01 / 09
What we collect
- Your email address, when you ask for the free class, join the waitlist, or buy something.
- Your name, when you check out. Card details go straight to Stripe; we never see or store your card number.
- What you do inside the app: classes you finish or save, your challenge progress and streak, and anything you post in the community.
- How you found us: if you arrive from a tagged link (for example the link in our Instagram bio), we remember the tag, the page you landed on and the site that sent you, for 30 days, in a cookie. When you sign up or buy, that note is saved with your email or order so we know which posts are worth making.
- Technical basics that every website receives: your IP address and browser type.
- If you turn on reminders, the push notification address your browser gives us.
- If you write to us through the brand partners form, whatever you put in it.
- If you joined our email list somewhere else first (an Instagram DM tool, or our old site on Funnel Gorgeous), your email, first name and the topics you asked about, which we brought across to this site. Anyone who had unsubscribed there was left behind. If you bought from us on the old site, your name, email and what you bought came across too, so it's waiting for you here (a membership that renews came across for one month, not for good).
- If you comment a keyword on one of our Instagram posts, or send our account a message: your Instagram username, the ID Instagram gives us for you, that comment or message, and when you sent it. If you then leave your email on the page our reply links to, we connect the two, along with the topic you asked about.
We do not ask for medical records or health history. Please do not post private medical details in the community; other members can read it.
02 / 09
What we use it for
- To give you what you asked for: send the free class, open the programs you bought, keep your place in a challenge.
- To email you: receipts (for a membership, one email confirming what renews, when, and how to cancel; for a payment plan, a receipt for each payment), sign-in links and codes, and challenge reminders. If you join our team, one email inviting you to sign in to our admin. If you asked for the free class (on its own, or with a guide that comes with it, like the gut guide) you also get up to three short follow-up emails, and if you start a checkout and don't finish, one reminder about an hour later. Every follow-up and reminder has an unsubscribe link, and receipts and sign-in links keep working after you unsubscribe.
- If you join the founding list (or the waitlist), one short email from us to say you're on it, then emails about that program opening: when the doors open, what's inside, the founding price, and when the doors close. Those come from our newsletter tool (Kit). Each has an unsubscribe link. If you ask for the free class, you're on that list too, so you hear when the doors open.
- If you buy a challenge (a program that opens one class a day), two short notes about it: one if you haven't started it two days later, and one the day after you finish it. Like the daily challenge reminders, they are about what you bought, so each goes once and neither carries an unsubscribe link.
- To answer a keyword comment or message on Instagram with one automatic message that links to what you asked for. That first message says it is automatic. If you reply within a day, you may get one more. After that, a person answers.
- If you write to us about a brand partnership: to reply, which may be a short email asking to try your product first or saying it isn't a fit. We keep your enquiry so we can find it again.
- To understand which posts, links and ads bring people to us, so we can do more of what works.
- To keep the service safe, fix problems and meet our legal obligations.
03 / 09
Who else sees it
We do not sell your information. We use a small number of companies to run the service, and each only gets what it needs:
- Supabase stores our database and handles sign-in.
- Stripe takes payments and stores your payment method for one-tap purchases, renewals and the later payments of a payment plan.
- Mux streams the class videos and records basic playback statistics.
- Resend delivers our email.
- Vercel hosts the website.
- Instagram (Meta) carries our messages to you, and shows our account the comments and messages you send it.
- Anthropic (the company that makes the AI model Claude) reads the question you type into a recipe's “Something went wrong?” box, along with that recipe, to write the answer. We don't send your name or email with it, and we don't keep the question.
- Kit sends our newsletters and launch emails. It receives your email, your first name and the topics you asked about, so you get the emails that match. If you're on that list and buy from us, Kit also learns that you're a customer (and which program you bought, when you're already on the list as you buy), so you aren't sent launch emails for something you already have. Unsubscribing works both ways: unsubscribe from one of our emails and we tell Kit; unsubscribe from a Kit email and our own emails stop too.
- Meta (Facebook and Instagram) receives measurement events from our public pages and checkout: which of those pages were visited, that someone looked at a program, signed up, started checkout, entered their details at checkout or bought, and the order value. With each event we send a scrambled (hashed) version of your email and first name that cannot be read back, Meta's own cookie values, your IP address and browser type, and the page path. Meta uses this to measure and improve our ads. We never send Meta anything about what you do inside the member app.
To show our ads to people who already know us, or to leave out people who have already bought, we may upload a list of our subscribers' and customers' email addresses and first names to Meta as a Custom Audience. Meta's tool scrambles (hashes) them before they are sent, matches them to accounts, and doesn't keep the list for anything else. Anyone who has unsubscribed from our emails is never on it.
We may also share information if the law requires it, or if the business is sold, in which case this policy continues to apply to your information.
05 / 09
The Shelf and other links
Some product links on The Shelf and in our recipes are affiliate links: if you buy, we may earn a commission at no cost to you. When a brand pays for a place on The Shelf, it is marked Sponsored.
When you tap a link on The Shelf, we count the tap (which product, and which page it was on) before sending you on. We don't record who tapped, and we don't tell the retailer which of our pages you came from. Once you leave our site, the retailer's own privacy policy applies.
06 / 09
Your choices
- Unsubscribe from our emails (the free-class notes, the newsletter and launch emails) with the link at the bottom of any of them. Unsubscribing from one stops them all, here and in Kit. If you unsubscribe and later sign up again, we send one email asking you to confirm you'd like our emails back, and nothing else until you tap it.
- Ask us to forget your Instagram messages and details: email partnerships@thecoreyears.com, or reply "delete" to any of our Instagram messages. The Data deletion page (thecoreyears.com/data-deletion) explains what is removed.
- Ask for a copy of your information, a correction, or deletion of your account by emailing hello@thecoreyears.com. We will do it promptly, and always within the time the law allows. We keep order records for as long as tax law requires.
- Turn reminders off at any time from the You tab in the app.
- Limit ad tracking in your Instagram and Facebook ad settings, or with your browser's privacy controls.
- If you live in California or another state with a privacy law, you have the right to know, correct, delete and opt out of the sharing of your information for advertising. Email hello@thecoreyears.com and we will honor the request without asking why.
07 / 09
Children
The Core Years is for adults. We do not knowingly collect information from anyone under 18.
08 / 09
Keeping it safe
There are no passwords to steal: you sign in with a link or a one-time code sent to your email. Videos only play for signed-in members who own them. Access to the database is limited to the people who run the service. No system is perfectly secure, and if something ever goes wrong that affects you, we will tell you.
Our service providers are based in the United States, so your information is processed there.
09 / 09
Changes and contact
If we change this policy in a way that matters, we will email members before it takes effect. Questions: hello@thecoreyears.com, or write to Fusion Wellness, LLC, [MAILING ADDRESS].