Privacy Policy

Who We Are

This Privacy Policy (“Policy”) governs the use of the FIT App (“App”) provided by Forever Living Products International, LLC (“we,” “us,” or “our”). The App is designed to assist users in achieving their fitness goals by offering various programs (C9, V5, F15) with personalized meal plans, workout tracking, stretching, warm-up routines, and water intake monitoring. Users can also create groups to track their progress together with friends and family. In essence, App is a global weight loss tracking application designed to help users achieve their fitness goals by offering personalized programs and tracking tools.

Please read the following Privacy Policy carefully to understand our views and practices regarding your personal information and how we will treat your personal information.

Information You May Provide Us

We may collect and process the following information about you that you provide to us when you sign up for the App so that we can deliver the best possible experience when you use our App. We do not, under any circumstances, sell any of your personal information. Personal information that you provide us may include the following:

We take considerable pride in adhering to applicable federal, state, and local laws and will not share your personal information with any outside companies or vendors except for the facilitation of a business-related process on your behalf.

For personal information provided to a third party, this Privacy Policy applies to your personal information only once we receive the personal information.

Other Information We May Collect About You

During each of your visits to the App, we may collect the following information:

Information We Receive From Other Sources

We may work closely with third parties (including, for example, business partners, subcontractors in technical, payment, and delivery services, advertising networks, analytics providers, search information providers) and may receive information about you from these providers. We will notify you when we receive information about you from these providers and the purposes for which we intend to use that information.

Disclosure of Your Information

Information about our customers is an important part of our business, and we are not in the business of selling such information to others. We share personal information only as described below and with subsidiaries. You agree that we have the right to disclose your personal information as needed to conduct our business activities according to the following, and in the following, circumstances:

Where We Store Your Personal Information

If your information is provided from a country inside the European Economic Area (“EEA”), the information that we collect from you may be stored and processed by staff operating inside the EEA. In addition, the information that we collect from you may be transferred to, and stored at, a destination in the United States, outside the EEA. It will also be processed by staff operating outside the EEA who are employed by one or more of our entities. This includes staff engaged in, among other things, the provision of support services.

Any information will only be shared with our foreign entities as necessary and in compliance with all applicable laws and regulations, including, but not limited to, laws and regulations regarding data protection and privacy (such as the General Data Protection Regulation (EU) No 2016/679). Data protection laws vary among states and countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in the Privacy Policy.

We also comply with certain legal frameworks relating to the transfer of data, such as the implementation of standard contractual clauses (SCCs). SCCs are written commitments between parties that can be used as a ground for data transfers from the European Union to third countries by providing appropriate data protection safeguards. SCCs have been approved by the European Commission and for transfers of data to countries outside the United Kingdom and Switzerland. We rely on SCCs for our data transfers where required.

By submitting your personal information, you agree to its transfer, storing, or processing by any of our entities for any legitimate business purpose

We will take all steps reasonably necessary to ensure that (1) your information is treated securely and in accordance with this Privacy Policy, and (2) that records containing your information are retained or destroyed in accordance with our internal Global Record Retention Policy. We retain personal information only for as long as necessary to provide the Services you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods (1) mandated by law, contract, or similar obligations applicable to our business operations; (2) for preserving, resolving, defending, or enforcing our legal/contractual rights; or (3) needed to maintain adequate and accurate business and financial records.

All information you provide to us is stored on secure servers either in our own databases or through Amazon Web Services (“AWS”). We maintain a wide variety of programs and security and controls to protect your information. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone and to use a unique, strong password. Be sure to sign off when finished using a shared computer.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Access, Control, and Your Rights

If you created an account during the registration process, you can view, update, and delete certain information about yourself and your interactions with us. If you cannot access or update your information yourself, you can always contact us for assistance.

If you wish to exercise any of your rights as a data subject or discuss your rights, please let us know using any of the contact information in the “Contact Us” section of this Privacy Policy. We may ask you to provide valid form of identification (such as completion of a Privacy Verification Form) for verification purposes. Your rights are determined where you reside. For example, if you are a natural living person residing in the European Union, then the General Data Protection Regulation may apply, and your rights are as follows:

Please navigate to the specific jurisdiction below to identify what your rights might be according to your residence and circumstances. This Privacy Policy does not include all privacy laws and regulations, as there are numerous, and they are constantly being developed. However, if you believe that you are subject to a privacy law or regulation in a jurisdiction that is not listed in this Privacy Policy, please do not hesitate to contact us, and we will comply to the extent possible under the law. While we might not meet the threshold requirements to be subject to all the below privacy laws and regulations, they are posted here for your convenience and to provide notice.

