Privacy Policy
Last updated: October 6, 2026
1. Data Controller and Contact Information
This Privacy Policy explains how personal data is processed in connection with the LIVER DETOX Program, including its website, quiz and funnel pages, checkout, account or member area, digital content, subscriptions, features based on artificial intelligence, customer support, and related online services (together, the “Services”).
This Privacy Policy governs personal data processing only. Contractual rights relating to purchases, subscriptions, their cancellation, refunds, or Money-Back Guarantees are governed by the applicable checkout terms, the Terms of Service, the Subscription Terms, the Money-Back Policy, and mandatory law.
1.1 Responsible Data Controller
PMC Baltic FZ-LLC, licence No. 45001684, is the primary data controller responsible for the personal data processed in providing the Services, unless another data controller is identified for a specific processing activity or in a regional notice.
Registered address: SFFO0507 Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.
Email for privacy and customer support matters: hello@liverdetoxprogram.app
1.2 Contracting Party, Seller, Merchant of Record and Payment Participant Roles
The data controller may differ from the Seller, contracting party, Merchant of Record, tax-applying entity, payment processor, payment gateway, acquiring partner, or payment administrator of a specific transaction.
The Seller, Merchant of Record, or payment service provider may process the transaction data needed to accept payment, issue transaction documents, administer subscriptions, process refunds or reversals, prevent fraud, and handle payment disputes. Processing a payment does not by itself make such an entity the data controller of all LIVER DETOX Program data.
1.3 Service Providers and Regional Notices
Service providers may support technical operations, artificial intelligence features, analytics, financial management, compliance, customer support, communications, advertising, security, risk management, or administration. Where another entity acts as a separate or joint data controller for a specific activity, that role may be identified in the relevant notice or its annex.
Where required by law, additional regional privacy or consumer health data notices may apply. They may govern the specific local privacy matters they address.
2. Categories of Personal Data
2.1 Data You Provide
Depending on how you use the Services, you may provide:
- your email address, account, and contact details;
- quiz or questionnaire answers and related progress information;
- preferences, goals, plan-related data, and other information you choose to provide so that the Services can be tailored to you;
- messages, questions, food-related or other information you enter when using features based on artificial intelligence, such as the virtual coach chat, the kitchen assistant, or the meal assessment feature;
- correspondence with Customer Support, complaints, reports of technical issues, requests to cancel a subscription, obtain a refund, or resolve a dispute, and the evidence supporting them;
- information needed to verify a request to exercise privacy rights, where applicable.
Some information stored in the browser may remain only on your device. For example, the body weight saved in the protein calculator is kept in the local storage of your device's browser, unless another feature separately transmits this information to the Services.
2.2 Automatically Collected Data
When you use the Services, technical and usage information may be collected, including IP address, browser and operating system information, device type, language and time zone, referral source, campaign and attribution information, session identifiers and timestamps, quiz, funnel, page and feature usage events, performance metrics, and security or technical logs.
Strictly necessary technical and security data may be processed differently from optional functional, analytics, or advertising data, which is subject to consent or opt-out requirements.
2.3 Payment and Transaction Data
Payments are processed through Solidgate. All payment card details are generally entered into and processed in the payment service provider's system, and the LIVER DETOX Program does not store them.
We may receive limited payment and transaction metadata, such as a customer or transaction identifier, a secure payment token, payment method information, limited card information where the payment service provider provides it, amount, currency, timestamp, payment and subscription status, refund or reversal status, and information about disputes or chargebacks, where relevant.
2.4 Data Received from Third Parties
Where relevant, we may receive data from payment service providers, acquiring partners, banks or card networks, analytics or advertising providers, authentication or database providers, artificial intelligence or technical service providers, and other service providers used to provide the Services. This does not mean that every third party provides information in every category described in this Policy.
2.5 Sensitive Information, Special Category Data and Health-Related Information
Because the LIVER DETOX Program focuses on wellbeing and nutrition, the information you choose to provide in quizzes, in plan data, in communications with Customer Support, or when using artificial intelligence features may reveal physical health, dietary, body-related, or other information. Under applicable law, it may be considered sensitive information, special categories of personal data, or consumer health data.
You provide such information voluntarily, except where a specific feature cannot work without the relevant data. Where express consent or another specific legal basis is required before sensitive information or special category data is processed, we will base the relevant processing activity on an appropriate basis.
