Legal / Privacy policy
How WorkBuilt handles your information, the choices you have, and how to request deletion of your account and data.
Effective: November 1, 2026
Last updated: November 1, 2026
Work-Built is responsible for the personal information described in this Privacy Policy.
This notice covers the WorkBuilt mobile app, website, and related training, Coach, community, and billing services (the Services). WORKBUILT LLC is the organization responsible for this processing.
The information we collect depends on how you interact with the Services and which features are available to you.
When you apply for early access, we collect your email address, first and last name, an optional statement explaining your interest in Work-Built, an optional referral source, and your marketing-consent choice.
We also maintain application status, submission and review dates, the reviewing account, and optional internal review notes.
When you create or use an account, we collect:
Your profile settings determine whether eligible profile information is public, visible to members, or private. A public profile may include your handle, display name, profile and cover photos, biography, verification status, fitness level, and training goals. Your account email, internal account identifier, city, equipment preferences, and training schedule are not part of the public-profile projection. The app does not request your street address or precise GPS location; an optional city and IP-derived general location can constitute approximate location.
When you use training and tracking features, we may collect:
Some training goals and activity data may reveal or permit inferences about your health, physical condition, or fitness interests. Work-Built is a fitness service and not a healthcare provider. Information you provide to Work-Built may not be protected by medical-privacy laws that apply only to healthcare providers, health plans, or their service providers.
When you use Coach, we collect your messages and generated responses and retain conversation history so you can continue a conversation. Relevant training preferences, Program enrollments, active workout details, and training progress may be sent with your question to Google's Gemini AI service to provide a personalized response. Conversations are not ephemeral. Do not include medical records, payment credentials, or information you do not want processed by the service.
Coach is an AI fitness assistant, not a healthcare professional. The released mobile app does not record voice conversations or request microphone access for Coach.
Apple App Store and Google Play process native purchases. We receive purchase history and verification details such as product identifiers, transaction references or purchase tokens, purchase and expiry dates, subscription status, refunds, and access entitlements. We use these to verify purchases, restore access, and support billing. We do not receive your full payment-card number from these stores. Payment information you give directly to a store is governed by that store's privacy practices.
When you use available community features, we collect content you submit, including posts, comments, photos, reactions, shared training activity, and reports or blocks. We also keep the identifiers, dates, participants, and moderation decisions needed to operate those features. Content you post can be visible to other members or the public according to the feature and your settings.
Do not submit sensitive personal information in public content, free-text fields, attachments, or direct messages unless it is necessary and you understand who may see it.
We collect the information you include when you contact support, respond to a survey, submit feedback, communicate with us, or otherwise provide information through the Services.
Our website includes a WIIL support assistant. If you choose to use it, your messages and contact details are processed to respond to your request. If you start a voice support interaction and grant microphone permission, your audio is processed for that interaction. This website feature is separate from the mobile app's text-based Coach.
We generate and maintain record identifiers and operational metadata, including creation, update, review, deletion, and activity dates; the accounts responsible for administrative actions; record versions; entitlement status; feature-access sources; and related audit information.
Our servers and service providers process technical information such as IP address, request and activity timestamps, device or browser type, operating-system information, identifiers, and diagnostic or security logs. IP addresses can indicate a general location. Firebase Authentication processes account and device information for sign-in and abuse prevention. Firebase installations and messaging use installation identifiers and, when notifications are enabled, push tokens to deliver notifications.
The app uses local storage for sign-in state, settings, and service functionality. The website and embedded services can use cookies or similar browser storage for their operation. The released app does not integrate an advertising SDK or Firebase Analytics. We do not use this information for cross-app advertising tracking.
We receive information from sign-in providers you choose, Apple or Google when verifying purchases, other members who interact with or report content, and administrators or moderators who review applications and reports.
We use personal information to:
Work-Built must not use a marketing-consent choice as consent for unrelated processing. You may withdraw consent to marketing at any time by using the unsubscribe mechanism in a marketing message or contacting us.
If a law requires us to identify a legal basis for processing, we rely on one or more of the following, as applicable:
We may disclose personal information to the following recipients for the purposes described in this policy:
We may also disclose information at your direction or with your consent.
Providers may process limited technical and security information under their own terms. Using a paid AI service does not mean messages are never retained: provider processing can include safety, abuse prevention, and other processing described in its terms.
Google Gemini API data-use terms
Work-Built does not sell personal information and does not share it for cross-context behavioral advertising, and it does not have actual knowledge of selling or sharing the personal information of people under 16. If this changes, this policy will be updated with the affected categories, recipients, purposes, and required opt-out methods before the change takes effect.
