PRIVACY POLICY

1. WHO WE ARE

BodiMorph is operated by:

SmartMorph AI, Inc. is a Delaware corporation.

For privacy questions or requests:

legals@bodimorph.com

2. PERSONAL INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with BodiMorph.

We seek to collect information reasonably necessary for the purposes described in this Privacy Policy rather than collecting personal information merely because it may be available.

3. WEBSITE VISITOR INFORMATION

When you visit the BodiMorph website, we or service providers acting on our behalf may collect information such as:

• IP address;
• browser type;
• device type;
• operating system;
• referring webpage or source;
• pages viewed;
• links or buttons clicked;
• approximate geographic information derived from IP address;
• date and time information;
• website interaction and performance information;
• cookie or similar technology identifiers; and
• advertising or attribution information where applicable.

Some of this information may be collected through cookies, pixels, tags, analytics technologies, or similar technologies.

Our use of non-essential analytics and advertising technologies may depend on your location, applicable law, and the choices made through our cookie or privacy controls.

4. WAITLIST AND MARKETING INFORMATION

If you voluntarily join a BodiMorph waitlist or marketing list, we may collect:

• your email address;
• signup source;
• date and time of signup;
• applicable consent records;
• email engagement information;
• unsubscribe status;
• campaign interactions; and
• related marketing-preference information.

At Launch V1, the BodiMorph app waitlist is intended to be an email-only voluntary signup.

Waitlist and marketing information may be managed through our marketing service provider, currently anticipated to include ActiveCampaign.

Marketing records are kept separate in purpose from private BodiMorph Founder’s Program coaching records.

The legal-strategy process specifically established that ActiveCampaign should not become a repository for Client health-related coaching information merely because a Client also subscribes to marketing communications.

5. OPTIONAL CONSULTATION INFORMATION

Prospective Clients may choose to book an optional consultation before purchasing the BodiMorph Founder’s Program.

A consultation is not required to purchase the Program.

When you book or participate in a consultation, we may collect information such as:

• name;
• email address;
• scheduling information;
• information you voluntarily provide concerning what you would like help with;
• information reasonably necessary to conduct the consultation; and
• communications associated with the booking.

At Launch V1, consultations are anticipated to be scheduled through Calendly and conducted through Zoom.

SmartMorph does not routinely record consultation calls at Launch V1.

6. BODIMORPH FOUNDER’S PROGRAM INFORMATION

If you enroll in the BodiMorph Founder’s Program, we may collect information reasonably necessary to administer and deliver your personalized coaching relationship.

This may include:

Identity and Contact Information

• name;
• email address;
• contact information;
• enrollment information; and
• other information reasonably necessary to identify and communicate with you.

Transaction and Payment Information

We may process or receive information concerning:

• purchase status;
• payment option;
• transaction amount;
• payment dates;
• failed-payment status;
• refund status;
• chargebacks or payment disputes; and
• transaction identifiers.

Payment-card information is generally processed by our third-party checkout/payment providers rather than stored directly by SmartMorph.

At Launch V1, the anticipated payment architecture includes SamCart for checkout and Stripe for payment processing.

Coaching and Progress Information

Depending on your personalized Program, we may collect information such as:

• calorie intake;
• protein intake;
• movement and activity;
• steps;
• exercise;
• body weight;
• personalized targets;
• weight-loss objectives;
• progress trends;
• Program adjustments;
• adherence information;
• tracking information;
• weekly-review information;
• scheduling and attendance information; and
• coaching communications.

At least one updated body-weight measurement for each seven-day Program week is ordinarily required for Program delivery and the weekly review process.

7. HEALTH-RELATED INFORMATION

The BodiMorph Founder’s Program is coaching and education and not medical care.

However, because personalized weight-management, nutrition, movement, and exercise coaching may intersect with health circumstances, Clients may voluntarily disclose information such as:

• relevant medical conditions;
• injuries;
• pregnancy;
• medications;
• eating-disorder history or concerns;
• physician or healthcare-professional restrictions; or
• other health-related limitations affecting participation.

