Privacy Policy

Thank you for using Club 1000 Plus. This Privacy Policy explains what information we collect, how we use it, and the choices you have about your data when you use our website, app, and related services (collectively, the “Services”).

1) Data We Collect

Required account data includes name, email, password hash (for password accounts), account status, email verification metadata, adult attestation and its timestamp, residence state/DC, and the versions and dates of accepted terms and privacy notices. We do not require a birth date or an identity document to attest age.

Optional profile and fitness data includes avatar, date of birth, gender, height, preferences, workouts and sessions, exercises and sets, cardio duration/distance/steps/calories, notes, weight and body measurements, estimated body-fat percentage, photos, video links, routines, favorites, achievements and 1000 Club submissions. BMI, BMR and performance scores are derived estimates.

Medication and peptide logs (Peptides, adults only): if you use them, we store the compounds you enter, your doses and schedules, when each dose was taken or skipped, injection sites, vials and pens, your notes, your time zone and whether you asked for dose reminders. They are private to you: never shown to other members, never on feeds or leaderboards, used only to show your own log, its estimates and the reminders you turn on, and deleted with your account. Level estimates and mixing figures are arithmetic on what you enter, not medical advice.

Notifications: if you turn on notifications in a browser, we store that browser's push address and encryption keys with your account. The alerts you turn on — fasting goals, dose reminders, rest timers, and likes, comments, mentions and friends' new posts (each feed category can be switched off in Account Management → Push Notifications) — are sent encrypted through your browser maker's push service (such as Google, Apple, Mozilla or Microsoft), which delivers them but cannot read them. A feed alert waiting to be sent names the member and post it is about; it is deleted within 60 days of sending, and with your account.

Membership and billing: your plan and where it comes from (Free, a subscription, a club, or a plan we gave you); for a subscription, its plan, monthly or annual period, status, renewal, cancellation and end dates, whether a payment failed, the number of coach seats for a club, and the Stripe customer and subscription identifiers that link your account to Stripe; complimentary plans with their end date and reason; a log of plan changes; which items you chose to keep usable on the Free plan; and which billing emails we sent you. We do not receive or store full card numbers or bank details. Stripe, our payment processor, collects your payment details and billing address (used to calculate sales tax) on its own secure pages.

Social data includes friend requests, invitations, comments, reactions, GIF links and feed activity. Support data includes contact messages, feedback and account emails. Security data includes session identifiers, remembered-token hashes, IP address, browser/device user agent, access times and audit events. We use server-side country and state signals to decide US eligibility, and retain the decision, source and timestamp for up to seven days.

Website analytics: when you visit our public website or the app's sign-in page while signed out, we record the page, the site that linked you here (its domain only) and any campaign tags in the link, how long the page was on screen, your device type, browser and operating system, and an approximate country (and US state) from our server's location signal or your browser's time zone. We do not use cookies or browser storage for this and do not store your IP address: we tell visits apart with a one-way code made from the day, your IP address and browser, which changes every day. If you create an account, we keep the source and first page of that day's visit with your account. Browsers that send Global Privacy Control or Do Not Track are not counted, and signed-in members are not tracked this way.

Email/password login is supported. Where Facebook login is enabled, Facebook supplies account ID and permitted profile information, potentially including name, email, birthday and gender. We do not offer Sign in with Apple.

2) Why We Use Data

We use data to authenticate accounts, record fitness activity, calculate estimates and rankings, show social activity, provide support, deliver account and optional activity messages, enforce adult/US eligibility, and investigate abuse or reliability problems. Billing data is used to provide the plan you chose, take payments and collect sales tax through Stripe, send payment confirmations, renewal notices and reminders (these are account messages, not marketing), and count paying members and revenue in aggregate for running the business. Fitness estimates are informational, not medical advice. The product is not a medical device and does not diagnose, treat, cure or prevent disease.

3) Sharing and Providers

Workouts, names, avatars, achievements and social content may be visible to other members through feeds, profiles and leaderboards. Do not put private medical information in shared notes, comments or photos. Shared exercise definitions may remain without account attribution after deletion.

