Data Safety

TRANSPARENCY

A plain-English summary of every type of data Glow & Grit handles, kept in the same format app stores ask for. Last updated 2 August 2026.

✓ Encrypted in transit

All traffic runs over HTTPS/TLS.

✓ No data sold

We never sell or rent your data to third parties.

✓ Deletion on request

Email us and your data is removed within 30 days.

Data collected and shared

Data type	Collected	Shared	Purpose	Optional
Personal info — Name	Yes	No	App functionality, account management	Required to join
Personal info — Email address	Yes	No	App functionality, account management, sending your unlock code	Required to join
Personal info — Phone number	Yes	No	Customer support over WhatsApp, payment verification	Optional
Financial info — Purchase history / proof of payment	Yes	No	Verifying your EFT payment and activating membership. No card or bank login data is collected.	Required to unlock
Health and fitness — Goals, experience, injuries you type in	Yes	No	Personalising your program recommendation and trainer match	Optional
Health and fitness — Workout and ritual logs	Yes	No	Progress tracking, milestone badges and renewal discounts	Optional
Messages — Community chat posts	Yes	Visible to other members	App functionality — the community room	Optional
App activity — Pages opened, programs viewed	Yes	No	Analytics and improving the app	Automatic
Device or other IDs — IP address, browser type	Yes	No	Security, fraud prevention	Automatic
Location, contacts, photos, calendar, SMS, audio, files	No	No	Not collected	—

Security practices

Data is encrypted in transit over HTTPS/TLS and encrypted at rest by our managed database provider.
Database access is restricted by row-level security rules; admin screens require an admin key.
Unlock codes are single-use and bound to one membership record.
We do not process or store card numbers — membership is paid by EFT directly to our bank.
Suspected vulnerabilities can be reported to customerservice@9secondsglobal.com.

Who processes data on our behalf

Lovable Cloud (Supabase infrastructure) — Hosts the database and authentication for memberships, payments, community chat and quiz results.
Resend — Sends transactional email such as unlock codes and membership confirmations.
WhatsApp (Meta) — Used only when you choose to message us proof of payment or support questions. Meta's own privacy terms apply to that chat.
First National Bank (FNB) — Receives your EFT payment. Your bank, not us, processes the transaction.

Delete your data

Email customerservice@9secondsglobal.com with the subject "Delete my account", or WhatsApp us on +27 79 049 3780. We confirm within 30 days and remove your profile, quiz answers, logs and community posts. Payment records are kept for 5 years only because South African tax law requires it.

Full detail is in our Privacy Policy.