Where processing is based on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal, but it may affect our ability to provide features that require this information.
In jurisdictions with specific consumer health data rules, additional notice or consent requirements may apply.
2.6 Artificial Intelligence Feature and Conversation Data
When you use features based on artificial intelligence, the content of your interactions and relevant personalization or plan context may be processed to generate or tailor the responses, recommendations, explanations, food feedback, or other outputs you request.
Third-party artificial intelligence or technical service providers may process the relevant information as service providers or, where applicable, under their own privacy notices. This Privacy Policy does not state that user content is used to train artificial intelligence models.
3. Purposes and Legal Bases of Processing
We process personal data only for purposes for which there is an appropriate legal basis under applicable law. Depending on the processing activity and the jurisdiction, we may process data to:
- provide and administer the Services, accounts, subscriptions, quiz features, digital content, features based on artificial intelligence, and customer support, in performance of a contract or to take steps at your request before entering into it;
- tailor plans, recommendations, educational content, and outputs generated by artificial intelligence to you, based on the information you provide;
- process payments, administer subscriptions, carry out refunds or reversals, keep accounting records, and comply with legal obligations;
- protect accounts, prevent fraud and abuse, manage risk, and keep the Services secure, based on legitimate interests or legal obligations, where applicable;
- analyze and improve the Services, run funnel or offer tests, and measure performance, based on consent where it is required, or on another lawful basis where permitted;
- send transactional and service communications necessary to provide the Services or to comply with legal requirements;
- send promotional communications where permitted by law, based on consent where it is required;
- measure advertising effectiveness and attribute conversions to advertising using Meta and Google technologies, where they are used and permitted, in accordance with the applicable consent or opt-out requirements;
- establish, exercise, or defend legal claims and handle refund matters, complaints, disputes, chargebacks, and cases of suspected unauthorized transactions.
Where processing is based on consent, you may withdraw it at any time. Where processing is based on legitimate interests, you may have the right to object to it under applicable law.
5. Payments, Subscriptions, Refunds and Disputes
Transaction data may be processed to administer purchases and subscriptions, confirm access, resolve failed payments, carry out refunds or reversals, prevent fraud, keep accounting records, investigate suspected unauthorized transactions, respond to disputes handled by payment service providers or card networks, and administer chargebacks.
Where reasonably necessary, we may retain and use order records, checkout or consent records, transaction terms, service delivery or access logs, cancellation records, usage status data, customer support and refund correspondence, payment-provider records, indicators of possible fraud, and chargeback history. This data may be used to resolve disputes, determine amounts due, apply the relevant policies, and establish, exercise, or defend legal claims.
This Privacy Policy does not determine whether a request for a refund or under a Money-Back Guarantee meets the applicable terms.
6. Data Storage, Retention Periods, Deletion and International Transfers
6.1 Retention Periods
We keep personal data only for as long as reasonably necessary to achieve the purposes set out in this Policy, taking into account legal, accounting, tax, fraud prevention, security, dispute, chargeback, refund, regulatory, and limitation period requirements.
Quiz, personalization, artificial intelligence interaction, progress, account, customer support, and technical data may be kept for a period appropriate to the relevant purpose and to operational needs. Information stored in the browser may be subject to the periods stated in the Cookie Policy. Where the relevant technology works this way, this information may also remain until it is deleted by you, your browser, or the Service.
Purchase and payment transaction records may be kept for as long as required by the applicable accounting, tax, financial, dispute handling, refund, chargeback, fraud prevention, or legal claim requirements, including the establishment, exercise, and defence of legal claims.
The retention period may be extended where reasonably necessary or required by law because of an ongoing or anticipated dispute, refund, chargeback, fraud investigation, accounting or tax requirement, regulatory matter, security investigation, or legal claim. Information from which the ability to identify a person has been removed may be kept for as long as it cannot be used to identify anyone, subject to applicable law.
6.2 Data Deletion and Account Closure
A valid request to delete data is handled in accordance with applicable law and lawful retention exceptions. Closing or deleting an account does not necessarily mean that we must immediately delete all payment transaction, accounting, consent, fraud, security, customer support, dispute, refund, chargeback, or legal claim records that we are entitled or required to keep.
When personal data is no longer needed, it is deleted or the ability to identify a person from it is removed, according to the applicable retention procedure.