SmartMorph does not intend to solicit or maintain a comprehensive medical history merely as a condition of enrollment.

Our approach is to collect the minimum information reasonably necessary to understand relevant limitations, determine whether coaching remains within our scope, and provide the Program appropriately.

The legal-strategy process specifically established this minimum-necessary health-information boundary rather than creating an unnecessary comprehensive medical questionnaire.

Where appropriate, SmartMorph may ask whether there is anything relevant we should know concerning conditions, medications, injuries, pregnancy, eating-disorder concerns, professional restrictions, or comparable circumstances that could affect participation.

8. INFORMATION WE DO NOT ROUTINELY REQUIRE

At Launch V1, SmartMorph does not routinely require Clients to provide progress photographs or body measurements other than body weight as part of the BodiMorph Founder’s Program.

We also do not routinely record:

• consultation calls;
• kickoff calls; or
• weekly coaching reviews.

Instead, SmartMorph may maintain written information reasonably necessary to provide and document the coaching relationship.

9. CLIENT TRACKING FILES AND INTERNAL RECORDS

At Launch V1, we use a two-record coaching structure.

Client-Facing Tracking File

Each Client may receive a separate private Google Sheet or similar client-specific file containing information needed to participate in the Program, such as:

• calories;
• protein;
• movement/activity;
• steps;
• exercise;
• weight;
• targets;
• progress information; and
• relevant adjustments.

Clients do not receive access to a shared spreadsheet containing other Clients’ information.

Private Internal Client Record

SmartMorph may separately maintain internal notes containing concise information reasonably necessary to document the coaching relationship, including:

• material coaching decisions;
• target changes;
• relevant disclosures;
• attendance or rescheduling matters;
• weekly-review notes;
• Program adjustments; and
• other reasonably necessary administrative or coaching information.

Internal notes are intended to remain professional, factual, and limited to information reasonably relevant to the coaching relationship.

10. HOW WE USE PERSONAL INFORMATION

Depending on your relationship with BodiMorph, we may use personal information to:

• operate and maintain our website;
• respond to inquiries;
• administer waitlists;
• communicate product or company updates;
• conduct marketing where permitted;
• schedule consultations;
• process Program enrollment;
• administer payments;
• provide personalized coaching;
• establish and adjust Program targets;
• monitor Client progress;
• conduct weekly reviews;
• respond to coaching questions;
• maintain Program records;
• administer scheduling and rescheduling;
• determine Program suitability;
• address health or safety concerns within our scope;
• process qualifying refunds;
• administer the Money-Back Guarantee;
• detect or prevent fraud, abuse, and security incidents;
• maintain and improve our services;
• comply with legal, tax, accounting, and regulatory obligations;
• establish, exercise, or defend legal rights;
• resolve disputes;
• maintain appropriate records of consent and contractual acceptance; and
• protect SmartMorph, our users, Clients, and others.

We may also use information for other purposes disclosed at the time of collection or with appropriate consent where required.

11. MARKETING COMMUNICATIONS

Where permitted by applicable law and consistent with the permission you provide, SmartMorph may send communications concerning:

• BodiMorph products;
• the future BodiMorph app;
• the BodiMorph Founder’s Program;
• educational information;
• company updates;
• offers;
• promotions; and
• related BodiMorph marketing.

You may unsubscribe from applicable marketing emails using the unsubscribe mechanism contained in the communication or by contacting us.

Withdrawing marketing consent does not prevent SmartMorph from sending non-marketing communications reasonably necessary for an existing transaction, Program relationship, legal matter, security issue, or other permitted purpose.

12. COACHING COMMUNICATIONS

Active BodiMorph Founder’s Program Clients use: coaching@bodimorph.com for normal private between-review coaching communications.

Legal and privacy communications use: legals@bodimorph.com Marketing/waitlist communications are maintained separately through our applicable marketing systems.

This separation is intentional so that marketing systems do not unnecessarily become repositories for private coaching information.

13. HOW WE DISCLOSE PERSONAL INFORMATION

SmartMorph does not disclose personal information indiscriminately.

