Privacy policy

Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website or use our app. The website and app are operated by The Transformation Challenge FZC, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

By accessing or using the Website you agree to be bound by these Terms. If you disagree with any part of the terms then you may not access the Website.

Information We Collect

When you browse or interact with our site, we may collect:

• Waitlist and contact forms: first name, last name, email address, mobile number with country code, and gender, when you join the waitlist or register for a live session.
• Free meal plan: your first name, email address, mobile number, goal, sex, weight, body-fat estimate, activity level, dietary preferences and allergies, and the calorie and macro targets calculated from them.
• Suggestions and feedback: your name (optional), email address and the message you send us from the roadmap page.
• Approximate location: the country, region and city inferred from your IP address when you submit a form, used to pre-select your phone country code and to understand where our members are.
• Analytics and session recordings: with your consent, how you use the site — pages visited, clicks, scrolling and anonymised session replays — plus your IP address, device and browser details.
• Cookie data: via the tools listed under Cookies below, only after you accept them.

How We Use Your data

We use your information to:

• Send you what you asked for — your meal plan link, your live-session confirmation, or a reply to your suggestion
• Generate your personalised meal plan from the numbers you give us
• Email or text you about upcoming challenges and the programme, where you have ticked the box to say we may
• Respond to your enquiries and feedback
• Understand how the site is used, fix problems, and improve the site and our marketing

Where we rely on your consent (marketing emails and texts, analytics, session recordings and advertising cookies) you can withdraw it at any time: unsubscribe links in every email, reply STOP to any text, or change your cookie choice using the link in the footer.

Data Sharing

We do not sell your data. We use the following providers to run the site, each acting on our instructions under a data-processing agreement:

• Klaviyo — stores your contact details and consent, powers the waitlist and sign-up forms, and sends our emails and texts. Klaviyo's own tracking script only loads after you accept cookies.
• Vercel — hosts the website, stores your meal plan and any suggestion you send us in private storage, and provides the approximate location derived from your IP address.
• Anthropic (Claude) — writes your free meal plan. We send your first name, goal and the nutrition numbers you enter; we do not send your email address, phone number or health data from the app.
• Microsoft Clarity — with your consent, records anonymised session replays and heatmaps so we can see where the site is confusing. Clarity masks what you type into forms by default.
• Google (Tag Manager, Analytics and Ads) and Meta (Pixel) — with your consent, measure site performance and the effectiveness of our advertising.
• Supabase — hosts the app's database in its London (UK) region, including health data from apps you connect, as described under Health apps and connected devices below.
• Terra — syncs health data for members connected through an older version of the app, as described under Garmin Connect below.

In the app, photos you choose to scan are also sent to an AI provider, as described under AI Services below.

Some of these providers process data outside the UK, including in the United States, under the UK International Data Transfer Addendum or an adequacy decision.

AI Services

We use external AI providers (OpenAI and Anthropic) for a small number of features you start yourself:

• Meal photo analysis: when you take a photo of a meal in the app, the photo is sent to estimate its calories and macros.
• Nutrition label scanning: when you photograph a food label, the photo is sent to read the nutrition values.
• Free meal plan: on the website, the details listed under Data Sharing above are sent to write your plan.

We send only what that feature needs. We do not send your name, email address or phone number with your photos, and the providers do not use this data to train their models.

Health and fitness data is never shared with AI. Data we receive from Garmin, Apple Health, Android Health Connect or any other connected device or health platform is never shared with, sent to, processed by or otherwise made available to any external AI provider or third-party AI service.

Data storage

Your data is stored securely using industry-standard measures. We take appropriate steps to prevent loss, misuse, or unauthorised access.

How long we keep it. Your meal plan stays available for as long as its private link is in use, so you can come back to it, and is deleted when you ask. Suggestions and feedback are kept while we act on them. Marketing contact details are kept until you unsubscribe or ask us to remove you. Analytics and session recordings are retained by the providers above for their standard periods (Clarity: 30 days for recordings; Google Analytics: up to 14 months).

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain uses of your data
• Withdraw consent at any time, including for cookies, session recordings and marketing messages
• Complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data

To exercise any of these rights, email us at info@8weektransformationchallenge.com.

Changes to This Policy

We may revise this policy from time to time. Please review periodically for updates.

Cookies

We use cookies and similar storage to run the site and, with your permission, to understand how it is used. Nothing beyond the essentials loads until you choose. When you first visit, a banner offers Accept or Essential only. Choosing Essential only keeps analytics, session recordings and advertising tools switched off. You can change your choice at any time with the Cookie settings link in the footer, or by clearing this site's data in your browser.

The cookies and storage in use are:

Strictly necessary cookies let you move around the website and use essential features like secure areas and online billing. We use these strictly necessary cookies to:

• Remember information you've entered on order forms when you visit different pages in a single web browser session
• Remember what you’ve ordered when you get to the checkout page
• Identify you as being logged in to our website
• Make sure you connect to the right service on our website when we make any changes to the way the website works

Performance cookies collect information about how you use our website. For example, which pages you visit and if you experience any errors. These cookies are essential to us being able to operate and maintain our website.

These cookies don't collect any information that could identify you – all the information collected is anonymous.

Accepting these cookies is a condition of using the website, so if you prevent them we cannot guarantee how our site will perform for you. In some cases, some performance cookies are managed for us by third parties, but we don't allow the third party to use the cookies for any purpose other than those listed below.

We use performance cookies to:

• Provide statistics on how our website is used
• See how effective our adverts are
• Help us improve the website by measuring any errors that occur
• Test different designs of our website

Functional cookies are used to provide services or to remember settings to improve your visit. You decide whether or not these cookies are used, but preventing them may mean we can't offer you some services, and will reduce the support we can offer you.

