy from time to time to stay compliant with relevant laws. The updated version will be indicated by an updated "Last updated" date at the top. If we make material changes, we may notify you by prominently posting a notice or sending you a notification. We encourage you to review this Privacy Policy frequently to stay informed of how we are protecting your information.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this Privacy Policy, you may email us at:

natural.physique01@gmail.com

13. How Can You Review, Update, or Delete Your Data?

Based on applicable laws in your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, to correct inaccuracies, or to delete your personal information. You may also have the right to withdraw your consent to our processing of your data. These rights may be limited by applicable law. To request to review, update, or delete your information, please submit a data subject access request by emailing us at natural.physique01@gmail.com. We will verify your identity and respond within the timeframe required by applicable law.