9 Seconds Global ("we", "us") is the responsible party (data controller) for personal information processed through the Glow & Grit website and app, in terms of the South African Protection of Personal Information Act (POPIA). You can reach us at customerservice@9secondsglobal.com or on WhatsApp at +27 79 049 3780.

We do not collect your ID number, physical address, card numbers or bank login details. Membership is paid by manual EFT into our bank account, so no card data ever touches this app.

Answers you give in the onboarding quiz or trainer quiz (goal, training experience, available equipment, days per week, and any injury notes you choose to type) are treated as sensitive information. We use them only to recommend a program and, if you ask for a human trainer, to brief that trainer. We do not sell or advertise on this information.

Glow & Grit is fitness and lifestyle guidance, not medical advice. Consult a doctor before starting any program, especially if you are pregnant, injured or managing a medical condition.

• Lovable Cloud (Supabase infrastructure) — Hosts the database and authentication for memberships, payments, community chat and quiz results.
• Resend — Sends transactional email such as unlock codes and membership confirmations.
• WhatsApp (Meta) — Used only when you choose to message us proof of payment or support questions. Meta's own privacy terms apply to that chat.
• First National Bank (FNB) — Receives your EFT payment. Your bank, not us, processes the transaction.

We never sell your personal information, and we do not share it with advertisers or data brokers. We disclose information only where the law requires it.

• Payment and membership records: 5 years, as South African tax law requires.
• Proof-of-payment images sent on WhatsApp: deleted once the payment is verified and the record is captured.
• Quiz answers and program matches: until you ask us to delete them, or 24 months after your last activity.
• Community chat messages: kept while your account is active; removed on request.
• Workout and ritual logs used for milestones: stored in your own browser and on our database while your membership is active.

Under POPIA (and the GDPR if you are in the EU) you can ask us to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete your account and your data;
• send you a copy of your data in a portable format;
• stop sending you marketing messages (every email has an unsubscribe link).

Email customerservice@9secondsglobal.com with the subject "Data request". We respond within 30 days. If you are not satisfied, you may complain to the South African Information Regulator (inforegulator.org.za).

The site is served over HTTPS. Data is stored in a managed Postgres database protected by row-level security rules, and administrative screens require an admin key. Unlock codes are single-use and tied to one membership. No online system is perfectly secure, so if we ever become aware of a breach affecting your information we will notify you and the Information Regulator as POPIA requires. Report a suspected vulnerability to customerservice@9secondsglobal.com.

We do not run advertising or tracking cookies. We use your browser's local storage to remember that your membership is unlocked, your quiz result, and your logged workouts, so you don't have to re-enter a code on every visit. Clearing your browser storage will sign you out of that state.

Glow & Grit is intended for people 18 and older. We do not knowingly collect information from children under 18. If you believe a child has signed up, contact us and we will delete the record.

If we change this policy we will update the date at the top of this page and, for material changes, notify active members by email.