We may disclose personal information to service providers or other parties where reasonably necessary for legitimate business purposes described in this Privacy Policy, subject to applicable law.

Categories may include:

Payment and Checkout Providers

To process purchases, installment payments, refunds, fraud prevention, and transaction administration.

Current Launch V1 providers are anticipated to include:

• SamCart; and
• Stripe.

Cloud and Productivity Providers

To maintain Client files, internal records, communications, and business operations.

At Launch V1, SmartMorph anticipates using Google’s business/productivity ecosystem for appropriate records and files.

Scheduling and Videoconferencing Providers

For optional consultations and Program calls.

Current providers are anticipated to include:

• Calendly; and
• Zoom.

Marketing Providers

To manage voluntary waitlists, marketing communications, consent records, segmentation, and related marketing operations.

Current Launch V1 provider:

• ActiveCampaign.

Analytics and Advertising Providers

Where deployed and legally permitted, SmartMorph may use analytics, attribution, advertising, or similar technologies associated with providers such as:

• Google;
• Meta;
• TikTok;
• Microsoft; and
• other appropriate advertising or analytics providers.

The specific technologies actually deployed may change over time.

Where applicable law requires consent or an opportunity to opt out before or in connection with certain tracking, advertising, selling, sharing, or targeted-advertising practices, SmartMorph intends to provide appropriate controls.

14. SERVICE PROVIDERS

Service providers may process personal information on our behalf or in connection with services they provide to us.

We seek to use appropriate providers and limit access to information reasonably necessary for the relevant service.

Third-party providers maintain their own systems and may be independently subject to privacy, security, legal, and contractual obligations.

Use of a third-party provider does not mean SmartMorph authorizes that provider to use private Client coaching information for unrelated purposes outside the applicable relationship and legal framework.

15. LEGAL, SAFETY, AND BUSINESS DISCLOSURES

We may disclose personal information where reasonably necessary to:

• comply with applicable law, regulation, subpoena, court order, or lawful governmental request;
• protect legal rights;
• investigate or prevent fraud;
• address security incidents;
• protect the safety or rights of SmartMorph, Clients, users, or others;
• enforce agreements;
• establish, exercise, or defend legal claims; or
• respond to emergencies where disclosure is legally permitted or required.

We may also transfer information in connection with a legitimate merger, acquisition, financing, restructuring, sale of assets, sale of the business, bankruptcy, or similar corporate transaction, subject to applicable legal requirements and appropriate safeguards.

16. CROSS-BORDER PROCESSING

SmartMorph AI, Inc. is a U.S. corporation and provides services to individuals in both Canada and the United States.

Our founder and aspects of Program delivery may operate from Canada, while SmartMorph and various service providers may process or store information in the United States, Canada, or other jurisdictions where our providers operate.

Accordingly, personal information may be transferred to, processed in, or stored outside the province, state, or country in which you reside.

When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities, or governmental authorities in accordance with applicable law.

Where applicable law requires particular safeguards for cross-border processing, SmartMorph will seek to implement appropriate measures.

17. COOKIES AND SIMILAR TECHNOLOGIES

BodiMorph may use cookies and similar technologies to:

• operate essential website functionality;
• maintain security;
• understand website performance;
• measure traffic and engagement;
• understand how visitors reach or interact with the website;
• measure conversions;
• support marketing attribution; and
• provide or measure advertising where permitted. These technologies may include:
• cookies;
• pixels;
• tags;
• scripts;
• local-storage technologies; and
• similar identifiers.

Some technologies may be necessary for website functionality.

Others may be optional and subject to consent or opt-out requirements depending on your jurisdiction and how the technology is used.

SmartMorph intends to provide a Cookie Preferences mechanism where appropriate so users can manage applicable non-essential technologies.

Additional details may be provided in our Cookie / Tracking Notice.

18. ADVERTISING, TARGETED ADVERTISING, AND PRIVACY CHOICES

SmartMorph may use advertising and attribution technologies to understand marketing performance and reach audiences on third-party platforms.