6.3 International Data Transfers
Some service providers may process personal data outside your country of residence. Where personal data is transferred outside the European Economic Area, the United Kingdom, or another jurisdiction that restricts international data transfers, legally recognized safeguards may apply, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Transfer arrangements may differ by service provider, processing activity, and region. This Policy does not state that we participate in a specific data transfer framework unless such participation has been separately confirmed.
7. Data Recipients and Service Providers
We may disclose personal data to service providers and other recipients only to the extent reasonably necessary to achieve the purposes set out in this Policy. Confirmed service providers and categories of recipients include:
- Solidgate: to process payments, administer subscription charges, issue refunds, authenticate payments, prevent fraud, and administer related transactions;
- Supabase: for authentication and session-related functions;
- Microsoft: for Clarity analytics, session recordings, and heatmaps, where these features are enabled and permitted;
- Google: for analytics, measuring advertising effectiveness, and attributing conversions to advertising, where these features are enabled and permitted;
- Meta Platforms: for measuring advertising effectiveness and attributing conversions to advertising using Meta Pixel and Meta Conversions API, where these features are enabled and permitted;
- Vercel Web Analytics and Vercel Speed Insights: for measuring page visits and performance metrics;
- artificial intelligence and content processing providers used to provide the features based on artificial intelligence described in this Policy;
- other hosting, database, security, communications, and technical infrastructure providers used to provide the Services;
- professional advisers, insurers, accountants, and legal service providers;
- public authorities, regulators, courts, payment networks, banks, card issuers, or law enforcement authorities, where required or permitted by law.
Depending on the activity, a third party may act as our data processor or service provider, or determine the purposes and means of processing independently under its own privacy notice.
We may also disclose or transfer personal data in the event of a merger, acquisition, financing, reorganization, sale of assets, insolvency, liquidation, or transfer of the Services to another operator, subject to the applicable safeguards.
8. Privacy Rights and Choices
Depending on applicable law and your location, you may have rights relating to your personal data, including the right to access your data, rectify it, erase it, restrict or object to certain processing of it, withdraw consent, receive certain data in a portable format, and lodge a complaint with a competent supervisory authority.
Where applicable law provides such rights, you may also have choices regarding targeted advertising, the sale or sharing of data as defined by law, or certain uses of sensitive data. The cookie settings control lets you manage the cookie and tracking technology choices it provides.
Before acting on a request to exercise privacy rights, we may ask you to verify your identity or authority. Where applicable law allows requests to be submitted through an authorized agent, we may ask for information reasonably necessary to verify the agent's authority.
You can submit requests to exercise privacy rights by email to hello@liverdetoxprogram.app.
8.1 Marketing Choices
If promotional marketing messages are sent, you can opt out of them using the unsubscribe function provided in the message, or contact us about the relevant marketing choice.
If you opt out of promotional marketing messages, necessary messages about transactions, your account, payments, your subscription, security, customer support, policies, or legal matters will still be sent.
9. Security
We apply reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. We cannot guarantee that any method of transmission or storage is completely secure.
Security and incident records may be kept for as long as reasonably necessary to investigate, prevent, document, or respond to security incidents and to meet legal obligations.
10. Third-Party Services
Payment, advertising, analytics, authentication, artificial intelligence, and other service providers may independently process certain information under their own privacy notices.
This Privacy Policy describes processing that, in relation to the LIVER DETOX Program, is controlled by the data controller identified above or carried out on its behalf. A request about data controlled solely by a third party may need to be submitted directly to that third party.
11. Age
The Services are intended only for persons aged 18 or over, or who have reached the age of majority set in their jurisdiction, if that is higher.
We do not knowingly collect children's personal data in breach of applicable law. If you believe that a child has provided personal data through the Services, please contact us at hello@liverdetoxprogram.app so that we can investigate and, where necessary, take appropriate action.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the Services, technologies, vendors, payment infrastructure, business practices, group operations, or legal requirements.
Where applicable law requires additional notice or consent for a material change to privacy terms, we will provide the relevant notice or obtain the required consent. The last-updated date at the top of this Policy shows when it was last updated.
13. Contact Information
Email: hello@liverdetoxprogram.app
Service operator: PMC Baltic FZ-LLC
Licence No.: 45001684
Address: SFFO0507 Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates