Privacy Policy

Last updated: May 14, 2026

This Privacy Policy explains what information we collect when you use Life That Works, how we use it, what we do (and don't do) with it, and what control you have over it.

We've written this in plain language for the same reason we wrote our Terms of Service in plain language: you deserve to understand what you're agreeing to. If anything here is unclear, email us at support@borntobewell.org.

The short version: we collect what we need to provide the service to you, we keep it secure, we don't sell it, and we don't share it with anyone except where required by law. The longer version is below.

1. Who we are

Life That Works (LTW) is operated by Preferred Chiropractic Doctor, Inc. ("PCD"), an Alabama S-corporation. In this Privacy Policy, "we," "us," and "Life That Works" refer to PCD operating under the Life That Works name.

2. What we collect

We collect three categories of information.

Information you give us directly.

• Your email address and password when you create an account.
• Your responses to assessment questions, including your symptom-frequency answers and your preamble selections (primary concern, readiness, etc.).
• Any optional text you choose to enter, such as your hopes or goals.
• Information you provide when you contact support or otherwise communicate with us.
• Payment information when you start a paid membership. (Payment details such as card numbers are collected and stored by our payment processor, Stripe, not by us — see Section 7.)

Information we generate as you use the service.

• The scores and color bands calculated from your assessment responses.
• The Insights generated for you based on those scores.
• The date and time of your assessments, retakes, and account activity.
• Basic device and browser information (browser type, operating system, general location based on IP address) so the service works reliably across devices.

Information from cookies and similar technologies.

• A small amount of session data to keep you signed in and to remember where you left off in an assessment.
• We do not use cross-site tracking cookies, advertising cookies, or third-party analytics that profile you across the web.

3. How we use what we collect

We use your information to:

• Provide the service. Score your assessment, generate your Insights, save your progress, deliver your results, and let you retake the assessment over time.
• Manage your account. Authenticate you when you sign in, secure your account, and respond to your requests.
• Process payments. Handle subscriptions, refunds, and renewals through Stripe.
• Communicate with you. Send service-related emails (such as confirmation of your assessment, password resets, billing notifications). If you opt in to program communications, we may also send daily check-ins, reminders, and educational messages related to your results.
• Improve the service. Understand how the assessment is used so we can refine questions, improve Insights, and build a better product. When we do this kind of analysis, we use anonymized and aggregated data — meaning data that cannot identify you.
• Comply with legal obligations. Respond to lawful requests from courts or regulators when we are required to do so.

We do not use your information to make automated decisions that produce legal effects about you or similarly significantly affect you.

4. What we do not do

We do not sell your information. We never have and we have no plans to.

We do not share your assessment results with any healthcare professional, employer, insurer, family member, or any other third party — not on your behalf, not in aggregate, not in any form that could identify you. The only exception is if you choose to share or export your results yourself, which is your decision and entirely under your control.

We do not allow third parties to track you across the web through our service. We do not run ad networks. We do not feed your information to data brokers.

If we ever change any of these positions in a meaningful way, we will notify you clearly and well in advance, and you will have the right to delete your account before any new use of your data takes effect.

5. Sharing — the very narrow list

We share information only in these specific circumstances:

• Service providers we hire to operate Life That Works. This includes our hosting provider (Vercel), our database and authentication provider (Supabase), our payment processor (Stripe), and our email delivery provider (Resend). These companies receive only the information they need to perform their service for us, are bound by contracts to protect your data, and are not permitted to use your information for their own purposes.
• If required by law. We may disclose information if compelled by a valid legal process — for example, a court order or subpoena. When we are legally permitted to, we will notify you before doing so.
• To protect rights and safety. We may share information if we reasonably believe it is necessary to prevent fraud, protect our legal rights, or protect the safety of any person.
• In a business transition. If Life That Works is ever acquired, merged, or transferred, your information may transfer to the new entity. If that happens, you will be notified and your information will remain governed by a privacy policy at least as protective as this one — or you will have the option to delete your account.

That's the complete list. There is no other category.