Depending on the technology deployed and applicable law, certain disclosures of identifiers or activity information to advertising partners may be legally characterized as “sharing,” “selling,” “targeted advertising,” or another regulated activity even when SmartMorph does not receive money in exchange for personal information.

Where applicable law provides a right to opt out of such activity, SmartMorph intends to provide an appropriate privacy-choice mechanism.

This may include a Your Privacy Choices or comparable control and recognition of applicable browser/device opt-out preference signals where legally required.

SmartMorph will not characterize its practices as “selling” or “not selling” personal information merely for marketing purposes; the disclosures and controls should reflect the technologies actually deployed and the legal definitions applicable to those practices.

19. WE DO NOT SELL PRIVATE COACHING RECORDS

SmartMorph does not intend to sell Client-specific private coaching records or health-related coaching information to data brokers or advertisers.

Private BodiMorph Founder’s Program information—including Client weight, calorie tracking, protein tracking, voluntarily disclosed health limitations, and internal coaching notes—is collected for Program delivery and related legitimate purposes, not for sale as an advertising dataset.

Marketing and advertising technologies should be architected separately from private Client coaching records.

20. DATA RETENTION

SmartMorph retains personal information for periods reasonably necessary for the purposes for which it was collected, including to:

• provide services;
• maintain appropriate business records;
• comply with tax, accounting, contractual, and legal obligations;
• maintain transaction and consent records;
• resolve disputes;
• enforce agreements;
• protect security; and
• establish or defend legal claims.

Different categories of information may require different retention periods.

For example, financial and contractual records may need to be retained for a different period than unsuccessful prospect information, marketing records, or detailed coaching information.

SmartMorph intends to maintain an internal data-retention schedule rather than retaining every category of information indefinitely.

Where information is no longer reasonably required, SmartMorph may delete, anonymize, or otherwise dispose of it as appropriate, subject to legal and operational requirements.

21. SECURITY

SmartMorph uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Launch V1 security practices include or are intended to include:

• founder-only access to private coaching records at launch;
• separate client-specific files;
• access restrictions;
• strong unique passwords;
• multi-factor authentication wherever supported across systems containing Client information or controlling payments;
• appropriate device security;
• secure business accounts;
• controlled sharing permissions;
• reasonable backup practices;
• professional internal recordkeeping; and
• a documented process for responding to suspected privacy or security incidents.

The decision record specifically establishes mandatory MFA/2FA wherever supported across the Launch V1 business stack, particularly systems containing Client information or controlling payments.

No method of electronic transmission or storage can be guaranteed to be completely secure.

Accordingly, we cannot promise absolute security.

22. SECURITY INCIDENTS AND BREACH RESPONSE

If SmartMorph becomes aware of loss, unauthorized access, disclosure, or another security incident involving personal information, SmartMorph will evaluate and respond to the incident in accordance with its internal procedures and applicable law.

Where legally required, SmartMorph will notify affected individuals, regulators, or other appropriate parties.

If you believe your information or access to a SmartMorph service has been compromised, contact: legals@bodimorph.com The security/breach-response framework was expressly established as part of the Launch V1 compliance architecture.

23. YOUR PRIVACY RIGHTS

Depending on where you live and the law applicable to your information, you may have rights concerning your personal information.

These may include rights to request:

• access to personal information;
• correction of inaccurate personal information;
• deletion of personal information where applicable;
• information concerning our processing practices;
• withdrawal of consent where processing depends on consent;
• marketing opt-out;
• restriction or objection to certain processing where applicable; or
• opt-out from certain selling, sharing, or targeted-advertising activities where applicable.

Not every right applies in every jurisdiction or circumstance.

Certain information may also need to be retained despite a request where retention is permitted or required for legal, security, contractual, tax, accounting, dispute, fraud-prevention, or other legitimate purposes.

24. HOW TO SUBMIT A PRIVACY REQUEST

Privacy requests may be submitted to: legals@bodimorph.com Please provide enough information for us to understand your request and, where necessary, reasonably verify your identity.

We may request additional information where reasonably necessary to verify that a request relates to you or that an authorized representative has authority to act for you.

