AppPrivacyPolicy | Max Members

Effective date: October 14, 2025

This Privacy Policy explains how CA Marketing LLC (“Max Members”, “we”, “us”, “our”) collects, uses, discloses, and protects information in connection with the Max Members

App, our websites, and related services (collectively, the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the

Services.

1) Who we are & contact

Controller/Business: Max members119 Tolley dr Bridgeport, WV. USA

Email: Support@maxmembers.ai

Data Protection Officer (if applicable): Abdul Wahab

2) What we collect

We collect information in three ways: you provide it, it’s collected automatically, or we receive it

from third parties.

A. Information you provide

Account & profile: name, email, phone, password or SSO identifiers, profile photo,

gender, date of birth, time zone.

Membership & billing: plan selection, purchase history, last 4 digits of card, billing

address (full payment data is processed by our PCI-compliant processors; we don’t store

full card numbers).

Fitness & wellness data (you choose to provide): workouts, exercises, sets/reps,

training goals, body metrics, nutrition logs, photos, notes, injuries/preferences. Some of

this can be health data under certain laws.

Communications & Content: messages with coaches/gyms, comments, forms, support

inquiries, survey responses. Uploads & media: progress photos, files, videos you submit.

B. Information collected automatically

Device & usage: app version, device type, OS, unique IDs, IP address, language, crash

logs, diagnostics, feature usage, timestamps, referral URLs.

Location: coarse location via IP; if you enable precise location, we collect GPS/OS-level

location for features like nearby classes, check-ins, geofenced offers.

Cookies & similar tech (web): session cookies, analytics cookies, local storage, SDKs. See Cookies & Trackingbelow.

C. From third parties (only if you connect/consent)

Integrations: Apple Health, Google Fit, wearables, nutrition apps, club access systems,

CRM/billing providers. We receive only the categories you authorize (e.g., steps, heart

rate, weight, sleep).

Gym/Coach accounts: if your gym or coach uses our platform, they may add your

member profile or session notes.

Payment processors: status of payments, subscription metadata.

Marketing/identity resolution (if enabled): lead form data, campaign attribution, hashed identifiers.

3) How we use information

We process data to:

Provide the Services: create/manage your account, sync workouts, schedule classes,

track progress, enable check-ins, process payments, and deliver support.

Personalize & improve: recommendations (e.g., exercises, programs), content

relevance, A/B tests, debugging, analytics.

Safety & integrity: fraud prevention, abuse detection, enforcing terms, securing

accounts and facilities.

Communications: transactional emails/SMS/push (receipts, reminders, alerts). You can

manage non-essential communications.

Marketing (optional): with your consent or as permitted by law, we may send

promotions or show offers relevant to your membership.

Compliance & legal: tax/recordkeeping, responding to lawful requests, exercising legal

claims.AI features & automated recommendations. Some features use machine learning to generate program suggestions, nudges, or risk/skip

prompts (e.g., flagging overtraining based on your inputs). These are recommendations, not

medical advice. You can opt out of marketing personalization; core safety/anti-abuse models may

be necessary for security.

4) Sharing your information

We do not sell your personal information. We share as follows:

Processors/Service providers: cloud hosting, analytics, messaging/SMS/email, customer

support, payment processing, identity/abuse prevention. They act under contract and only

on our instructions.

Gyms/Coaches you connect with: your profile, training/nutrition data you choose to

share, session notes, attendance, goals. Sharing is controlled by your relationship and

settings.

Integrations you authorize: we exchange only the categories needed to provide the

integration.

Corporate events: merger, acquisition, financing, or sale of assets; your data may

transfer as permitted by law.

Legal & safety: to comply with law, protect rights, safety, and property, or prevent fraud/

abuse.

5) International transfers

If you’re outside the U.S., your data may be processed in countries with different laws.

6) Children

The Services are not directed to children under 13 (or higher minimum age where required).

We do not knowingly collect data from children without appropriate consent. If you believe a

child has provided data, contact us to request deletion.

7) Security

We implement technical and organizational measures including encryption in transit, access

controls, least-privilege, and auditing. No system is perfectly secure. Keep your credentials safe

and notify us of any suspected compromise.

8) Cookies & tracking

We use cookies/SDKs for session management, analytics, and (where permitted) personalization.

You can control cookies in your browser or device settings and manage in-app preferences at

[link to cookie settings]. Do Not Track (DNT) signals are not consistently honored across the

industry; we respond to Global Privacy Control where required.

9) Health information notice (HIPAA)

Max Members is not a HIPAA “covered entity.” Some participating gyms or providers may be

covered entities or business associates. Where HIPAA applies, they—not Max Members—

control the PHI relationship. Our processing of wellness data you provide to the app is governed

by this Privacy Policy and our contracts, not HIPAA, unless expressly stated otherwise.

10) Enterprise/coach workspaces

If your account is provisioned by a gym, studio, or coach (“Organization”), that Organization

may control certain data and settings (e.g., membership, attendance, assigned programs). Their

own privacy terms may apply. We process that data as a processor/service provider to the

Organization.

11) Third-party links & services.

The Services may link to third-party sites or integrate third-party SDKs. We are not responsible

for their practices. Review their policies before using.

12) Changes to this Policy

We may update this Policy to reflect changes in law or our practices. We’ll post the updated

version with a new “Effective date” and, where required, provide notice and/or obtain consent.

13) How to contact us

Questions or requests:

• Email: support@maxmembers.ai

• Mail: Max Members. 119 Tolley Dr Bridgeport WV USA

• DPO/Representative (if applicable): Clint Aragona or Abdul Wahab