If you make a request to delete your personal information and that information is necessary for the products or services you have purchased, the request will be honored only to the extent it is no longer necessary for any services purchased or required for our legitimate business purposes or legal or contractual record keeping requirements.

General Data Protection Regulation No. 2016/679 (GDPR – EU)

In addition to the above privacy commitments, which relate to GDPR, note that we are committed to providing great customer service, protecting your personal information, and respecting your privacy. If you are a resident of the European Economic Area (EEA) and believe we maintain your personal information subject to GDPR, you may contact us with a specific complaint or data subject request. Also, if you have a question, are dissatisfied in relation to our handling of your personal information, or how we have dealt with a complaint or request, you have the right to lodge a grievance to a supervisory authority.

Please follow this link to locate the most appropriate supervisory authority in your local EEA country: https://edpb.europa.eu/about-edpb/board/members_en.

California Consumer Privacy Act of 2018 (CCPA – California) and California Privacy Rights Act of 2020 (CPRA – California)

In addition to the above privacy commitments, the CCPA / CPRA provides the following specifics.

Right to Request Access to or Deletion of Personal Information: You may have the right under the CCPA / CPRA to request information about the collection of your personal information by us, or access to or deletion of your personal information. If you wish to make a data subject access request (DSAR) under the CCPA / CPRA, please contact us. Depending on your data choices, certain services may become limited or unavailable.

You may have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

We may deny a deletion request if retaining the information is necessary for us or our service providers to, for example:

No Sale of Personal Information: In the twelve (12) months prior to the effective date of this Privacy Policy, we have not sold any personal information of consumers, as those terms are defined under the CCPA / CPRA.

Right to Correct/Right to Rectification: In certain circumstances, you have the right to request correction of any inaccurate personal information. Upon verifying the validity of a verifiable consumer correction request, we will use commercially reasonable efforts to correct your personal information as directed, taking into account the nature of the personal information and the purposes of maintaining your personal information.

No Discrimination: We will not discriminate against any consumer for exercising their rights under the CCPA / CPRA.

You may only make a verifiable consumer request for access or data portability twice within a one-year period. The verifiable consumer request must:

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Virginia Consumer Data Protection Act (VCDPA – Virginia)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of VCDPA. The VCDPA provides you, if applicable, with six (6) main rights.

Right to access. You have the right “to confirm whether or not a controller is processing your personal data and to access such personal data.”

Right to correct. You have the right to correct inaccuracies in your personal data, considering the nature of the personal data and the purposes of the processing of your personal data.

Right to delete. You have the right to delete personal data provided by or obtained about you.

Right to data portability. You have the right to obtain a copy of your personal data that you previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.

Right to opt out. You have a right to opt out of the processing of the personal data for purposes of targeted advertising, the sale of personal data, and profiling – which we do not do.

Right to appeal. Finally, you have a right to appeal to the attorney general should we fail to act upon your request within a reasonable time.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Colorado Privacy Act (ColoPA – Colorado)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of ColoPA. The ColoPA protects Colorado residents and grants them certain rights concerning their personal data. Specifically, the ColoPA permits consumers to submit authenticated requests to data controllers to: (1) opt out of the processing of personal data for targeted advertising, sale, or profiling; (2) confirm if a controller is processing their personal data and to access that data; (3) correct inaccuracies in a consumer’s personal data; (4) delete personal data concerning the consumer; and (5) if technically feasible, to obtain a copy of their data in a portable manner.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Utah Consumer Privacy Act (UCPA – Utah)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of UCPA. Under the UCPA, Utah consumers have the right to: (1) know or confirm processing activity; (2) access personal data; (3) obtain a copy of personal data in a portable and readily usable format; (4) delete personal data; (5) opt out of targeted advertising and sales of personal information; and (6) avoid discrimination as a result of exercising their consumer rights under the UCPA.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Connecticut Data Privacy Act (CTDPA – Connecticut)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of CTDPA. Under the CTDPA, Connecticut consumers have the right to:

Access. You have the right to confirm whether we are processing your personal data and also access such personal data unless such actions would reveal a trade secret.

Correction. You have the right to correct inaccuracies in your personal data, subject to limitations.

Deletion. You have the right to delete personal data provided by or about you.

Data portability. You have the right to obtain a portable copy of your personal data to the extent technically feasible and provided FLP will not be required to reveal any trade secret.

