Privacy Policy — GPM Method

Global Prosperity Movement ("GPM," "we," "us," or "our") respects your privacy. This Privacy Policy describes what personal information we collect, how we use it, who we share it with, and your rights regarding that information. It applies to the GPM Method app, the GPM Sprint, our websites, and all related services (collectively, the "Service").

1. Information We Collect

Information you provide directly

  • Account & contact: name, email, phone number, billing and shipping address
  • Payment information: processed by Stripe; we do not store full card numbers
  • Onboarding (Day One Method form): goals, current body composition, fitness experience, lifestyle, business stage
  • Health & fitness data: body weight, body composition, sleep duration, step count, workout completion, daily habit responses
  • Coaching messages: conversations with Optimus and any messages exchanged through the GPM Method app
  • Photos: progress photos you choose to upload

Information collected automatically

  • Device information (browser type, OS, IP address)
  • Usage data (pages viewed, features used, timestamps)
  • Cookies and similar tracking technologies for session management and analytics

2. How We Use Your Information

  • To create and manage your account and process payments
  • To deliver personalized coaching, meal plans, and workout programs based on your Day One Method form, body data, and ongoing progress
  • To enable Optimus to provide context-aware AI coaching
  • To send transactional emails (welcome, receipts, milestone notifications)
  • To send marketing emails (only if you've opted in — you can unsubscribe any time)
  • To compute Sprint leaderboard standings and display non-private aggregate metrics
  • To improve the Service via aggregated analytics
  • To comply with legal obligations and enforce our Terms

3. Third-Party Service Providers

We share specific information with the following third-party processors strictly to deliver the Service:

  • Trainerize — the GPM Method app is built on Trainerize. Your name, email, body data, workout completion, and habit responses are stored in Trainerize.
  • Stripe — processes all payments. Stripe stores your card details under their own privacy policy.
  • GoHighLevel (GHL) — powers our CRM, transactional emails, and order forms. Your contact information and order history are stored in GHL.
  • Supabase — stores check-in records and coaching state used by Optimus.
  • OpenAI — processes Optimus messages. Conversations are sent to OpenAI's API for inference; OpenAI does not retain or use this data to train models per their API data policy.
  • Typeform — hosts the Day One Method form and weekly check-in form.
  • Kit (formerly ConvertKit) — sends marketing emails and the 12-week drip sequence. You can unsubscribe from Kit emails at any time.
  • Vercel & cloud hosting — hosts our public-facing pages and dashboards.

We do not sell, rent, or trade your personal information.

4. Sprint Leaderboards

During Sprints, your name and points total appear on a public leaderboard visible to other Sprint participants. Your habit details, body data, photos, and Optimus conversations are not displayed publicly.

5. AI Coaching & Your Data

Optimus uses your Day One Method responses, recent check-ins, body data, and conversation history to personalize its coaching. Conversations are sent to OpenAI's API for processing and stored in our database for continuity. We treat these conversations as private; only you, our authorized staff, and our processors with strict need-to-access have visibility.

6. Data Retention

We retain your personal information for as long as your account is active and for up to 24 months after cancellation, after which it is anonymized or deleted. Aggregated, de-identified data may be retained indefinitely. You can request earlier deletion per Section 7.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your information ("right to be forgotten")
  • Object to or restrict certain processing
  • Receive a copy of your information in a portable format
  • Withdraw consent for marketing communications at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, disclosed, or sold; the right to delete personal information; the right to opt out of the sale or sharing of personal information; and the right to non-discrimination. We do not sell your personal information.

9. EU/UK Residents (GDPR)

If you are in the EU or UK, our lawful bases for processing are: (a) performance of contract (delivering the Service), (b) consent (marketing emails, optional features), (c) legitimate interests (improving the Service, fraud prevention), and (d) legal obligation. You have GDPR rights as outlined in Section 7 plus the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is not intended for and may not be used by anyone under 18. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Security

We implement reasonable technical and organizational measures to protect your personal information — encryption in transit (TLS), encrypted databases, access controls, and audit logging. No system is 100% secure; we cannot guarantee absolute security.

12. International Transfers

Your information may be transferred to and processed in the United States or other countries where our processors operate. By using the Service, you consent to those transfers.

13. Cookies

We use cookies for session management, security, and analytics. You can disable cookies through your browser settings, but doing so may break some features of the Service.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

15. Contact

Questions about this Privacy Policy or your information? Email [email protected] or write to:

Global Prosperity Movement
Privacy — 548 Market St
San Francisco, CA 94104, USA