Privacy Policy

1. Who we are and what this policy covers

Toughest Alive, LLC (“Toughest Alive,” “we,” “us,” or “our”) operates ToughestAlive.com, app.toughestalive.com, the Toughest Alive Underground, Underground + Training, event passes, challenges, events, and related services. This Privacy Policy applies when you visit, create an account, join, participate, or contact us through those services.

2. Information we collect

Information you provide

We may collect your name, email address, sign-in details, profile information, membership choice, event-pass or registration information, support messages, and other information you choose to provide.

Community and activity information

When you participate, we may collect Daily Six reflections, check-ins, workout and accountability activity, challenge progress, reactions, comments, community posts, member-care notes, and other content you submit.

Billing information

Stripe collects and processes payment details. Toughest Alive receives and stores limited billing information such as Stripe customer and subscription identifiers, selected plan, billing status, and relevant dates. We do not store complete payment card numbers.

Technical information

We and our service providers may receive information such as IP address, browser and device type, operating system, pages or features used, approximate location derived from IP address, timestamps, security events, and diagnostic logs. If you choose Google sign-in, Google provides the account information needed to authenticate you, such as your name and email address.

3. How we use information

We use information to:

• create and secure accounts and authenticate members;
• provide membership, community, training, event-pass, challenge, and event features;
• process billing, maintain access, and help with account or payment questions;
• deliver required service messages and respond to support requests;
• moderate the community and protect members, the service, and our legal rights;
• understand and improve how the services work; and
• comply with legal, tax, accounting, safety, and security obligations.

4. When we share information

We do not sell personal information or share it for cross-context behavioral advertising. We may share information with service providers that help us operate, including Supabase for accounts and data, Stripe for billing, Vercel and Cloudflare or OpenAI Sites for hosting and infrastructure, Google when you choose Google sign-in, and approved email, security, analytics, or support providers. These providers may use information only as permitted by their agreements and applicable law.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, prevent fraud or harm, enforce our terms, protect rights and safety, or complete a merger, financing, acquisition, reorganization, or sale of assets. If a business transfer occurs, information may transfer subject to this policy or notice of any material change.

5. Community visibility

Information you post to a community space may be visible to other members who can access that space. Private messages, private reflections, and other limited-audience content are handled according to the feature and audience settings shown to you. Please share thoughtfully and do not post another person’s private information without permission.

6. Cookies and device storage

The member app uses necessary cookies and similar technology for sign-in, session management, security, and core service functions. We may also store a small device preference, such as whether you dismissed an app-install prompt. We do not currently use the public website for behavioral advertising. If we add nonessential tracking later, we will update this policy and provide choices where required.

7. How long we keep information

We keep information while your account is active and for as long as reasonably needed to provide the services, resolve disputes, enforce agreements, maintain security, and meet legal, tax, accounting, or reporting obligations. Retention depends on the type and purpose of the information. When information is no longer needed, we delete it, deidentify it, or allow it to expire through our backup cycle, unless the law requires longer retention.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot promise absolute security. Please use a strong password and contact us if you suspect unauthorized account activity.

9. Your choices and requests

You can update certain profile information in the member app and manage membership billing through the Stripe-hosted portal linked from your Account page. You may ask to access, correct, or delete personal information by emailing toughestalive@gmail.com. We may need to verify your identity. Some information may be retained when required for legal, security, billing, recordkeeping, or dispute-resolution purposes.

10. Children and family participation

Toughest Alive does not offer independent accounts to children. An account holder must be at least 18 years old. A minor may participate only through a parent- or legal-guardian-managed account and with that adult’s involvement. Please do not send us a child’s personal information without parent or guardian involvement. If you believe we collected a child’s information outside this arrangement, contact us so we can review and delete it when appropriate.

11. United States processing

Toughest Alive is based in Alaska. Information may be processed and stored in the United States and in other locations where our service providers operate, subject to applicable safeguards and law.

12. Changes to this policy

We may update this Privacy Policy as our services or legal obligations change. We will post the updated policy with a new effective date and provide additional notice when a material change requires it.

13. Contact us