Privacy Policy.

Last updated: July 9, 2026 (added Anthropic Claude AI processing; expanded health metrics + HealthKit + voice; added PostHog + Sentry telemetry; expanded CCPA rights list with delete-account link)

WOLV LLC (“WOLV,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit thewolvlife.com, use the WOLV app at app.thewolvlife.com, subscribe to our emails, place an order, or otherwise interact with us (collectively, the “Services”). By using the Services, you agree to this Policy.

Quick summary

• We collect information you give us (name, email, shipping address, payment details, app activity) plus information automatically generated when you browse or use the app (cookies, device info, log data).
• We use it to fulfill orders, run the WOLV app, send marketing you opted into, prevent fraud, improve our products, and meet legal obligations.
• We share information only with vetted service providers (Shopify, Klaviyo, Appstle, Judge.me, Cal.com, Firebase, Supabase, Google Gemini, Vercel, payment processors, shippers) and never sell it.
• You can opt out of marketing anytime, request a copy of your data, ask us to delete it, or correct inaccuracies. Email support@thewolvlife.com.

1. Who we are

Controller: WOLV LLC, Warwick, RI 02886, United States.
Contact: support@thewolvlife.com

2. Information we collect

2.1 Information you provide

• Identity & contact: first and last name, email address, phone number (if you give it), shipping and billing addresses.
• Account info: username, password, public profile details (avatar, handle, identity statement) if you create an account on the website or app.
• Order & payment data: products ordered, subscription frequency, payment method. Payment card details are entered directly with our payment processor (Shopify Payments / Shop Pay) and we do not store full card numbers.
• Marketing preferences: the lists you join, the topics you opt into, your email + push notification preferences.
• Beta application data: name, email, device type, the focus area you select, and any optional “why” statement you submit on the beta apply form.
• Communications: messages you send us through email, contact forms, the app’s Founder Inbox, social DMs, or live chat.
• Reviews and user-generated content: product reviews, photos, and posts you publish through Judge.me or the WOLV app community feed.
• Booking info: if you book a 1:1 WOLV Call through Cal.com, the booking system collects your name, email, the time slot, and answers to intake questions you fill in.

2.2 Information collected automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, referring URL, pages viewed, time on page, app screens visited, links clicked.
• Cookies and similar technologies: see Section 6.
• Approximate location: derived from IP address, used for tax calculation, fraud prevention, and showing the right currency.
• Product interaction telemetry (PostHog): feature usage, session recordings (if enabled), event-level analytics collected by PostHog to help us understand how the app is used.
• Crash and performance data (Sentry): stack traces, error logs, and app performance metrics collected by Sentry to identify and fix bugs.
• Push notification delivery / opens.

2.3 Health, wellness, and sensitive information (WOLV app)

If you use the WOLV app, you may voluntarily enter or connect information about your health, training, nutrition, sleep, hydration, supplements, mood, and (for women) menstrual cycle, fertility window, and symptoms. Specific health metrics we may collect (from your entries, connected wearables, or the WOLV Ring) include: oxygen saturation (SpO2), heart rate (HR), heart rate variability (HRV), sleep stages and quality, stress/recovery scores, and skin temperature.

If you enable the Apple HealthKit integration, we may read Apple HealthKit data (steps, workouts, fitness activity, and any other categories you explicitly authorize). You may also record voice recordings (voice notes, coach dictation) and upload photos (meal recognition, progress photos) which we process to power app features.

We treat all of the above as sensitive personal information under California (CPRA), EU (GDPR), Apple’s App Store health and fitness data rules, and other applicable laws.

• This data is only used to power the app features you choose to use (Standard Score, Recovery Score, cycle tracking, streaks, Pack check-ins, etc.).
• It is never sold, never shared with advertisers, never used for advertising profiling.
• You can delete it from your account at any time in app Settings, or request full deletion by emailing support@thewolvlife.com.
• You can choose whether to share your Standard Score, streak, and rank with your Pack via profile privacy toggles.

2.4 Wearable and third-party health integrations (WHOOP, Oura, and similar)

The WOLV app lets you optionally connect third-party wearable devices and health platforms, including WHOOP and Oura. Connecting one of these accounts is fully optional and requires you to authenticate through the provider’s own OAuth flow, where you explicitly approve the data we may read.

When you connect a wearable, we may receive the following categories of data from the provider, depending on which permissions you grant:

• WHOOP: recovery score, sleep stages and duration, heart rate variability (HRV), resting heart rate, respiratory rate, strain score, workout activity, body temperature, and basic profile information.
• Oura: readiness score, sleep score, sleep stages and duration, HRV, resting heart rate, body temperature, activity score, total daily activity, and basic profile information.
• Similar metrics from any other wearable we add in the future (Apple Health, Garmin, Polar, etc.) under comparable OAuth permissions.