6. Where your data lives and how it's protected

Your data is stored with industry-standard security measures including encrypted connections (HTTPS), encrypted-at-rest databases, and access controls that limit who can see what. Our hosting and database providers (Vercel and Supabase) maintain their own security certifications, which we rely on.

We use Supabase Row Level Security policies to ensure that you can only access your own data through the service. Other users cannot see your responses, scores, or Insights.

No system is perfectly secure, and we cannot guarantee absolute security. But we take this seriously, and if we ever discover a security incident affecting your information, we will notify you in accordance with applicable law.

Your data is primarily stored in the United States. If you are accessing Life That Works from outside the United States, you understand that your information will be transferred to and processed in the United States.

7. Payments

When you start a paid membership, we use Stripe to process your payment. Stripe receives your payment information directly — we never see or store your full credit card number, expiration date, or security code.

We do receive limited transaction information from Stripe (such as the last four digits of your card, your billing email, and whether a charge succeeded or failed) so that we can manage your account, issue refunds, and respond to questions.

Stripe has its own Privacy Policy, available at stripe.com/privacy. By using a paid membership, you also agree to Stripe's terms regarding payment processing.

8. Your rights

Regardless of where you live, you have these rights regarding your information:

• Access. You can see your own data through your account, and you can request a copy of all the data we hold about you by emailing support@borntobewell.org.
• Correction. You can correct most of your account information directly through your account settings, or by emailing us.
• Deletion. You can delete your account at any time. See Section 9.
• Communication preferences. You can opt out of non-essential emails (such as program comms and reminders) at any time through unsubscribe links or by emailing us. We will continue to send essential service emails (such as billing receipts and security notices).
• Withdraw consent. Where we rely on your consent to process your data, you can withdraw that consent at any time.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what we collect, the right to delete, and the right not to be discriminated against for exercising your rights. None of these rights are diminished by our standard practices, since we already don't sell your data and already provide deletion on request.

If you are a resident of the European Economic Area or the United Kingdom, you have rights under the GDPR, including the rights listed above plus the right to object to certain processing, the right to data portability, and the right to lodge a complaint with a supervisory authority. The legal bases on which we process your data include: performance of our contract with you (to provide the service), your consent (where applicable, such as for program emails), and our legitimate interests (such as improving the service).

To exercise any of these rights, email us at support@borntobewell.org. We'll respond within a reasonable timeframe and free of charge in most cases.

9. Account deletion and data retention

You can delete your account at any time through your account settings or by emailing support@borntobewell.org.

When you delete your account:

• Immediately: your account is soft-deleted. You can no longer sign in, and your data is no longer accessible to you through the service.
• For 30 days afterward: your data is held in case you change your mind. Contact us during this window to restore your account.
• After 30 days: your personal information is permanently deleted from our active systems.
• Permanently retained: anonymized and aggregated data — meaning data that has been stripped of anything that could identify you — may be retained to improve our service and inform our ongoing research. This kind of data cannot be linked back to you.

Some information may be retained longer where we are legally required to keep it (for example, financial records related to payments are kept as required by tax and accounting laws).

10. Children

Life That Works is not for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from someone under 18, please contact us immediately and we will delete it.

11. International users

Life That Works is operated from the United States, and our service is primarily intended for users in the United States. If you choose to use Life That Works from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

We will respect any rights you have under your local laws, including (where applicable) GDPR rights for European users and similar protections elsewhere.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time as the service evolves, as laws change, or as our practices change. When we make material changes, we will notify you by email or through the service before the changes take effect. The date at the top of this document will always reflect the most recent revision.

We will not make changes that meaningfully reduce your privacy protections without giving you advance notice and the option to delete your account.

13. Contact us

Email support@borntobewell.org. We review messages every day and respond as best we can. There are real limits to how many we can answer, so non-urgent messages may not get an individual reply — but we read them.

For formal data requests or legal notices, send written notice to:

Preferred Chiropractic Doctor, Inc. 507 2nd Ave S Clanton, AL 35045

Life That Works is operated by Preferred Chiropractic Doctor, Inc., an Alabama S-corporation.