Privacy Policy

1.1 Who we are

“101 Life Ltd”, trading as Life 101, Fasting 101, and Limitless (“we”, “us”, “our”), provides web and mobile software, coaching programs, and related services (together, the “Services”). We are the data controller for personal data processed via our websites, subdomains (including limitless.life101.app), apps, and programs.

1.2 Scope

This Privacy Policy applies to your use of our websites, subdomains, web and mobile apps, coaching programs, messaging groups, email communications, support, and any other touchpoints we operate globally. We respect local privacy rights for users in different countries (e.g., UK/EU, US/California) as outlined below.

1.3 What we collect

• Personal Identifiers: name, email, phone number, handles/usernames.
• Account & Technical Data: account credentials, device/browser info, IP address, usage logs, cookie identifiers, crash/error diagnostics.
• Lifestyle & Health Data (voluntary): weight, height, body composition, fasting and eating windows, training logs, sleep, energy/mood/stress/productivity scores, goals, notes and reflections, AI‑generated reports, photos/videos/audio you upload for progress or form checks.
• Demographics (optional): age, gender, ethnicity.
• Payment Data: handled by third‑party processors (e.g., Stripe). We do not store full card details.
• Communications: messages or voice notes sent via in‑app chat, WhatsApp groups, email, Zoom/Slack or similar platforms used for coaching and support.
• Public/UGC: testimonials, forum posts, or shared content you choose to make public.

1.4 Sources of data

We collect data directly from you, from your use of our Services (including cookies/SDKs), and—where you authorize—from integrations (e.g., wearables, Apple Health/HealthKit, Google Fit) and community/messaging platforms you join for program participation.

1.5 Special Category Data

Where you choose to submit health‑related information (e.g., weight, body composition, fasting logs), we process it under explicit consent for coaching, analytics, and personalized guidance. You can withdraw consent at any time (see Rights below).

1.6 How we use your data

• Provide, personalize, and improve our Services and coaching.
• Generate insights, reports, trends, and progress tracking for you.
• Operate communities, support, and customer service.
• Send product updates, educational content, and marketing (opt‑out available).
• Protect our users and Services (fraud/security/abuse prevention).
• Comply with legal obligations and enforce our terms.

1.7 Lawful bases

Depending on the context: consent, contract, legitimate interests (e.g., service improvement, security), legal obligation, and—if needed—vital interests. For special‑category data (health), we rely on explicit consent.

1.8 AI and automated analysis

We use AI/ML tools—including integrations with providers such as OpenAI—to analyze check‑ins, identify patterns, and generate personalized insights and reports.
We anonymize or pseudonymize inputs sent to AI tools and avoid sending direct identifiers (e.g., name, email). Do not input sensitive medical diagnoses, financial data, or passwords into free‑text fields. AI outputs support coaching but do not replace professional medical or mental health advice.

1.9 Marketing & communications

We may contact you about features, content, offers, or programs. You can unsubscribe via email footer links or by contacting us. For SMS/WhatsApp, you can reply STOP or use platform controls.

1.10 Sharing your data

We do not sell your data. We share data with trusted processors who help us run the Services (hosting, analytics, payments, email/messaging). We may disclose data when required by law, to protect users and the platform, or as part of mergers/acquisitions.

1.11 International transfers

Where data is transferred outside the UK/EEA (for example to service providers in the US), we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to EU Standard Contractual Clauses, plus technical and organizational measures.

1.12 Security

We use encryption in transit and at rest (where supported), secure hosting (e.g., Google Cloud, BigQuery), Wordfence/WAF and SSL for sites, access controls, monitoring, and regular reviews. No system is 100% secure, but we work to protect your information continuously.

1.13 Retention

We keep personal data for as long as needed to provide the Services, meet legal/tax requirements, resolve disputes, and enforce agreements. See Annex B for typical retention periods.

1.14 Your rights

• UK/EU/EEA (UK GDPR/GDPR): access, rectification, erasure, restriction, portability, objection, and withdraw consent.
• California (CCPA/CPRA): know/access, delete, correct, opt‑out of sale/sharing (we don’t sell), limit use of sensitive data.
• Other regions: we honor local rights where applicable.
  Contact: [email protected]. We may need to verify your identity.

1.15 Children’s privacy

The Services are not intended for under‑13s. If you are under 16 in the EEA/UK, you should only use the Services with parental consent. We will delete children’s data if discovered.

1.16 Cookies & tracking

See our Cookie Policy below for categories, purposes, and preference management.

1.17 Third‑party links & platforms

We may link to or integrate with third‑party services (e.g., WhatsApp, Zoom, Instagram). Their privacy practices are governed by their own policies.

1.18 Changes to this policy

We will post updates here and may notify you by email or in‑app notice when changes are material.

1.19 Contact

Data requests and privacy questions: [email protected]
Postal: 27 Cottages Road, Seaham, County Durham, SR7 7RL, UK