Opt-out of certain data processing. You have the right to opt out of the processing of personal data for purposes of (i) targeted advertising, (ii) the sale of personal data or (iii) profiling in connection with automated decisions that produce legal or similarly significant effects concerning you, which we do not do.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Indiana Consumer Data Protection Act (INCDPA – Indiana)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of INCDPA. The INCDPA protects Indiana residents and grants them certain rights concerning their personal data. Specifically, the INCDPA grants Indiana residents the following: (1) right of access, (2) right to correct, (3) right to data portability, (4) right to delete, and (5) the right to opt-out of targeted advertising. In accordance with the INCDPA, we will only process sensitive data with your consent. However, these rights are limited in some circumstances, and we will comply in accordance with your request and its obligations under the law.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Iowa Consumer Data Protection Act (ICDPA – Iowa)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of ICDPA. The ICDPA protects Iowa consumers and grants them certain rights concerning their personal data. Specifically, the ICDPA grants Iowa residents the following: (1) right of access, (2) right to data portability, (3) right to delete, and (4) the right to opt-out of the sale of personal data. However, these rights are limited in some circumstances, and we will comply in accordance with your request and its obligations under the law.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Montana Consumer Data Privacy Act (MTCDPA – Montana)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of MTCDPA. The MTCDPA protects Montana residents and grants them certain rights concerning their personal data. Specifically, the MTCDPA grants Montana residents the following: (1) right to access, (2) right to correction, (3) right to delete, (4) right to portability, (5) right not to be discriminated against, and (6) the right to opt-out of the sale of personal data, targeted advertising, or profiling “in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.” However, these rights are limited in some circumstances, and we will comply in accordance with your request and its obligations under the law.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Tennessee Information Protection Act (TIPA – Tennessee)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of TIPA. The TIPA protects Tennessee residents and grants them certain rights concerning their personal data. Specifically, the TIPA grants Tennessee residents the following: (1) right to access, (2) right to correction, (3) right to delete, (4) right to portability, (5) right to disclosure (with respect to third-party sharing), and (6) the right to opt-out of the sale of personal data. However, these rights are limited in some circumstances, and we will comply in accordance with your request and its obligations under the law.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Texas Data Privacy and Security Act (TDPSA – Texas)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of TDPSA. The TDPSA protects Texas residents and grants them certain rights concerning their personal data. Specifically, Texas consumers may submit authenticated requests to do the following:

Confirm whether processing of your personal data by us is occurring.

Access your personal data.

Correct inaccuracies in your personal data.

Delete personal data provided by or obtained about you.

Obtain a copy of your personal data that you may have previously provided to us (i.e., data portability).

Opt-out of the processing of your personal data for targeted advertising, selling personal data about you, or profiling.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Oregon Consumer Privacy Act (OCPA – Oregon)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of OCPA. The OCPA protects Oregon residents and grants them certain rights concerning their personal data. Specifically, Oregon consumers have the following privacy rights: (1) the right to confirm whether and what categories of your personal data have been processed; (2) the right to obtain a copy of all of your personal data; (3) the right to correct inaccuracies in your personal data; (4) the right to delete your personal data – including both information we obtained from another source as well as “derived data”; (5) the right to opt-out from our processing of your personal data for targeted advertising, sale, or profiling purposes; (6) the right to revoke consent provided to us for processing your personal data; (7) the right to not to be discriminated against for exercising a consumer privacy right; and (8) the right to appeal our denial of a request to exercise one of the above rights.

In addition, the OCPA also allows consumers to obtain a list of the “specific third parties” – persons other than a consumer, controller, processor, or affiliates of a controller or processor – to whom a controller discloses their personal data.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Lei Geral de Proteção de Dados No. 13.709/2018 or General Data Protection Law (LGPD – Brazil)

In addition to the above privacy commitments, we are dedicated to fulfilling our responsibilities in relation to collection, retention, use, and other processing of personal information that is within the scope of LGPD. Such personal data will be processed only for lawful and appropriate purposes. We have implemented measures designed to ensure security of personal information and to prevent unauthorized or accidental access, deletion, or other misuse of personal information. We will facilitate the exercise of data subject rights in an effective and transparent manner.

LGPD grants certain rights to data subjects residing in Brazil regarding processing of personal information. We are committed to honoring these rights and have established effective and transparent policies and procedures to do so. A data subject’s rights, with respect to his or her own personal information, include:

If you wish to exercise any of your rights as a data subject or discuss your rights, please let us know using any of the contact information in the “Contact Us” section of this Privacy Policy. We may ask you to provide valid form of identification for verification purposes.

We are committed to providing great customer service, protecting your personal information, and respecting your privacy. If you are a resident of Brazil and believe we maintain your personal information subject to the LGPD, and you have a question, are dissatisfied in relation to our handling of your personal information, or how we have dealt with a complaint or request, you have the right to lodge a complaint with the national authority, also known as the National Data Protection Authority or ANPD.

