[ PRIVACY NOTICE ]

Your email address is collected at account creation and is used to authenticate you, deliver transactional notices (allowance grants, unlock confirmations, account and support messages) and administer your membership.

Email addresses are stored in our managed backend database, which is encrypted at rest and in transit (TLS). Access is restricted to authenticated, authorised administrative roles only. We never sell or rent email addresses to third parties.

Transactional email is sent from our verified domain, notify.bulletproofkitchen.fit. Delivery and bounce events are logged so we can diagnose failed messages; message bodies and recipient addresses are retained only as long as needed to operate and support the Services.

When you purchase a membership or credit pack, your billing address is captured at checkout for payment authorisation, tax and fraud-prevention purposes.

Billing address data is held by our payment processor, Stripe, Inc. We store only the reference to your customer record and the minimum billing metadata returned to us — we do not hold an independent copy beyond what Stripe provides in transaction records.

Transaction records (amount, date, product, status) are retained in our database to maintain your credit ledger, process refunds and meet accounting obligations.

Your full card number and security code (CVC) never touch our servers. Card details are entered directly into Stripe's PCI-DSS Level 1 certified checkout and are stored and processed solely by Stripe.

We receive only a tokenised reference, the card brand and the last four digits, which are used to display your payment method and to process renewals, refunds and disputes. We cannot see or retrieve your full card number.

You may find Stripe's privacy notice at https://stripe.com/privacy.

All traffic between your device and our Services is encrypted over HTTPS/TLS. Passwords are never stored in plain text — they are cryptographically hashed by our authentication provider.

Database access is governed by row-level security policies: members can read and write only their own records, and privileged operations (credit adjustments, publishing) are restricted to verified administrator roles that are checked server-side on every request.

Payment webhooks from Stripe are signature-verified before any data is processed, and each credit or subscription change is recorded in an auditable ledger.

You may request access to, correction of, or deletion of your personal information at any time by submitting a request through the Support Desk form at /support. Deleting your account removes your stored credentials and membership record; payment records retained by Stripe remain subject to Stripe's retention obligations.

For the full legal description of what we collect, why, and your statutory rights, see our Privacy Policy.