Privacy Policy

Last updated: April 2026

Introduction

Core Health ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website at core-health-sigma.vercel.app and related services.

Data We Collect

We may collect the following information:

Account information: Name, email address, and password when you create an account.
Purchase data: Order history, billing address, and payment details (processed securely via Stripe — we never store card numbers).
Usage data: Pages visited, features used, quiz responses, saved workouts, and calculator inputs.
Device data: Browser type, operating system, IP address, and referring URL.
Contact form submissions: Name, email, and message content when you reach out to us.

How We Use Your Data

To deliver digital products and manage your account.
To personalise your experience (e.g., quiz recommendations, saved preferences).
To process payments and issue refunds.
To send transactional emails (order confirmations, password resets).
To improve our products and content based on aggregate usage patterns.
To respond to support enquiries.

We will only send marketing emails if you have explicitly opted in. You can unsubscribe at any time.

Legal Basis (GDPR)

We process your data under the following legal bases:

Contract: To fulfil purchases and deliver services you've requested.
Legitimate interest: To improve our platform, prevent fraud, and ensure security.
Consent: For marketing communications and non-essential cookies.

Cookies

We use essential cookies to keep the site functional and optional analytics cookies to understand usage patterns. See our Cookie Policy for full details.

Third-Party Services

We share data with these trusted providers only as needed:

Stripe — Payment processing.
Vercel — Website hosting and analytics.
Firebase — Authentication and data storage.

We do not sell your personal data to any third party.

Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you.
Correct any inaccurate or incomplete data.
Delete your data ("right to be forgotten").
Restrict or object to processing.
Data portability — request your data in a machine-readable format.
Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email us at joshua@jgcore.com.

Data Retention

We keep your account data for as long as your account is active. Purchase records are retained for 7 years for tax and legal compliance. You may request deletion of your account at any time.

Security

We use HTTPS encryption, secure authentication, and follow industry best practices to protect your data. Payment processing is handled entirely by Stripe, a PCI-DSS Level 1 certified provider.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website.

Contact

For privacy-related enquiries, contact us at joshua@jgcore.com.