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP – Mexico)

In addition to the above privacy commitments, individuals residing in Mexico may have the right under the LFPDPPP to request access to personal information, rectification of personal information, cancellation of personal information, or opposition to processing of personal information ("ARCO Rights"). If you wish to exercise any ARCO Rights, please let us know using any of the contact information in the “Contact Us” section of this Privacy Policy. We may ask you to provide valid form of identification for verification purposes.

Privacy Act No. 119 1988 (Privacy Act – Australia)

For Australian consumers, if we fail to respond to a data subject request or complaint within a reasonable period of receiving it in writing, or if you are dissatisfied with the response that you receive from us, you may lodge a complaint with the Office of the Australian Information Commissioner (“OAIC”). Details of how to contact the OAIC are located at www.oaic.gov.au.

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta and British Columbia’s Personal Information Protection Acts (PIPA)

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and the Personal Information Protection Act (PIPA) for Alberta and British Columbia, set standards for privacy practices in the private sector for covered entities. Individuals governed by these privacy laws have the right to see the information companies have about them as well as request corrections. Individuals can also:

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply.

Dispute Resolution Policy

If you choose to provide personal information to us, or use our website or participate in our business, your use and any dispute over privacy that cannot be amicably resolved is subject to this Privacy Policy and the procedure outlined in our Dispute Resolution Policy, available on our foreverliving.com website or by e-mail to privacy@foreverliving.com.

Disclaimer and Limitation of Liability

This App is provided on an “as is” basis. We do not make any warranties, express or implied, including without limitation, warranties of merchantability, fitness for a particular purpose, compatibility, security, correctness, completeness, usefulness, or non- infringement with respect to this App or any information provided on this App. You assume full responsibility and risk of loss, including loss of data, resulting from your use of this App. While we intend to take all reasonable steps to prevent the introduction of viruses and other harmful material, we do not warrant that this App is free of viruses or other potentially harmful components. We do not warrant that this App will be uninterrupted or error-free, and there may be delays, omissions, interruptions, or inaccuracies in the content or other materials or goods available on this App. We do not accept responsibility for any error, omission, or defect in the information.

Release

You agree that we (including without limitation its officers, directors, employees, and affiliated entities) will not be held liable for any claims, damages, or costs, whether direct or indirect, consequential, or special, arising out of or in any way connected to your use or inability to use this App including lost profits, business interruption, loss of programs, or other data, or otherwise. In addition, you agree that we may not be held liable for the conduct of other individuals associated with this website, including, but not limited to, activities relating to other FBO-alleged privacy violations, as they are independent contractors. You hereby waive any claims, whether based on contractual, tort, or other grounds, even if we have been advised of the possibility of such damages. Some jurisdictions do not allow for limited liability or exclusion of implied warranties, therefore not all of the above limitations may apply to you.

Indemnity

You agree to indemnify us (including, without limitation, their officers, directors, and employees) against any and all claims and expenses, including attorney’s fees, arising out of or in any way connected to your use of this website. This expressly includes, without limitation, liability arising from your violation or infringement of any rights of others, including their personal information and any intellectual property rights.

Severability

If any part of this Privacy Policy is held invalid or unenforceable, that portion shall be construed consistent with applicable law to reflect, as nearly as possible, the original intentions of the parties, and the remaining portions shall remain in full force and effect.

Contact Us

If you have any privacy-related questions, concerns, or complaints about our Privacy Policy, or how we handle your personal information, you may contact our Home Office by one of the following means:

By e-mail at privacy@foreverliving.com
By telephone at 1-888-440-ALOE (2563)

In addition, you may also contact your local FLP office as follows:
By e-mail at customercare@foreverliving.com
By telephone at 1-888-440-ALOE (2563).

If you have any questions about the App, please e-mail smileteam@flp.com. The “Smile Team” e-mail is dedicated to providing assistance related to the App.

These inboxes are actively monitored and managed so that we can deliver an experience that you can confidently trust. We will respond to all requests, inquiries, or concerns within the time frame specified by the particular privacy law that is the subject of the request. If you are not satisfied with our response, you may direct privacy complaints to your local data protection authority.

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. We cooperate with country data protection authorities if they believe that a privacy issue has occurred.

Changes to Our Privacy Notice

We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this Privacy Policy, we will notify you here, by e-mail, or by means of a notice on our App. If you disagree with any Privacy Policy changes, you may terminate your account or cease using the App.