How we use wearable data. Strictly to power features inside the WOLV app you choose to use, including: feeding your Recovery Score, contributing to your Standard Score, tailoring training and supplement recommendations, surfacing trends in your Pack profile (if you opt in), and triggering streak credits when targets are met.

What we do not do with wearable data. We do not sell it, share it with advertisers, share it with other WOLV members without your explicit opt-in, use it for marketing profiling, or share it with WHOOP, Oura, or any other wearable provider beyond the API connection itself.

How to disconnect. You can revoke the connection at any time inside the WOLV app under Settings > Integrations, or from your WHOOP / Oura account dashboard. When you disconnect, we stop pulling new data immediately. Data already synced into your account stays unless you also delete it (Settings > Data > Delete Wearable History, or by emailing support@thewolvlife.com).

Your relationship with the provider. Your use of WHOOP and Oura is governed by their own terms and privacy policies. WOLV is not responsible for the accuracy of data provided by these devices or for how those providers handle your data within their systems.

2.5 Information from other third parties

• Social login: if you sign in with Google, we receive your name, email, and profile photo from Google.
• Shipping carriers: tracking events and delivery confirmation.
• Analytics & ad platforms: aggregated audience insights from Meta, TikTok, Pinterest, and similar (you can opt out of personalized ads via each platform’s tools).
• Affiliate & referral programs: the source of your visit (e.g., ambassador link).

3. How we use your information

We use personal information for the following purposes (legal bases under GDPR: contract performance, legitimate interest, consent, or legal obligation, as applicable):

• Provide the Services — process and ship orders, manage subscriptions, run the WOLV app, sync your activity across devices, deliver downloadable assets like the Vault PDFs.
• Customer support — answer questions, process returns and refunds, troubleshoot problems.
• Marketing — with your consent (or as permitted by law), send promotional emails, drop alerts, restocks, and Pack updates; remarketing to website visitors; survey requests after delivery.
• Push notifications — with your consent in the app, send Daily Howl drops, drop alerts, streak reminders, and challenge updates via Firebase Cloud Messaging.
• Personalization — show you recommended products, surface Vault content relevant to your goals, adapt training/nutrition guidance based on your cycle phase if you opt in.
• Analytics and product improvement — understand how the website and app are used so we can improve them.
• Fraud prevention and security — detect and prevent unauthorized access, payment fraud, abuse of promotions or Pack Points.
• Legal and compliance — tax reporting, responding to lawful requests, enforcing our Terms.
• Pack Points and rewards — track your points balance, milestone progress, and rewards catalog redemptions.

4. Cookies and tracking technologies

We and our service providers use cookies, pixels, SDKs, and similar technologies to operate and improve the Services.

• Strictly necessary cookies — required for the cart, checkout, sign-in, and security. Cannot be turned off without breaking the site.
• Functional cookies — remember your preferences (language, region, recently viewed).
• Analytics cookies — measure traffic and engagement (Shopify Analytics, Google Analytics, Klaviyo).
• Marketing cookies — power remarketing and measure ad performance (Meta Pixel, TikTok Pixel, Pinterest Tag, Google Ads). These are loaded only where permitted by your region’s consent rules.

You can manage cookies through your browser settings, the consent banner where shown, or by enabling “Do Not Track” / Global Privacy Control signals. Browsers handle these signals differently; where required by law, we honor GPC.

5. Marketing emails and SMS

When you opt in (via the Vault sign-up, footer form, beta apply form, checkout opt-in, or in-app), we use Klaviyo to send marketing emails. Every marketing email includes an unsubscribe link; you can also manage preferences from any email footer or by emailing us.

We currently do not send marketing SMS. If we add SMS in the future, you will be asked to opt in separately and will be able to reply STOP at any time to cancel, consistent with the TCPA and CTIA guidelines.

6. Push notifications (WOLV app)

The WOLV app uses Firebase Cloud Messaging to deliver push notifications. Notifications require your explicit permission inside your browser or device. You can disable them anytime in your device’s notification settings or in the app’s Settings > Notifications.

6A. AI processing (WOLV app)

Certain features of the WOLV app are powered by AI, specifically Google Gemini (provided by Google) and Anthropic Claude (provided by Anthropic PBC). These features include Wolfy coach conversations, meal photo recognition (identifying food items and estimating nutrition), planner generation (daily/weekly personalized routines), and personalized suggestions inside the app. Your conversations and photos are sent to these AI providers to generate responses.

AI output is not medical, legal, or financial advice. Do not rely on WOLV AI features as a substitute for professional consultation. Always consult qualified professionals for medical, legal, or financial decisions.

