Privacy Policy

Effective date: August 11, 2026 Controller: Parachute LLC ("we," "us," "our"), 6543 N Landmark Dr #1195, Park City, UT 84098, United States.

This Privacy Policy explains how Parachute LLC collects, uses, and shares information in connection with the Frontier mobile app, our supplement products, and related websites (the "Service"). By using the Service you agree to this Policy and to our Terms & Conditions.

1. Information we collect

a. Information you provide

• Account: email address and authentication identifiers. If you use Sign in with Apple, we receive the identifier Apple provides and, if you allow it, your name and a (possibly relay) email address.
• Fasting and wellness data: fasts you start and complete, fasting stages reached, optional weight entries, and an optional goal you select (for example, energy, focus, longevity, or metabolic health). Providing weight and goal is optional.
• Purchases: when you buy a Membership or Product, order details and shipping address. Payment card details are collected and processed by our payment processor (Stripe) — we do not store full card numbers.
• Communications: messages you send us (for example, support requests).

b. Information collected automatically

• Usage and event data: in-app events and interactions, feature usage, and diagnostic events, collected through our product-analytics provider.
• Device and technical data: device type and settings, app version, language, approximate location derived from IP address, and identifiers used for product analytics.
• Crash and error data: diagnostic logs when the app encounters an error.

c. Information from third parties

• Payment/subscription status from our payment processor (for example, whether a Membership is active), used to unlock member features.

2. Consumer health data

Some information you provide — fasting activity, weight entries, and wellness goals — is consumer health data, and we give it heightened protection. This section serves as our consumer-health-data notice under the Washington My Health My Data Act and similar laws.

• Purpose limitation. We use consumer health data only to provide the Service you asked for (running your fasting timer, history, trends, and guidance) and for the limited operational purposes described in this Policy. We do not use it to diagnose, treat, cure, or prevent disease, and we do not use it to serve you targeted advertising.
• Separate opt-in consent to collect. We ask for your separate, affirmative opt-in consent before collecting consumer health data — distinct from your acceptance of this Policy.
• No sale; authorization to share. We do not sell consumer health data. We share it only with processors that help us operate the Service, and, where a sharing would otherwise require it, only with your separate written authorization.
• Withdraw, access, and delete. You can withdraw consent and access or delete your consumer health data at any time in the app or by emailing privacy@frontierfasting.com.
• Your rights. Where these laws apply, you have additional rights over consumer health data, which we honor.

3. How we use information

We use information to:

• provide and operate the Service, including the fasting timer, history, and member features;
• process purchases, Memberships, and auto-ship orders, and provide customer support;
• send transactional and service messages (for example, receipts and legally required subscription, trial-expiration, renewal, price-change, support, account, and order-status notices);
• measure and improve the Service, including product analytics and feature experimentation;
• market the Service where permitted;
• maintain security, prevent fraud and abuse, and debug; and
• comply with law and enforce our Terms.

4. How we share information

We do not sell your information for money. We share it in these ways:

• Service providers / processors who act on our behalf, including: Supabase (authentication and database hosting), Vercel (application/back-end hosting), Stripe (payments, subscriptions, tax, and the customer portal), our fulfillment providers Supliful (dropship fulfillment) and Shopify (order-orchestration backend) (to fulfill and ship physical Products), PostHog (product analytics and feature flags), and Resend (transactional and service email).
• Legal and safety: when required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

A current list of processors can be provided on request at privacy@frontierfasting.com. We keep this list aligned with the vendors actually in use; a provider appears here only for a feature that is enabled at launch.

5. Analytics and your choices

We use PostHog product analytics as our service provider to understand how people use the Service and to improve it. In this version we do not use advertising trackers or third-party advertising networks.