Coaches: if you accept a coach's invite, you choose what that coach and the other coaches at their club can see: your workouts, nutrition (days logged, calories and macros against your targets) and weight are ticked by default, and body measurements and progress photos are not. Peptide logs are never shared with a coach. You can change what you share or leave your coach at any time in My Program → Privacy. Coaches can keep private notes about you that only coaches at that club see. Accepting puts you in the coach's club in My Program; leaving takes you out. Your coach may also send you nutrition targets or routines; nothing changes in your plan until you choose to use them, and routines from a coach appear as your own copy, which you can delete. Your coach can schedule workouts and appointments for you, which you see under My schedule with optional reminders; whether you logged a session on a planned day is shown to your coach only if you share your workouts. Your coach can choose to be alerted, in the app or by a daily email, about what you share (for example a new PR or a missed planned workout). You and your coach can message each other in the app; only the two of you can read those messages (not other coaches at the club, not app administrators acting for the club, and not ChatGPT), notifications about them never show the text, and they are kept with your account until you delete it. Coaches cannot export your personal data such as your email, weight, age or location. If your coach uses our ChatGPT integration for coaching, only your name and an account identifier are available to it — never your logs or messages. Coaching records and notes about you are deleted with your account. If a club closes, it is disabled rather than deleted: its coaching records (including your conversations with its coaches and their notes) are kept so it can reopen, until its head coach deletes the club; you are released from the club and can join another coach. A head coach can export their own club’s client names, their own conversations, routines and programs.

Your plan is visible only to you and to Club 1000+ administrators; other members and coaches do not see it. A head coach sees their own club’s subscription, not their coaches’ or clients’ payments.

Payments: when you buy or manage a plan, you are taken to Stripe’s pages. We send Stripe your name, email address and account identifier, and the plan you chose; Stripe processes your payment details, billing address and tax calculation, and handles them under the Stripe Privacy Policy. Stripe tells us the result (for example, that a payment succeeded or failed) and the invoice details we show you.

Hosting/database and email providers process data needed to run the service. The current website is hosted with Hostinger; configured SMTP providers handle account mail. External website resources include Google Fonts and Plotly's CDN. Facebook, when enabled, and YouTube or other media/GIF hosts receive requests when those features or embedded resources are used; these requests can reveal your IP address and browser information. A configured geographic access provider processes request location signals. We do not sell personal data. We may disclose information when necessary to comply with law or protect users.

Community safety data includes reports, the reported content and limited review evidence, report reasons, reporter and reported-account identifiers, administrator decisions, and your blocked-user list. Reports are stored for administrator review and a notification is sent to the configured platform administrator through our existing email provider. Report details and reporter identity are not shown to the reported member.

4) Storage and Retention

Optional ChatGPT connection: when you connect your account and approve permissions, the records you choose to view or enter through ChatGPT are exchanged with OpenAI to display them and perform your requested actions. This can include routines, workout, food, weight and dose records and notes. Existing check-in progress pictures are shared only when you request them and approve the separate picture-access permission; viewing weight history alone does not send pictures. These records and pictures may contain sensitive health information. OpenAI handles its copy under its own privacy policy and your ChatGPT settings. Club 1000+ stores your connection permissions, hashed authorization tokens, expiring review drafts and retry receipts. Unsaved drafts expire after 30 minutes; draft snapshots and retry receipts are removed by daily maintenance within approximately eight days. You can revoke access from Profile → Session → Manage connected ChatGPT accounts. Disconnecting stops further access and does not remove saved activity or data already shared with ChatGPT; account deletion removes the connection and its cached records from Club 1000+.

Account, consent, fitness and social records remain while the account is active or until you delete them. The native app stores remembered session cookies in platform secure storage when you choose to stay signed in; fitness data is held in app memory during use, and selected photo files remain in your device's photo/file library. Signing out clears app session storage. Website preferences and browser cookies may remain on your device until cleared.

Website analytics records are deleted after 13 months.

Billing records stay while your account is active. Records of Stripe events we received, which hold event identifiers and no personal details, are kept to stop an event being processed twice. Stripe keeps its own payment, invoice and tax records for the periods the law requires of it, including after you delete your account.

Eligibility decision logs are kept for up to seven days. Application security audit records are kept for up to 30 days. Revoked sessions are purged after one day; inactive sessions after 30 days; remembered tokens expire after 30 days. Support and transactional email correspondence is retained for up to 90 days unless an unresolved request or specific legal obligation requires longer. Restricted hosting backups follow a maximum 30-day rotation and are not used to serve deleted content. Operators must reapply deletions before a restored backup returns to service. A minimal account identifier may be retained for up to 35 days solely to prevent restoring a deleted account.

