Privacy Policy.

01Contact us

Work-Built is responsible for the personal information described in this Privacy Policy.

• Legal entity: WORKBUILT LLC
• Postal address: 2218 Gallatin Green Blvd A, Bozeman, MT 59718
• Privacy email: privacy@work-built.com

02Personal information we collect

The information we collect depends on how you interact with the Services and which features are available to you.

Early-access applications

When you apply for early access, we collect your email address, first and last name, an optional statement explaining your interest in Work-Built, an optional referral source, and your marketing-consent choice.

We also maintain application status, submission and review dates, the reviewing account, and optional internal review notes.

Account and profile information

When account and profile features are available, we may collect:

• Account identifiers, authentication-provider identifier, email address, optional phone number, signup method, account status, scope, and roles
• Handle and display name, and optional first name and surname
• Optional profile and cover images, biography, date of birth, gender, locale, time zone, and city
• Profile visibility and verification status
• Training preferences, including fitness level, training goals, available equipment, preferred training days, sessions per week, and preferred session duration

Your profile settings determine whether eligible profile information is public, visible to members, or private. A public profile may include your handle, display name, profile and cover images, biography, verification status, fitness level, and training goals. Work-Built does not include your account identifier, legal name, date of birth, gender, locale, time zone, city, available equipment, or training schedule in its defined public-profile projection.

Training and performance information

When you use training and tracking features, we may collect:

• Program enrollments, program revisions, workout schedules, and enrollment status
• Workout and exercise identifiers, workout start and completion times, elapsed time, completion status, substitutions, and notes
• Sets and exercise results, including repetitions, load, duration, distance, calories, perceived exertion, and result status
• Personal records, such as maximum load or repetitions, fastest time, maximum distance or volume, and estimated one-repetition maximum
• Content viewing progress, completion, playback position, last-viewed time, and bookmarks
• Challenge participation, team membership, progress, rank, score source, and completion
• Achievements, certificates, streaks, award sources, and related completion or revocation information

Some training goals and activity data may reveal or permit inferences about your health, physical condition, or fitness interests. Work-Built is a fitness service and not a healthcare provider. Information you provide to Work-Built may not be protected by medical-privacy laws that apply only to healthcare providers, health plans, or their service providers.

Service-eligibility verification

If you request service-related eligibility verification, we may collect whether you identify as active military, a veteran, law-enforcement personnel, or a first responder; the verification provider; a provider verification reference; request, verification, and expiration dates; verification status; and a reason if a request is rejected.

Work-Built is designed to retain a provider reference and decision metadata, not verification documents or the provider's underlying sensitive payload.

Community content and communications

If community features are available, we may collect posts, forum threads, comments, reactions, topics, and shared workout or achievement activity; photos, videos, and other attachments you submit; challenge team names and public participation information; direct-message content, attachments, participants, and sent, edited, or removed dates; accounts you block or that block you; and reports, report details, reported content or users, review status, moderation decisions, and resolution notes.

Community posts, forum activity, reactions, selected challenge information, and public-profile information may be visible to other people according to the applicable feature and your settings. Direct messages are intended for conversation participants, but Work-Built personnel or service providers may access them when reasonably necessary to operate the service, investigate reports, enforce rules, protect users, or comply with law.

Do not submit sensitive personal information in public content, free-text fields, attachments, or direct messages unless it is necessary and you understand who may see it.

Support and other communications

We collect the information you include when you contact support, respond to a survey, submit feedback, communicate with us, or otherwise provide information through the Services.

Information generated through your use of the Services

We generate and maintain record identifiers and operational metadata, including creation, update, review, deletion, and activity dates; the accounts responsible for administrative actions; record versions; entitlement status; feature-access sources; and related audit information.

To be publishedWhether the deployed Services collect device, log, cookie, or analytics data — and the technologies used — will be confirmed and described here before this policy takes effect.

Information from other sources

We may receive personal information from authentication providers used to create or access an account; service-eligibility verification providers; other users who interact with you, include you in content, block an account, or submit a report; and administrators and moderators who review applications, verification decisions, content, or reports.

03How we use personal information

We use personal information to:

• Review and administer early-access applications
• Create, authenticate, secure, and manage accounts and profiles
• Provide training programs, workouts, progress tracking, performance history, content, challenges, achievements, and certificates
• Personalize training presentation using your goals, fitness level, schedule, and available equipment
• Provide requested community, forum, challenge, and messaging features
• Determine and enforce feature access and entitlements
• Process service-eligibility verification and maintain decision records
• Deliver service messages and, where you have made the applicable choice, marketing communications
• Provide support and respond to questions, feedback, and privacy requests
• Moderate content, process reports and blocks, enforce our terms and community rules, and protect users, Work-Built, and others
• Maintain records, troubleshoot, test, audit, secure, and improve the Services
• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity
• Comply with legal obligations and establish, exercise, or defend legal claims
• Carry out another purpose that we disclose when collecting the information or that you authorize

Work-Built must not use a marketing-consent choice as consent for unrelated processing. You may withdraw consent to marketing at any time by using the unsubscribe mechanism in a marketing message or contacting us.