• No sale or sharing for advertising. We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
• No advertising use of health data. We never use consumer health data (Section 2) for advertising.
• If this changes. If we introduce advertising or attribution technologies in the future, we will update this Policy, describe any "sale" or "share" activity, and provide a "Do Not Sell or Share My Personal Information" opt-out and honor Global Privacy Control signals before that activity begins.

6. Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of targeted advertising, "sale," or "sharing," to limit the use of sensitive information, and to not be discriminated against for exercising these rights.

• How to exercise: email privacy@frontierfasting.com. We will verify your request as required by law. You may use an authorized agent where permitted.
• Appeals: if we deny a request, you may appeal by replying to our decision or emailing privacy@frontierfasting.com; your appeal will be reviewed by someone other than the person who made the original decision (where applicable).
• California (CCPA/CPRA) and Virginia, Colorado, Connecticut, Utah, and other state residents: you have the rights described above under your state's law, including the right to limit the use of sensitive personal information. The categories we collect and disclose are in the table below. We do not disclose personal information to third parties for their own direct marketing ("shine the light").
• EU/UK (GDPR): the Service is offered only in the United States and is not directed to the EU or UK, so GDPR/UK GDPR does not apply. If we later serve those regions, we will update this Policy with the required lawful-basis and international-transfer disclosures.
• Account controls: you can edit or delete much of your data in the app, cancel Membership and auto-ship through the customer portal, and manage email preferences as described below.

Categories of personal information (state disclosures)

| Category | Examples | Purpose | Disclosed to | |---|---|---|---| | Identifiers | email, device IDs, IP address, Apple ID | account, authentication, security, analytics | Supabase, PostHog | | Customer records | shipping address, order details | fulfill purchases | Stripe, Supliful, Shopify | | Commercial information | purchases, subscription status | provide membership and goods, support | Stripe | | Internet/network activity | app interactions, feature usage, diagnostics | operate and improve the Service | PostHog | | Geolocation (approximate) | region derived from IP address | security, analytics, tax calculation | Stripe (tax), PostHog | | Sensitive personal information | account credentials; consumer health data (fasting, weight, goals) | provide the Service you requested only | Supabase (hosting) |

We retain each category as described in Section 8. We do not "sell" your personal information and do not "share" it for cross-context behavioral advertising (Section 5). You may limit our use of sensitive personal information to what is necessary to provide the Service.

7. Email choices

• Email: transactional and legally required service messages (for example, receipts, subscription/renewal/price-change notices, account messages, support replies, and order-status notices) are part of the Service.

8. Data retention

We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements, then delete or de-identify it. Our general periods are:

• Account, profile, and fasting/wellness data: retained while your account is active; after you delete your account, deleted or de-identified within about 90 days, except where we must keep limited records longer for legal, tax, dispute-resolution, or fraud-prevention purposes.
• Auto-renewal / subscription consent records: retained for at least 4 years, consistent with the applicable statute of limitations.
• Analytics and event data: retained up to 24 months, then deleted or aggregated/de-identified.
• Support communications: retained up to 24 months after the matter is resolved.
• Payment and order records: card data is held by Stripe under its terms; we retain order and transaction metadata as required by tax law (generally up to 7 years).

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including scoping database access to the authenticated account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to and is not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact privacy@frontierfasting.com and we will delete it.

11. Where we operate

The Service is offered only in the United States, and information is processed in the United States. The Service is not directed to users outside the United States. If we offer it internationally in the future, we will add the required international-transfer disclosures and mechanisms.

12. Third-party links and services

The Service links to and relies on third-party services (for example, Apple, Stripe, and the customer portal). Their handling of your information is governed by their own privacy policies, which we encourage you to review.

13. Changes to this Policy

We may update this Policy. If changes are material, we will provide reasonable notice (for example, in the app or by email) and update the "Effective date." Your continued use after changes take effect constitutes acceptance.

14. Contact us

Privacy questions or requests: privacy@frontierfasting.com · Parachute LLC, 6543 N Landmark Dr #1195, Park City, UT 84098, United States.