We use functional cookies to:

• Show you when you're logged in to the website
• Share information with partners to provide a service on our website

The information shared is only to be used to provide the service, product or function and not for any other purpose.

Targeting cookies are linked to services provided by our trusted partners, as listed below. You decide whether or not these cookies are used.

We use targeting cookies to:

• Link to social networks who may use information about your visit to target advertising to you on other websites
• Provide advertising agencies and our trusted partners with information on your visit so that we can present adverts that you may be interested in, and prevent you receiving duplicate ads
• Deliver content, including video content, tailored to your interests

Health apps and connected devices

In the 8 Week Transformation Challenge app you can choose to connect a health app or wearable, so your steps, sleep, weight and other stats appear in the app without typing them in. Connecting is optional, you choose which app to connect, and you can disconnect at any time. This section covers every health app we connect to. The rules below apply to all of them, and each app has its own part further down saying exactly what we read from it.

How we treat data from every health app

• Read only. We only read data. We never write, change or delete anything in your health app or wearable account.
• What we use it for. To show you your own stats and progress in the app, track your progress against your personal targets during your challenge or membership, and count your daily steps towards challenge leaderboards. Nothing else.
• Who can see it. You. Our coaching and support team, to help you with your plan. Other members see only your daily step count on challenge leaderboards and in groups you join, and only if you have chosen to appear on the leaderboard.
• Never sold, never used for advertising. We do not sell health data, share it with advertisers or marketers, or use it for advertising, profiling or anything unrelated to your fitness.
• Never sent to AI. Health data is never shared with, sent to or processed by any AI provider or AI service (see AI Services).
• Where it is stored. In our own database, hosted by Supabase in its London (UK) region. Supabase acts only on our instructions under a data-processing agreement and does not use the data for anything else. Data is encrypted in transit and at rest.
• Sign-in details. When you connect an account such as Garmin or Google, the access we are given is stored encrypted on our servers. It never sits on your phone and our staff cannot see it.
• Disconnecting. You can disconnect any app in the app under Profile, Health connections, or from the health app itself (each part below says how). We then stop receiving new data from it straight away and delete the access we were given. Data we already received stays in your progress history until you ask us to delete it or delete your account.
• Deleting it. If you delete your account, your health data is permanently deleted within 30 days. You can also ask us to delete or send you a copy of your health data at any time by emailing info@8weektransformationchallenge.com.

Garmin Connect

What we read: your daily step count, active calories, sleep (time asleep, and when you fell asleep and woke up), weight and body fat percentage. We do not read your activities or workouts, heart rate, stress, location, women's health data or any other Garmin data.

How it reaches us: through the official Garmin Connect Developer Program (Garmin Health API), only after you sign in to Garmin and give permission. When your Garmin device syncs with Garmin Connect, Garmin sends the new data directly from Garmin's servers to ours. If you also turn on Historical data when you connect, we request up to your last 30 days.

Who it is shared with: nobody. Garmin data is not sold, not shared with any third party and never sent to any AI service. It is stored only in our own database as described above. Members who connected Garmin through an older version of our app are connected through Terra, a health data integration service acting as our processor; we are moving those connections to the direct connection described here, after which Terra will no longer receive any Garmin data.

In the app: data from Garmin is labelled Garmin wherever it is shown.

To disconnect: in the 8WTC app under Profile, Health connections, or in the Garmin Connect app under Settings, Connected Apps, 8WTC.

Google Health (Fitbit)

What we read: your daily step count, active calories, weight, body fat percentage, water intake and sleep, through the Google Health API, only after you sign in to Google and give permission. Access is read-only.

Google API Services User Data Policy: 8WTC's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to provide the features described above, is not used for advertising, is not sold, is not transferred to anyone else and is never sent to any AI service.

To disconnect: in the 8WTC app under Profile, Health connections, or in your Google Account under Security, Your connections to third-party apps and services.

WHOOP

What we read: your sleep, your daily step count and energy burned (from WHOOP's daily cycles) and the weight in your WHOOP profile, through the WHOOP Developer Platform, only after you sign in to WHOOP and give permission. We do not read your recovery, strain or workout data.

To disconnect: in the 8WTC app under Profile, Health connections, or in the WHOOP app.

Apple Health

What we read: with your permission, steps, active energy, sleep, weight, body fat percentage, dietary energy, protein, carbohydrates, fat and water, through Apple HealthKit on your iPhone. The app adds these up into daily totals and sends only those totals to our servers.

Data from Apple Health is never used for advertising or sold, and is not stored in iCloud.

To disconnect: in the 8WTC app, or on your iPhone under Settings, Health, Data Access & Devices, 8WTC.

Android Health Connect

What we read: with your permission, steps, active calories, sleep, weight, food energy, protein, carbohydrates, fat and water, through Health Connect on your Android phone. The app adds these up into daily totals and sends only those totals to our servers.

Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

To disconnect: in the 8WTC app, or on your phone under Settings, Health Connect, App permissions, 8WTC.

Samsung Health

What we read: with your permission, steps, active calories, sleep, weight, body fat percentage, food energy, protein, carbohydrates, fat and water, through the Samsung Health Data SDK on your Samsung phone. The app adds these up into daily totals and sends only those totals to our servers.

To disconnect: in the 8WTC app, or in Samsung Health under Settings, Data permissions, 8WTC.

Security

Health and medical data is treated as sensitive personal data. It is encrypted in transit and at rest, access is restricted to authorised personnel only, and it is never used for advertising or sold to third parties.