04Legal bases for processing

If a law requires us to identify a legal basis for processing, we rely on one or more of the following, as applicable:

• Contract: processing needed to provide requested Services or take steps at your request before entering into a contract
• Legitimate interests: operating, securing, supporting, improving, and protecting the Services and our users, provided those interests are not overridden by your rights
• Consent: where we ask for and receive your consent, including for marketing or processing that requires consent under applicable law
• Legal obligation: processing required to comply with law, regulation, court order, or another binding obligation
• Legal claims and vital interests: processing reasonably necessary to protect safety or establish, exercise, or defend legal claims

05How we disclose personal information

We may disclose personal information to the following recipients for the purposes described in this policy:

• Service providers and processors: vendors that provide infrastructure, data storage, authentication, security, communications, customer support, media hosting, verification, and other services on our behalf
• Other users and the public: when you use public or member-visible profiles, posts, forums, reactions, challenges, leaderboards, teams, or other social features
• Verification providers: when needed to initiate or confirm service eligibility
• Professional advisers: auditors, lawyers, insurers, accountants, and other advisers subject to appropriate duties of confidentiality
• Authorities and other parties for legal or safety reasons: when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, users, Work-Built, or others
• Parties to a business transaction: actual or prospective participants and advisers in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable safeguards

We may also disclose information at your direction or with your consent.

Sale, sharing, and targeted advertising

Work-Built does not sell personal information and does not share it for cross-context behavioral advertising, and it does not have actual knowledge of selling or sharing the personal information of people under 16. If this changes, this policy will be updated with the affected categories, recipients, purposes, and required opt-out methods before the change takes effect.

06Consumer health data

Training goals, fitness level, workout activity, performance, perceived exertion, and related inferences may be considered consumer health data under certain state laws.

Where required, Work-Built will provide a separate Consumer Health Data Privacy Policy describing the consumer health data it collects, why it collects and uses that data, its sources, the categories of data it shares, the recipients, and how to exercise applicable rights. This general Privacy Policy is not intended to replace that separate notice.

Work-Built will obtain consent before collecting or sharing consumer health data where applicable law requires it, and separate authorization before selling consumer health data where required.

07Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, maintaining legitimate business records, complying with legal obligations, resolving disputes, enforcing agreements, preventing fraud and abuse, and establishing or defending legal claims.

Retention depends on the type of information, why it was collected, account or feature status, legal requirements, limitation periods, safety and moderation needs, and whether the information is contained in backups. When retention is no longer necessary, we delete or de-identify the information in accordance with our retention procedures. Deletion may be delayed where retention is required by law or necessary for security, fraud prevention, dispute resolution, protection of other users, or legal claims.

To be publishedApproved retention periods or criteria for each category — early-access applications, marketing-consent records, accounts and profiles, training history, verification decisions, community content, direct messages, moderation records, entitlements, security and audit records, and backups — will be published here before this policy takes effect.

08Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• Know whether we process your personal information and access or receive a copy of it
• Correct inaccurate personal information
• Delete personal information
• Obtain personal information in a portable format
• Restrict or object to certain processing
• Withdraw consent without affecting processing performed before withdrawal
• Opt out of marketing communications
• Opt out of the sale, sharing, or use of personal information for targeted advertising where applicable
• Limit certain uses and disclosures of sensitive personal information where applicable
• Appeal a decision we make about a privacy request
• Not receive discriminatory treatment for exercising applicable privacy rights

You may use available account and profile controls or submit a request to privacy@work-built.com. We may need to verify your identity before completing a request, and we will use information provided for verification only to process the request and meet our legal obligations. An authorized agent may submit a request where permitted by law, subject to verification of the agent's authority and, where applicable, your identity.

If we deny a request, you may appeal by replying to our decision at privacy@work-built.com. You may also have the right to complain to your local data-protection or consumer-protection authority. California residents can find information about the California Consumer Privacy Act through the California Privacy Protection Agency and California Attorney General; users in the European Economic Area or United Kingdom may have the right to lodge a complaint with their local data-protection authority.

09Profile and community privacy choices

Where supported by the released Services, you can choose whether your profile is public, visible to members, or private. Public or member-visible information may be copied, reshared, or captured by others outside Work-Built's control. Changing visibility may limit future visibility but may not remove copies previously made by others.

Blocking restricts specified interactions but does not by itself erase prior content, messages, reports, or records that Work-Built must retain for safety or legal purposes. Removing a post or message may change its status or visibility without immediately deleting all underlying records.

10Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your credentials and devices and for notifying us promptly if you believe your account or information has been compromised.

11International data transfers

To be publishedWhere personal information is hosted and accessed, and the safeguards applied to any cross-border transfers, will be confirmed and published here before this policy takes effect.

12Children's privacy

Work-Built does not knowingly collect personal information from children in a manner prohibited by applicable law. If you believe a child has provided personal information contrary to this policy, contact us at privacy@work-built.com.

To be publishedThe approved minimum age, age-screening flow, and any parental-consent requirements will be published here before this policy takes effect.

13Automated decision-making and personalization

Work-Built may use training preferences and activity to organize or personalize the training and content experience.

To be publishedWhether any decision is based solely on automated processing with legal or similarly significant effects — and, if so, the logic, significance, available human review, and applicable opt-out rights — will be confirmed and described here before this policy takes effect.

14Third-party services and links

The Services may link to or integrate with third-party services. Those third parties control their own privacy practices, and their policies—not this Privacy Policy—govern information they collect for their own purposes. Review their privacy policies before providing information.

15Changes to this privacy policy

We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will post the updated policy and revise the "Last updated" date. If required by law, we will provide additional notice or obtain consent before a material change takes effect.