Privacy Policy – M2 Method App

Effective Date: October 16, 2026
Last Updated: October 16, 2026

M2 Method Inc ("we", "our" or "us") respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have when you use the M2 Method mobile app and related website (together, the "App"). Where the law requires your consent, we ask for it separately.

1. Information We Collect

We collect the information below to run the App and the programs you choose.

a. Information you give us

• Account details: name, email address, password and date of birth.
• Profile: profile photo, bio and the members you follow.
• Questionnaire and progress: answers to the program recommendation questionnaire and your weekly progress check-ins. These may include fitness goals and health information such as pelvic health symptoms, childbirth history, urinary leakage, pelvic pain, diastasis recti and body measurements, and your exercise progress.
• Content you post: chat messages, photos, group posts and blog comments.
• Enquiries: messages you send us for support or consultations.

b. Information collected automatically

• Device and log data: device type, operating system, app version, IP address and a random installation ID generated on your device.
• App activity and exercise progress: programs viewed, exercises and workouts you complete, your progress through each program, streaks and leaderboard activity.
• Notifications: your push notification token and notification preferences.
• Location: we do not ask for precise location. We may infer an approximate location (such as country) from your IP address.

c. Information from payments

Purchases are processed by Apple, Google or Stripe. We receive a transaction ID and purchase status. We never receive or store your full card number.

d. Device permissions

The App may ask for the permissions below. Each is optional, and you can change it at any time in your device settings.

• Camera: to give real-time exercise form guidance.
• Photo library: to choose a profile or chat picture, only when you select one.
• Notifications: for workout reminders and message alerts.

e. Camera and form guidance

Form analysis runs on your device using Google ML Kit. Your camera images, video and body-pose data are not sent to our servers or to any third party, and we do not store them. We store only your exercise progress, such as which exercises you completed.

2. How We Use Your Information

We use your information to:

• Create and manage your account and provide the programs you enrol in.
• Process purchases and subscriptions, and give you access once a payment is verified.
• Recommend programs, track your progress and personalise your experience.
• Provide community features such as chat, groups, comments and leaderboards.
• Send service messages and notifications, such as reminders, program updates and replies to your enquiries.
• Provide customer support.
• Keep the App secure, prevent fraud and fix problems.
• Improve and develop the App.
• Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we do not use your health or fitness information for advertising.

3. Legal Bases for Processing (EEA, UK and similar laws)

Where data protection law such as the GDPR applies, we rely on these legal bases:

• Contract: to create your account, provide programs and process your purchases.
• Legitimate interests: to secure and improve the App, prevent fraud and answer your enquiries, balanced against your rights.
• Consent: for camera access, push notifications and, where required, processing of health-related information. You can withdraw consent at any time, and doing so does not affect earlier processing.
• Legal obligation: to keep tax and accounting records and respond to lawful requests.

4. How We Share Information

We do not sell or rent your personal information. We share it only in these cases:

• Service providers who work for us under confidentiality and data protection terms: Google Firebase (push notifications), SendGrid (emails such as verification codes and reminders), Amazon Web Services (storage for photos and media you upload), Bunny.net (exercise video streaming) and our server hosting provider.
• Payment platforms: Apple (iOS purchases) and Stripe (Android and web payments), to process your purchases.
• Other members, when you use community features. Your profile, posts, comments, chat messages and leaderboard activity are visible to the people they are directed at or shared with.
• Legal and safety: when required by law, or to protect the rights, safety and property of our users, the public or us.
• Business transfers: in a merger, acquisition or sale of assets. We will tell you if your information becomes subject to a different privacy policy.
• With your consent, or at your direction.

These are all the services that receive your data. The App does not use analytics, advertising or artificial intelligence services, and it has no third-party tracking SDKs.

5. Payments and Subscriptions

• iOS: purchases are made through Apple In-App Purchase. Apple charges your Apple ID, and subscriptions renew automatically unless you cancel in your Apple ID settings at least 24 hours before the period ends.
• Android: payments are processed by Stripe.
• We receive only a transaction ID and purchase status, which we use to give you access and handle refunds or disputes.
• Refunds are handled by the payment platform you used. Access may be removed after a refund or chargeback.
• Apple and Stripe handle your payment details under their own privacy policies.

6. Community Features and User Content

Chat, groups, blog comments, public profiles and leaderboards let other members see what you share. Please do not post sensitive information you would not want others to see. You can report comments, and we may review and remove content that breaks our Terms of Use or the law. Content you share with others may remain visible to them after you delete it from your own view, unless you delete your account (see Section 7).

7. Data Retention and Account Deletion

• We keep your information while your account is active and as long as needed to provide the App.
• You can delete your account in the App under Settings, which requires your password.
• When you delete your account, we immediately delete your account, profile, questionnaire answers and health information, exercise progress and logs, program enrolments, notification settings and our purchase records from our live database.
• Posts, comments, chat messages and photos you shared with other members are not deleted. They stay visible without your name or profile.
• Apple and Stripe keep their own payment records under their own policies and the law. We do not control them.
• Our database provider keeps backups, which are overwritten on its regular schedule. Deleted information can remain in a backup until then, and we do not use backups to restore deleted accounts.

8. International Data Transfers

We and our service providers may process your information in other countries, including countries whose data protection laws differ from yours. Where required, we use safeguards such as standard contractual clauses to protect information that leaves your region.

9. Data Security

We protect your information with HTTPS encryption in transit, hashed passwords, role-based access controls for our administrators, and secure storage of your sign-in details on your device. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you and the authorities as the law requires.

10. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy of it.
• Correct inaccurate information, or update it in the App.
• Delete your information (you can delete your account in the App).
• Receive your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, including turning off notifications in your notification settings.
• Complain to your local data protection authority.

California and other US states: you may ask what personal information we collect and why, and ask us to delete or correct it. We do not sell personal information or share it for cross-context behavioural advertising. We will not treat you differently for using your rights.

Other regions: residents of the EEA, UK, Canada, Australia, Brazil, India and other countries with privacy laws may have additional rights under those laws, and we honour them.

How to use your rights: contact us through the App. We may need to verify your identity first. We respond within the time the law allows, usually 30 to 45 days. You may use an authorised agent where the law permits.

11. Children's Privacy

The App is not intended for anyone under 13, or under 16 where local law sets a higher age. We do not knowingly collect personal information from children below that age. If you believe a child has given us information, contact us through the App and we will delete it.

12. Health and Fitness Information

You choose what health and fitness information you give us. This can include pelvic health symptoms, childbirth history, urinary leakage, pelvic pain, diastasis recti, body measurements and your exercise progress. We use it only to provide and personalise the App, we do not sell it, and only authorised staff can see it. The App provides general fitness information and is not medical advice. Talk to a doctor before starting any exercise program. The form scoring is automated and may be inaccurate, so stop if something feels wrong.

13. Links, Changes and Contact

Third-party links. The App may link to other websites or services. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy. We may update this policy from time to time. We will post the new version with a new "Last Updated" date, and notify you by email or in the App if the changes are significant. Where the law requires, we will ask for your consent again.

Contact us. For questions or requests about this policy:

M2 Method Inc