Effective Date: March 31, 2026

Last Updated: March 31, 2026

This Privacy Policy explains how Phlame, Inc. (“Phlame,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the Phlame mobile application, websites, and related services (collectively, the “Service”).

By using the Service, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Service.

We may collect information you provide directly to us, including:

• your name;
   
• your email address;
   
• account login credentials or authentication-related information;
   
• profile information you choose to provide;
   
• communications you send to us, including support requests, feedback, and other messages.
   

We collect and store information associated with your use of the Service, including workout and session data such as:

• treadmill or workout session information;
   
• time, distance, pace, calories, duration, and similar exercise or performance metrics;
   
• workout history and related records you create, edit, or save through the Service.
   

If we add new fitness-related features, we may also collect additional workout or exercise information consistent with this Privacy Policy and any in-app disclosures we provide.

We may automatically collect limited technical information needed to operate, maintain, and secure the Service, such as:

• device type;
   
• operating system and version;
   
• app version;
   
• IP address;
   
• timestamps;
   
• error logs, crash information, and basic diagnostic data;
   
• security, fraud-prevention, and operational logs.
   

If you sign in through, connect to, or otherwise interact with third-party services, we may receive information from those services as permitted by their settings and policies and as needed to provide the Service.

We may use the information we collect to:

• provide, operate, maintain, and improve the Service;
   
• create, manage, authenticate, and secure your account;
   
• store, process, and display your workout, treadmill, and session information;
   
• respond to support requests, questions, and feedback;
   
• communicate with you about service-related matters, including updates, security notices, and account issues;
   
• detect, prevent, investigate, and address fraud, abuse, security issues, and technical problems;
   
• enforce our Terms of Service and other policies;
   
• comply with legal obligations; and
   
• protect the rights, safety, and property of users, third parties, and Phlame.
   

We do not sell your personal information.

We may share information in the following circumstances:

We may share information with vendors and service providers that help us operate the Service, such as providers of hosting, databases, cloud storage, authentication, customer support, security, and similar operational services. These parties may process information on our behalf under appropriate contractual or operational restrictions.

We may disclose information if we believe doing so is reasonably necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
   
• enforce our agreements or policies;
   
• detect, prevent, or address fraud, security, or technical issues; or
   
• protect the rights, property, and safety of Phlame, our users, or others.
   

We may share or transfer information in connection with a merger, acquisition, financing, due diligence process, corporate reorganization, bankruptcy, sale of assets, or other corporate transaction.

We may share information when you direct us to do so or otherwise consent.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide and maintain the Service;
   
• keep records of your account and workout history;
   
• maintain security and prevent fraud or abuse;
   
• comply with legal obligations;
   
• resolve disputes; and
   
• enforce our agreements.
   

When we no longer need information for these purposes, we will delete it or de-identify it where reasonably feasible, unless retention is required or permitted by law.

Depending on the features available in the Service, you may be able to:

• access and update certain profile or account information;
   
• edit or delete certain workout or session entries within the app; and
   
• request deletion of your account.
   

If you delete your account, we will delete or de-identify your account information and associated workout/session information within a reasonable period, unless we need to retain certain data for legal, security, fraud-prevention, backup, or compliance purposes.

You may also contact us at support@phlame.ai for help with account or data requests.

We do not collect precise GPS location data for the core functionality described in this Privacy Policy unless we clearly disclose that collection to you and, where required, request your permission.

If future versions of the Service use location-based features, we will describe that in our updated privacy disclosures and permissions flows.

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete that information. If you believe a child under 13 has provided information to us, please contact us at support@phlame.ai.

We use reasonable administrative, technical, and organizational safeguards designed to protect information under our control. However, no method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

If you use the Service from outside the United States, you understand that your information may be collected, processed, stored, and transferred in the United States or other countries where we or our service providers operate.

The Service may contain links to, integrate with, or rely on third-party services. We are not responsible for the privacy practices of third parties, and their practices are governed by their own privacy policies and terms.

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Service, by email, or by other reasonable means. The “Last Updated” date at the top of this Privacy Policy indicates when it was last revised.

Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the revised policy.

If you have any questions about this Privacy Policy or our privacy practices, contact us at:

Phlame, Inc.

Email: support@phlame.ai