This Privacy Policy applies to all visitors and registered users of commandmuscle.com, operated by Bent On Simple Solutions, LLC doing business as Command Muscle Memory ("we," "us," or "our"). It describes how we collect, use, store, and protect your personal information.
By using the Service, you acknowledge that our collection and use of personal information is governed by this Privacy Policy and our Terms of Service.
We collect only the information necessary to provide the Service:
Your email address and a securely hashed password when you register. We do not store your password in plain text. We use your email to log you in and to send transactional messages.
We do not collect or store your card number or payment details. All payment data is handled directly by Stripe, Inc. See Section 4.
Which commands you practice, your session scores, correct and incorrect attempts, repetition history, and progress by command category. This powers the adaptive weak-spot training feature.
IP address, browser type, device type, and operating system — collected automatically for security monitoring and error diagnostics.
We do not require you to provide your name, phone number, or physical address to create a Command Muscle Memory account. However, payment processors, support communications, or other service-related interactions may involve additional information you choose to provide or that is needed to complete a transaction.
We do not use your personal account data or individual practice history to train third-party artificial intelligence models.
We use the information we collect to:
(a) Create and manage your account and authenticate your login;
(b) Provide the Service — deliver training sessions, track your
progress, and serve adaptive drills based on your performance;
(c) Process payments and confirm purchases through Stripe, including
using limited transaction-related information such as payment status, transaction ID,
customer email, refund status, and other payment-related metadata needed to complete
the transaction, manage refunds, prevent fraud, and maintain accounting records;
(d) Send transactional emails — account confirmation, purchase
receipts, and refund confirmations (no marketing unless you opt in);
(e) Communicate policy changes — notify you if these policies
or the Terms of Service are updated;
(f) Improve the Service — analyze aggregate usage patterns to
enhance training content and features;
(g) Detect and prevent fraud or abuse of the Service.
We do not use your information for behavioral advertising or sell it to advertisers or data brokers.
All payments are processed by Stripe, Inc., a third-party payment processor. When you make a purchase, your card details are submitted directly to Stripe through Stripe's secure payment flow and are not stored by us.
We do not receive or store your full card number, CVV, or full payment credentials. Stripe may provide us with limited transaction information, such as payment status, transaction ID, customer email, refund status, and other payment-related metadata needed to confirm purchases, manage refunds, prevent fraud, and maintain accounting records. Stripe's use of your data is governed by Stripe's Privacy Policy.
In the event of a refund, we instruct Stripe to reverse the original charge. We do not access or re-process your payment details to do so.
We do not sell, rent, or trade your personal information to any third party.
We share information only in these limited circumstances:
(a) Stripe: receives information necessary to process payments,
confirm purchases, prevent fraud, manage refunds, and maintain transaction records,
as described in Section 4;
(b) Service infrastructure providers: we may use third-party
services for hosting, authentication, email delivery, database storage, payment
processing, security monitoring, and error diagnostics, that process data on our
behalf under confidentiality obligations. They may not use your data for their
own purposes;
(c) Legal requirements: we may disclose your information if
required by law, court order, or valid legal process, or to protect the rights,
property, or safety of our users or the public;
(d) Business Transfers: if we are involved in a merger,
acquisition, financing, reorganization, sale of assets, or similar transaction,
your information may be transferred as part of that transaction, subject to this
Privacy Policy or a policy with materially similar protections.
We will notify you of any disclosure to legal authorities unless prohibited from doing so by law.
We retain your account information and usage data for as long as your account is active. If you request deletion of your account and data, we will complete the deletion within 30 days, except where we are required to retain certain records for legal, tax, or financial compliance purposes (such as records of completed transactions, which we retain for 7 years per standard accounting requirements).
If you request deletion of your account, you may lose access to the Service, including any purchase history, progress history, saved training data, and lifetime-access records associated with that account.
Technical log data (IP addresses, error logs) is retained for up to 90 days for security and diagnostic purposes, then deleted.
We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), hashed password storage, and access controls limiting who on our team can access user data.
However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a security incident involving your personal information, we will notify affected users as required by applicable law.
Command Muscle Memory is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. Users under 18 should use the Service only with permission from a parent or guardian. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@commandmuscle.com and we will delete it promptly.
Regardless of where you are located, you have the following rights regarding your personal data. To exercise any of them, email us at support@commandmuscle.com. We will respond within 30 days.
Access: You may request a copy of the personal data we hold about you.
Correction: You may ask us to correct inaccurate information associated with your account.
Deletion: You may request that we delete your account and personal data. See Section 6 for retention exceptions and access consequences.
Opt-out of communications: You may unsubscribe from any optional email communications at any time. Note: transactional emails (purchase receipts, refund confirmations) cannot be opted out of while your account is active.
California residents may have additional rights under the CCPA/CPRA if those laws apply to us, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising. Even where not legally required, we honor reasonable access, correction, and deletion requests as described above.
All users: Depending on where you live, you may have additional privacy rights under applicable state privacy laws, including rights to access, correct, delete, or obtain a copy of personal data, and to opt out of certain uses of personal data. We do not sell personal data or use it for targeted advertising. To exercise your rights, contact us at support@commandmuscle.com.
The Service uses essential cookies to maintain your login session and keep the application functional. These cookies are strictly necessary — the Service cannot operate without them.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies for behavioral advertising. If we add optional analytics, advertising, or tracking technologies in the future, we will update this policy and provide any required notice, consent, or opt-out mechanism.
Our use of cookies and similar technologies may depend on the tools and service providers used to operate the Service. We will update this section if we add optional analytics, advertising, or tracking technologies.
You can disable cookies in your browser settings, but this will prevent you from logging into the Service.
We may update this Privacy Policy from time to time. If we make material changes to how we collect or use your personal information, we will notify you by email, by posting a notice on the Service, or by another legally appropriate method before the change takes effect when required by applicable law.
The "Last Updated" date at the top of this page reflects when the most recent changes were made. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
This Privacy Policy is governed by the laws of the State of Texas, United States, except where applicable privacy laws provide otherwise. Any disputes arising from this policy shall be handled as described in our Terms of Service.
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, contact us at support@commandmuscle.com. We aim to respond within 2 business days.