We use HTTPS for production app/API communication, secure password hashing, and platform secure storage for remembered mobile sessions. Encryption at rest and backup security depend on the configured hosting providers; we do not claim end-to-end encryption. US-only availability does not guarantee that every provider processes data exclusively in the US.

Blocking remains in effect until you unblock the member or either account is deleted. Report evidence is retained while the report is unresolved; narrative details, review notes, and snapshots are cleared within 90 days after resolution by scheduled maintenance. Minimal decision and content identifiers remain to enforce moderation. Account deletion clears associated report evidence and personal report identifiers in the application; administrator email copies follow the support-correspondence retention period above.

5) Export, Data Wipe and Account Deletion

Export My Data: on the website, open My Profile → Account → Personal Data Controls to download your available profile/fitness export, which includes your plan, subscriptions and complimentary plans; invoices are available from Membership → Payment method & invoices. Contact support for records outside the export, such as support correspondence.

Delete My Data: in the same website area, enter your current password, then clear fitness records, body/profile measurements, local photos, routines, favorites, achievements and social relationships/interactions. Your login account, name, email, preferences, consent records, membership and subscription, and active sessions remain, so you can start again; a paid plan keeps renewing until you cancel it.

Delete Account: in the native app, open the account menu and choose Delete account; enter your current password and type DELETE. You can also visit club1000plus.com/delete-account.php, which works without installing the app or an existing signed-in session, including during travel. Enter your account email and current password, then type DELETE. Forgotten-password and Facebook-only users can use website password recovery or request deletion from their account email through support. We verify account ownership before acting on support requests; never send a password by email.

Deleting your account first ends any paid subscription it holds in Stripe, so it is not charged again (payments already made are not refunded); if that cannot be done, the deletion stops and nothing is removed, and you can try again or contact support. A head coach must close their club before deleting their account; deleting the account then also deletes that closed club and its coaching data (export it first from Membership if you want a copy). Successful deletion removes the active account, consent/profile data, membership and billing records held by Club 1000+, workouts, check-ins, locally hosted photos, comments, reactions, routines, favorites, friend relationships, achievements, submissions and remembered/server sessions. Rankings are invalidated. Shared exercise definitions remain without account attribution. Account-linked application audit records are removed; other security records expire under the schedule above.

Account records are removed when deletion succeeds. Photo cleanup and a confirmation email are attempted immediately and retried if needed; allow up to 24 hours for confirmation. The retry queue retains only the destination email and cleanup paths needed to finish. If mail cannot be delivered within seven days, the destination email is removed from the queue; contact support for status. Support requests are targeted for completion within 30 days after identity verification. Hosting backups, support correspondence, minimal restore-suppression identifiers and specific legal holds are exceptions described above. We cannot delete copies others saved independently or videos stored in your external accounts; remove those with their provider.

6) Adults Only

People under 18 may not register or use the service. If you believe someone under 18 has supplied personal data, contact us so we can investigate and remove it. Age confirmation is a self-attestation; it is not documentary proof of age.

7) Privacy Requests and Support

Contact [email protected] to request access, correction or deletion, ask about sensitive fitness/body data, or challenge an eligibility decision. Available rights depend on applicable law. We verify identity proportionately, do not require you to install the app, and do not penalize you for exercising applicable privacy rights.

8) US Availability and Travel

Server-side location checks apply to registration, sign-in and authenticated access. Inaccurate location signals, VPNs or travel can prevent access. Support can review an existing eligible user's travel request and authorize a temporary exception. Legal notices, account recovery, support and deletion remain reachable. Service language is US English; prices are in US dollars. A US-only launch does not promise US-only data residency.

9) Policy Changes

This version adds paid plans, payments through Stripe and the billing records described above (earlier versions added 18+ registration, US eligibility controls, website account deletion and coaching). We update the policy date and provide a website change notice for material changes. Registration records the accepted version; existing accounts are not represented as having accepted this new version without an actual acceptance. Members who accepted an earlier version are asked to accept this one once, when paid plans begin.

10) Contact

Bechara Solutions, LLC
17 Copley Drive
Methuen, MA 01844
Email: [email protected]