PRIVACY POLICY

Last updated August 3, 2026

This Privacy Notice for Praxis ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use our mobile application (Praxis), or any other application of ours that links to this Privacy Notice
• Use Praxis. Praxis is a structured self-improvement application that provides day-by-day transformation plans across six life pillars — Physique, Appearance, Discipline, Confidence, Wealth, and Productivity — including a combined "Total Transformation" plan, with task tracking, streaks, progress scoring, and optional progress photos
• Engage with us in other related ways, including support or account inquiries

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at appbros761@gmail.com.

SUMMARY OF KEY POINTS

• What personal information do we process? Depending on how you use Praxis, we may process account information, plan/task progress, optional progress photos, subscription status, and device/usage data. Learn more below.
• Do we process any sensitive personal information? No. Praxis uses Sign in with Apple and Google Sign-In — we do not collect or store passwords. We do not collect health, medical, racial/ethnic, religious, or sexual orientation data.
• Do we collect information from third parties? No. We do not collect information about you from third parties.
• How do we process your information? To provide and improve the App, deliver your plan and progress tracking, manage subscriptions, communicate with you, and for security and legal compliance.
• Who do we share information with? Only the service providers necessary to run the App: our backend/hosting provider (Supabase), and payment/subscription processors (Apple, Google, RevenueCat). We do not sell your personal information and do not use it for third-party advertising.
• How do we keep your information safe? We use reasonable technical and organizational safeguards, though no system is 100% secure.
• What are your rights? Depending on your location, you may have rights to access, correct, delete, or port your data, and to opt out of certain processing.
• How do you exercise your rights? Contact us at appbros761@gmail.com.

TABLE OF CONTENTS

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On To Process Your Personal Information?
4. When And With Whom Do We Share Your Personal Information?
5. How Do We Handle Your Social Logins?
6. Is Your Information Transferred Internationally?
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Do We Collect Information From Minors?
10. What Are Your Privacy Rights?
11. Controls For Do-Not-Track Features
12. Do United States Residents Have Specific Privacy Rights?
13. Do We Make Updates To This Notice?
14. How Can You Contact Us About This Notice?
15. How Can You Review, Update, Or Delete The Data We Collect From You?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, set up your plan, or otherwise contact us. The personal information we collect may include:

• Email addresses
• Usernames / display names
• Contact or authentication data from your chosen sign-in provider (Apple or Google)

Sensitive Information. We do not collect passwords or other account login credentials. Authentication is handled by Apple or Google Sign-In; we receive only limited profile data from those providers (such as email and display name) as described below.

Progress Photos. Praxis allows you to optionally upload progress photos (e.g., front, side, back, face) to visually track change over time.

• Uploading photos is entirely optional — the App is fully usable without them.
• Progress photos are stored in your private account and are accessible only to you. We do not use them for advertising, do not apply facial recognition or biometric analysis to them, and do not share them with third parties for marketing purposes.
• You can delete individual photos or your full photo history at any time within the App.

Payment Data. We may collect data necessary to process a subscription if you choose to purchase premium access, such as your subscription status and plan tier. All payment data is handled and stored by Apple, Google Play, and RevenueCat. You may find their privacy notices here: Apple, Google, and RevenueCat.

Praxis does not collect or store your payment card information directly. Payment information is handled in accordance with each vendor's privacy policy.

Social Media Login Data. If we offer the option to register using an existing social account (e.g., Apple or Google Sign-In), and you choose to register that way, we will collect certain basic profile information from that provider, as described in "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Application Data. If you use our application, we may also collect the following if you choose to provide us with access or permission:

• Mobile Device Data. We automatically collect device information (such as device model and manufacturer), operating system and version, device identifiers, app version, and IP address.
• Camera / Photo Library. Accessed only when you choose to take or upload a progress photo. No photos are collected unless you actively initiate the upload.
• Push Notifications. We may send notifications regarding task reminders, streaks, or plan updates. You can opt out of these at any time in your device settings.

This information is primarily needed to maintain the security and operation of the App and for troubleshooting.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.

Information automatically collected

In Short: Some information — such as device characteristics and service logs — is collected automatically when you use the App.

We automatically collect certain information when you use the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and service information such as IP address, device characteristics, operating system, language preference, and technical logs related to how the App connects to our servers. This information is primarily needed to maintain the security and operation of our Services.

The information we collect includes:

• Log and Service Data. Service-related and diagnostic information our servers automatically collect when the App communicates with our backend (for example, request metadata needed to operate accounts, sync, and subscriptions). We do not currently use a third-party product-analytics or crash-reporting SDK in the App.
• Device Data. Information about your mobile device, including device and application identification numbers, IP address (or proxy server), operating system, and system configuration information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following purposes:

• To facilitate account creation and authentication and otherwise manage your account.
• To deliver the Services, including your selected pillar plan, daily tasks, streaks, and Praxis score.
• To store and display your progress photos to you within the App.
• To manage your subscription, including validating premium entitlement status via RevenueCat.
• To respond to inquiries and offer support.
• To send administrative information, such as changes to our terms or policies.
• App Performance & Security. To operate the App reliably, troubleshoot issues using service logs, and detect errors or abuse.
• Push Notifications. To send task reminders, streak alerts, or plan updates you've enabled.