Training goals, fitness level, workout activity, performance, perceived exertion, and related inferences may be considered consumer health data under certain state laws.
Where required, Work-Built will provide a separate Consumer Health Data Privacy Policy describing the consumer health data it collects, why it collects and uses that data, its sources, the categories of data it shares, the recipients, and how to exercise applicable rights. This general Privacy Policy is not intended to replace that separate notice.
Work-Built will obtain consent before collecting or sharing consumer health data where applicable law requires it, and separate authorization before selling consumer health data where required.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, maintaining legitimate business records, complying with legal obligations, resolving disputes, enforcing agreements, preventing fraud and abuse, and establishing or defending legal claims.
Retention depends on the type of information, why it was collected, account or feature status, legal requirements, limitation periods, safety and moderation needs, and whether the information is contained in backups. When retention is no longer necessary, we delete or de-identify the information in accordance with our retention procedures. Deletion may be delayed where retention is required by law or necessary for security, fraud prevention, dispute resolution, protection of other users, or legal claims.
We respond within 30 days of receiving a deletion request, or sooner where required by law. We complete verified deletions within that window unless a lawful extension is necessary; we explain the reason and revised date within the original response period. This is a request handled by our privacy team, not an automatic or immediate deletion feature.
Depending on where you live and subject to legal exceptions, you may have the right to:
You may use available account and profile controls or submit a request to privacy@work-built.com. We may need to verify your identity before completing a request, and we will use information provided for verification only to process the request and meet our legal obligations. An authorized agent may submit a request where permitted by law, subject to verification of the agent's authority and, where applicable, your identity.
In the app, open Profile → Account → Request account deletion, or visit the page below without signing in. Email our privacy team from your account email where possible. If you cannot access that address, tell us so we can arrange another way to verify the request. Do not send passwords, sign-in codes, payment-card details, or identity documents with the initial request.
Request account and data deletion
A verified request covers your account and associated profile, training and Coach history, community content, uploaded media, and associated data held by service providers, subject to the limited retention exceptions above. Deleting an account does not automatically cancel an Apple App Store or Google Play subscription or issue a refund. You can request deletion without waiting for cancellation; manage recurring billing separately in the store.
If we deny a request, you may appeal by replying to our decision at privacy@work-built.com. You may also have the right to complain to your local data-protection or consumer-protection authority. California residents can find information about the California Consumer Privacy Act through the California Privacy Protection Agency and California Attorney General; users in the European Economic Area or United Kingdom may have the right to lodge a complaint with their local data-protection authority.
Where supported by the released Services, you can choose whether your profile is public, visible to members, or private. Public or member-visible information may be copied, reshared, or captured by others outside Work-Built's control. Changing visibility may limit future visibility but may not remove copies previously made by others.
Blocking restricts specified interactions but does not by itself erase prior content, messages, reports, or records that Work-Built must retain for safety or legal purposes. Removing a post or message may change its status or visibility without immediately deleting all underlying records.
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for protecting your credentials and devices and for notifying us promptly if you believe your account or information has been compromised.
WORKBUILT LLC is based in the United States, and our backend uses Google Cloud infrastructure in the United States. Information can also be processed in other countries where our service providers operate, including for authentication, AI, communications, and support. Those countries may have different data-protection laws from your own.
Where applicable law requires safeguards for an international transfer, the transfer must be subject to those safeguards. You can contact privacy@work-built.com for information about the providers and transfer arrangements relevant to your data. We do not promise that all data remains in your country or in a single hosting region.
Work-Built does not knowingly collect personal information from children in a manner prohibited by applicable law. If you believe a child has provided personal information contrary to this policy, contact us at privacy@work-built.com.
WorkBuilt is intended for adults aged 18 and over and is not directed to children. This statement does not mean every user's age is automatically verified. If we learn that a child has provided personal information contrary to this policy, we take appropriate steps to remove it, subject to applicable legal requirements.
Work-Built may use training preferences and activity to organize or personalize the training and content experience.
Program recommendations and Coach use training preferences, enrollments, activity, and conversation context to suggest relevant training information. AI responses can be inaccurate. You choose whether to use a recommendation or enroll in a Program; these suggestions are not medical diagnoses or instructions to disregard professional advice.
Purchase verification and access checks use store purchase status and membership entitlements to determine which paid features are available. If you believe an access decision is incorrect, contact us for assistance and review. You can use available training features without sending a question to Coach.
The Services may link to or integrate with third-party services. Those third parties control their own privacy practices, and their policies—not this Privacy Policy—govern information they collect for their own purposes. Review their privacy policies before providing information.
We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will post the updated policy and revise the "Last updated" date. If required by law, we will provide additional notice or obtain consent before a material change takes effect.
