Privacy Policy — MachX Pro

I. Scope and who is responsible

This Privacy Policy, which serves as MachX’s “confidentiality policy” for the purposes of section 8.2 of Quebec’s Act respecting the protection of personal information in the private sector, applies to the MachX and MachX Pro Android and iOS apps, websites, accounts, communications, support features, and related services that link to it (collectively, the “Services”). MachX Pro is operated by Eirene Labs Inc. In this policy, “MachX,” “we,” “us,” and “our” refer to Eirene Labs Inc. as the operator of those Services.

Personal data is information that identifies you or can reasonably be linked to you. Information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual is not personal data unless it is later combined with identifying information.

Where an organization provides or administers your access, it may control some account, training, or performance information under its own agreement with you. Third-party services also have their own privacy practices, and this policy does not govern information you provide directly to them.

II. Personal data we collect

The personal data we collect depends on the Services you use, the choices you make, and the information needed to provide a requested feature. It may include:

Account and contact data, such as your name, email address, account identifiers, organization, role, sign-in choice, and account status.
Profile and eligibility data, such as country, age or date-of-birth information, program preferences, and information submitted with a membership or access request.
Content and performance data, such as messages, files, media, feedback, training inputs, movement or biomechanics information, and other content you choose to provide.
Communications and preference data, such as support conversations, subscription choices, consent records, and requests to receive or stop communications.
Device, usage, and diagnostic data, such as device and browser type, operating system, language, approximate region, network information, pages or features used, interactions, and information about errors or service performance.
Security and transaction data, such as authentication activity, session and audit information, suspected abuse, service entitlements, and records associated with a purchase or subscription where applicable.

We may receive personal data from you, your device, an identity provider you choose, an organization that administers your access, service providers acting on our behalf, or another source you direct to share information with MachX.

If you choose Google Sign-In, Google may provide the account identifier, name, email address, and basic profile information you authorize. We use that Google user data only to authenticate you, link an approved MachX account, prevent abuse, and protect account access. We retain the provider-to-account link and related security records as needed for those purposes and share the data only as described in Section V. We do not sell Google user data, use it for advertising, or use it to train generalized artificial-intelligence models, and we do not request access to unrelated Google email, storage, contacts, or calendar services.

You may choose not to provide requested personal data. If the information is necessary to verify eligibility or identity, secure an account, provide a requested feature, or respond to you, we may be unable to complete that action without it.

III. How we use personal data

We use personal data to:

provide, operate, personalize, maintain, and improve the Services;
authenticate users, administer accounts and access, and protect users and the Services;
process membership, subscription, support, and other requests;
communicate with you about a requested service, account, security matter, support issue, or—when you choose—news and marketing;
deliver performance technology and insights when those features are available and requested;
understand service use, accessibility, reliability, and performance;
detect fraud, misuse, security incidents, and technical problems;
comply with law, respond to valid legal process, resolve disputes, and enforce agreements; and
create aggregated or de-identified information that no longer reasonably identifies an individual.

MachX does not sell or rent personal data, and we do not use personal data from the Services for cross-context behavioral advertising.

IV. Legal bases for processing

Where applicable law requires a legal basis, we process personal data as needed to perform a contract with you, with your consent, to comply with legal obligations, or for legitimate interests such as operating and improving the Services, preventing fraud, protecting security, and supporting users. We consider and balance those interests against your rights.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn, and it does not prevent processing based on another lawful ground.

VI. Cookies and other technologies

MachX uses cookies and similar browser technologies to operate essential features, maintain security and sessions, remember choices, support requested functionality, personalize the interface when you permit it, and understand service use through optional analytics.

Optional personalization and analytics are off until you choose them through . The cookie manager provides the current list of technologies, their purposes, providers, storage types, and typical durations, and lets you accept, reject, or revise optional choices. We also honor supported Global Privacy Control signals for optional analytics.

You can block or delete cookies and site storage through your browser. Doing so may prevent features such as sign-in, remembered preferences, or conversation continuity from working. We do not use these technologies for cross-site tracking or behaviorally targeted advertising.