We do not use your personal information for third-party advertising, and we do not sell your personal information.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you.

The GDPR and UK GDPR require us to explain the legal bases we rely on to process your personal information:

• Consent. For optional features such as progress photo uploads and push notifications. You can withdraw consent at any time.
• Performance of a Contract. To fulfill our obligations to you, including providing the App's core functionality (account, plans, progress tracking).
• Legitimate Interests. To protect the App and provide a reliable service, and keep you informed about your subscription and app updates.
• Legal Obligations. Where necessary to comply with applicable law.

If you are located in Canada, this section applies to you.

We may process your information based on your express or implied consent, which you may withdraw at any time. In limited cases, applicable law may permit processing without consent — for example, for fraud detection and prevention, in connection with a business transaction, or where required to comply with a subpoena, warrant, or court order.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information only with the categories of service providers necessary to operate the App.

We may share your data with third-party vendors who perform services on our behalf and require access to do that work. We have agreements with these providers designed to restrict them from using your information for any purpose other than providing services to us.

We may also share your information:

• Business Transfers. In connection with, or during negotiation of, any merger, sale of company assets, financing, or acquisition of all or part of our business.
• Legal Requirements. If required to do so by law or in response to valid requests by public authorities.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you register using a third-party social account, we may receive certain profile information about you.

If you register using a social login option (such as Sign in with Apple or Google), we will receive certain basic profile information from that provider — typically your name and email address. We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, the privacy practices of the social login provider; we recommend reviewing their privacy notice as well.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our service providers' infrastructure may be located in the United States. Regardless of your location, your information may be transferred to, stored by, and processed in the United States and other countries where our third-party providers (see Section 4) operate.

If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, these countries may not have data protection laws as comprehensive as your home country's. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for such transfers. Details can be provided upon request.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information only as long as necessary for the purposes set out in this Privacy Notice.

We retain your personal information for as long as your account is active, unless a longer period is required or permitted by law. When we no longer have an ongoing legitimate need to process your information, we will delete or anonymize it, or, if that is not immediately possible (e.g., information stored in backup archives), securely isolate it from further processing until deletion is possible.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your information through technical and organizational security measures.

We have implemented reasonable technical and organizational security measures designed to protect your personal information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. Transmission of personal information to and from the Services is at your own risk.

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from children under 13.

Praxis is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, contact us at appbros761@gmail.com.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have rights that give you greater access to and control over your personal information.

If you are located in the EEA, UK, Switzerland, or Canada, you may have the right to: (i) request access to and a copy of your personal information; (ii) request rectification or erasure; (iii) restrict processing; (iv) data portability; and (v) object to processing, including automated decision-making that produces legal or similarly significant effects. If such a decision is made, we will inform you, explain the main factors, and offer a way to request human review.

You can exercise these rights by contacting us at appbros761@gmail.com. We will consider and act on requests in accordance with applicable law.

If you are in the EEA or UK and believe we are unlawfully processing your data, you have the right to complain to your Member State or UK data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing consent: Where we rely on your consent, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing carried out before withdrawal.

Account Information: You can review or update your account information, and delete your account, at any time from the Profile tab within the App. Deleting your account will remove your account and associated data, except where retention is required to prevent fraud, resolve disputes, or comply with legal obligations. You can also contact us directly to request account deletion.

If you have questions about your privacy rights, email us at appbros761@gmail.com.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because no uniform technology standard for recognizing DNT signals has been finalized, we do not currently respond to DNT signals. If a legal standard is adopted requiring us to do so, we will update this notice accordingly.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, or Virginia, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing.

Categories of Personal Information We Collect

We do not collect sensitive personal information as defined under applicable U.S. state privacy laws.

Sources: All personal information listed above is collected directly from you or automatically through your use of the App (see Section 1).

Sharing: We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We disclose limited categories of personal information to service providers for the business purposes described in Section 4 — this is not considered "selling" or "sharing" under applicable law.

Your Rights

Depending on your state, these may include the right to:

• Know whether we are processing your personal data
• Access your personal data
• Correct inaccuracies
• Request deletion of your personal data
• Obtain a copy of personal data you've provided to us
• Non-discrimination for exercising your rights
• Opt out of targeted advertising, sale, or profiling (not applicable — we do not engage in these practices)
• Obtain a list of third parties we've disclosed personal data to (CA, CT)

How to exercise your rights: Email us at appbros761@gmail.com. Under certain state laws, you may designate an authorized agent to submit a request on your behalf; we may require proof of authorization.

Verification: We will verify your identity using the information already in your account before processing a request, and may request additional information if necessary for security purposes.

Appeals: If we decline to act on your request, you may appeal by emailing appbros761@gmail.com. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine the Light" Law: California residents may request, once per year and free of charge, information about any personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. We do not disclose personal information for third-party direct marketing purposes. To make a request, contact us using the details in Section 14.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with applicable law.

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date. If we make material changes, we will notify you by posting a notice in the App or by direct notification. We encourage you to review this notice periodically.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email us at appbros761@gmail.com.

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we've processed it, correction of inaccuracies, or deletion of your personal information. You may also withdraw your consent to our processing where applicable. You can delete your account directly from the Profile tab within the App, or make a request by emailing us at appbros761@gmail.com.