SmartMorph will respond in accordance with applicable legal requirements.

We will not discriminate against an individual for exercising a privacy right protected by applicable law.

25. WITHDRAWAL OF CONSENT

Where SmartMorph relies on consent to process personal information, you may be entitled to withdraw that consent, subject to legal or contractual restrictions and reasonable notice.

Withdrawal may affect SmartMorph’s ability to provide a service where the information is reasonably necessary for that service.

For example, a BodiMorph Founder’s Program Client cannot require SmartMorph to provide personalized weight-management coaching while simultaneously refusing all processing of the basic information reasonably necessary to provide that coaching.

Withdrawal from marketing communications does not require withdrawal from necessary Program or transactional communications.

26. MARKETING OPT-OUT

You may unsubscribe from applicable marketing emails at any time using the unsubscribe mechanism contained in the email.

You may also contact us regarding marketing preferences.

Even after a marketing opt-out, SmartMorph may continue to send communications reasonably necessary to:

• deliver an active Program;
• process a transaction;
• administer an account or enrollment;
• address security;
• provide legally required information;
• respond to a request; or
• otherwise communicate for a permitted non-marketing purpose.

27. CHILDREN

The BodiMorph Founder’s Program is strictly limited to individuals 18 years of age or older.

SmartMorph does not knowingly offer the Program to minors.

The public website and waitlist are not intended to be used to knowingly collect sensitive coaching or health information from children.

If we learn that we have collected personal information from a child in circumstances where we should not have done so, we will take appropriate steps consistent with applicable law.

28. TESTIMONIALS AND MARKETING PERMISSIONS

Participation in the BodiMorph Founder’s Program does not automatically authorize SmartMorph to publicly use a Client’s:

• name;
• likeness;
• photograph;
• private communications;
• testimonial;
• weight-loss results; or
• other individual Program information

for advertising or marketing.

If SmartMorph wishes to use Client-specific testimonial or results material, it will seek separate appropriate permission.

Clients may decline such requests without losing Program services.

This separate-consent structure was expressly established for Launch V1.

29. THIRD-PARTY LINKS

The BodiMorph website or communications may contain links to third-party websites or services.

SmartMorph does not control the privacy practices of independent third parties merely because we provide a link to them.

You should review the privacy practices of the relevant third party when interacting directly with its service.

30. DO NOT TRACK AND OPT-OUT PREFERENCE SIGNALS

Browser and device privacy mechanisms continue to evolve.

Where applicable law requires SmartMorph to recognize a legally valid opt-out preference signal for certain processing activities, SmartMorph intends to configure applicable systems to honor such signals as required.

Other browser “Do Not Track” signals may not have a uniform legal or technical standard and therefore may not be treated identically across services.

31. FUTURE BODIMORPH APPLICATION

The BodiMorph mobile application is coming soon.

At Launch V1:

• the app is not available for consumer use;
• app subscriptions are not being sold;
• there are no BodiMorph app user accounts; and
• SmartMorph is not collecting app-user health information through a live BodiMorph application.

The future application may involve additional categories of information, features, integrations, connected-device information, or privacy obligations.

Before or when those practices become applicable, SmartMorph may update this Privacy Policy and provide additional notices, permissions, controls, or disclosures as appropriate.

The Launch V1 perimeter specifically establishes that the website and Founder’s Program are live while the BodiMorph app remains forthcoming.

32. CHANGES TO THIS PRIVACY POLICY

SmartMorph may update this Privacy Policy as our business, technologies, services, vendors, or legal obligations evolve.

When we update it, we may revise the Effective Date and provide additional notice where required by applicable law or appropriate given the nature of the change.

Material changes will not be used to retroactively eliminate rights where doing so would violate applicable law.

We encourage users to review the current Privacy Policy periodically.

33. CONTACT US

Questions, concerns, complaints, or privacy-rights requests may be directed to:

Privacy & Legal: legals@bodimorph.com

BodiMorph Founder’s Program coaching communications should be directed separately to:

Coaching: coaching@bodimorph.com

© 2026 SmartMorph AI, Inc. All rights reserved.