VII. App diagnostics and analytics

Our apps may process limited device, usage, crash, and reliability information to keep the Services secure, understand whether supported features work, diagnose problems, and improve performance. Where a diagnostic or analytics choice is available, you can manage it through the applicable app or device settings.

We design operational diagnostics to avoid account credentials, private content, and information that is not needed to identify or correct a problem. We do not use app diagnostics for advertising, ad measurement, cross-app tracking, or unrelated profiling.

VIII. Support and communications

When you contact MachX, we process the contact information, messages, files, and conversation details needed to verify the request where appropriate, route it to authorized personnel, respond, maintain security, and preserve a suitable record. Please do not send passwords, one-time codes, payment-card details, identity documents, health information, or other sensitive material unless we specifically request it through an appropriate channel.

Newsletters and other marketing communications are sent only when the applicable choice is active. You can unsubscribe through the link in an email. Account, security, support, or service messages may still be sent when necessary.

IX. Text messaging

If MachX offers a conversational text-messaging service and you opt in or communicate through it, we may process your mobile number, message content, message and delivery information, consent and opt-out records, and limited account or support context needed to understand and respond to the conversation.

We use this information to send and respond to messages, maintain and secure the service, document your communication choice, process help and opt-out requests, troubleshoot delivery, prevent misuse, and comply with legal obligations.

We may disclose a mobile number, message content, and delivery information to messaging-service providers, telecommunications carriers, and vendors acting on our behalf as needed to deliver the requested service. We do not sell mobile information or disclose it to third parties or affiliates for their own marketing or promotional purposes. Text-message opt-in and consent records are not disclosed to third parties or affiliates except when required by law. We may also disclose information when reasonably necessary to protect rights, property, or safety.

You can stop messages using the methods described in the Text Messaging Terms. We retain message records only as long as reasonably necessary for the conversation, service delivery, security, dispute resolution, and legal compliance. Consent and opt-out records may be retained longer when needed to demonstrate and continue honoring your choice.

X. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain security and business records, honor communication choices, comply with law, resolve disputes, and enforce agreements. The appropriate period varies according to the type and sensitivity of the information, the relevant service, legal requirements, and whether the information is needed to protect users or the Services.

When personal data is no longer needed, we delete it or de-identify it in accordance with applicable law. We may retain aggregated or de-identified information that can no longer reasonably be linked to you.

XI. International data transfers

MachX and its providers may process personal data in the United States and other countries where they operate. Privacy laws may differ from those where you live. Where required, we use recognized transfer mechanisms and contractual, organizational, and technical safeguards designed to protect personal data.

XII. Your privacy rights and choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent; appeal certain decisions; or complain to a privacy regulator. Applicable law may provide exceptions or require us to verify your identity before acting.

You can manage optional website technologies through the cookie manager, app diagnostics through available device or app settings, email marketing through an unsubscribe link, and text messages through the opt-out methods described in the Text Messaging Terms. You may also update certain account information through your account or identity provider. We will not discriminate against you for exercising an applicable privacy right.

To submit a privacy request, use the protected contact entry below. Please describe the request and the MachX service involved. Do not send sensitive documents or credentials unless we specifically request them through a secure channel.

XIII. Security

We use administrative, technical, and organizational safeguards designed to protect personal data. Those safeguards are selected according to the nature of the information and may include access controls, encryption, monitoring, secure development practices, and measures to preserve availability and integrity.

No system is completely secure. You are responsible for protecting your devices, credentials, and account-recovery methods and for promptly reporting suspected unauthorized access.

XIV. Children and age requirements

The Services are not directed to children under 13, and MachX does not knowingly collect personal data from children under 13. Some programs have a higher eligibility age; for example, Club MachX enrollment and its marketing consent require the participant to be at least 18. If you believe a child provided personal data contrary to these requirements, contact us so we can review and take appropriate action.

XV. Changes to this policy

We may update this policy as the Services or legal requirements change. We will publish the revised policy here and update its effective date. When a change materially affects how we use personal data, we will provide additional notice when required.

XVI. Contact us

For privacy questions, requests, or complaints, contact the MachX privacy team through the protected entry below. We may verify your identity, ask for clarification, or request information reasonably necessary to respond. For account or technical support, use the support options available on the website or in your account.