• What we send to Gemini — only the minimum needed for the feature to work: the image or text you provide, plus limited context (e.g., your stated goals, dietary preferences, and recent activity). We do not send your name, email, phone number, or payment details.
• What Gemini does with it — processes your input to generate a response we surface back to you in the app. Under Google's Gemini API terms, your inputs are not used to train Google's foundation models.
• Retention — API requests may be logged short-term by Google for abuse prevention and service reliability. They are not retained long-term for training.
• Opt-out — you can disable AI-powered features anytime in your app settings. Doing so preserves manual logging, tracking, and non-AI functionality.
• Sensitive inputs — do not upload photos or text you would not be comfortable sending to a large language model. Avoid sharing medical records, government IDs, or other sensitive identifiers.

Google's own privacy documentation for Gemini API usage is available at ai.google.dev/gemini-api/terms.

7. Who we share information with

We do not sell personal information. We share data only with service providers and partners who help us run the business, all under contract obligating them to protect your data and use it only for our instructions.

• Shopify — ecommerce platform, hosting, checkout, order data, customer accounts.
• Shopify Payments / Shop Pay — payment processing.
• Klaviyo — email marketing, profiles, segmentation, transactional emails.
• Appstle — subscription management and billing schedules.
• Judge.me — product reviews collection and display.
• Cal.com — booking for the 1:1 WOLV Call.
• Supabase — WOLV app database, authentication, and storage.
• Firebase Cloud Messaging (Google) — push notifications to the app.
• Google Gemini (Google AI) — powers meal photo scanning, planner generation, and AI coaching prompts inside the WOLV app. See section 6A above for details on what data is sent.
• Vercel — web hosting and serverless functions for the WOLV app (app.thewolvlife.com).
• WHOOP, Inc. — wearable data integration (read-only, via OAuth, only if you connect).
• Ōura Health Oy — wearable data integration (read-only, via OAuth, only if you connect).
• Google — sign-in with Google, Google Analytics, Google Ads (if you consent).
• Meta, TikTok, Pinterest, YouTube, X — advertising and conversion measurement where you have not opted out.
• Shipping carriers — UPS, USPS, FedEx, and similar to deliver orders.
• Cloudflare — content delivery and bot/security protection.
• Professional advisors — accountants, lawyers, auditors as needed.
• Government or law enforcement — only when legally required (subpoena, court order) or to protect the safety of our users, our property, or the public.
• Successors in a business transfer — if we sell, merge, restructure, or transfer the business or its assets, personal information may transfer as part of that deal; the receiving party will be bound by privacy commitments at least as protective as this Policy.

8. International data transfers

WOLV is based in the United States. If you access the Services from outside the U.S., your information will be transferred to, processed, and stored in the U.S. and other countries where our service providers operate. For EU/UK/Swiss residents, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards offered by our processors to legitimize these transfers.

9. How we protect your information

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Examples include TLS/SSL encryption in transit, encryption at rest with our processors, role-based access controls, multi-factor authentication on internal systems, vendor security reviews, and regular software updates.

No system is 100% secure. We cannot guarantee absolute security, but we work continuously to maintain a strong security posture.

10. How long we keep information

We retain personal information only as long as necessary to:

• Provide the Services to you and run your account;
• Fulfill orders, subscriptions, and warranty/return obligations;
• Comply with tax, accounting, and other legal obligations (typically 7 years for transactional records);
• Resolve disputes and enforce agreements;
• Maintain backups and security logs (typically up to 12 months).

When information is no longer needed, we delete or anonymize it. You can request deletion of your account and associated data at any time (see Section 11).

11. Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — fix inaccurate or incomplete information.
• Deletion — ask us to delete your information.
• Portability — receive your data in a structured, machine-readable format.
• Restriction or objection — limit or object to certain uses (especially marketing or profiling).
• Withdraw consent — where processing is based on consent.
• Non-discrimination — exercising privacy rights will not result in denial of service or different prices.
• Lodge a complaint — with your local data protection authority.

To exercise any of these, email support@thewolvlife.com with the subject line “Privacy Request.” We may need to verify your identity. We respond within 30 days (45 days for complex requests under CCPA).

12. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended.

Categories of personal information we collect (in the past 12 months): identifiers (name, email, address, IP), commercial information (purchase history), internet activity (browsing, app usage), geolocation (approximate), inferences (preferences, segments), and sensitive personal information (account credentials, health/wellness data you enter into the app).

Purposes: as described in Section 3.

Categories disclosed to third parties: identifiers, commercial information, internet activity, and inferences to the service providers listed in Section 7.

Sale or sharing: we do not sell personal information for money. To the extent that advertising cookies (e.g., Meta Pixel) qualify as “sharing” under CPRA, you can opt out by enabling Global Privacy Control in your browser or by emailing support@thewolvlife.com with the subject “Do Not Share.”

Sensitive personal information: we do not use SPI to infer characteristics; you may direct us to limit our use of SPI by emailing the same address.

Your rights under CCPA / CPRA. California residents have the right to:

• Right to know — request the categories and specific pieces of personal information we have collected about you.
• Right to delete — request deletion of personal information we have collected. Delete your WOLV account and all associated data at thewolvlife.com/delete-account or by emailing support@thewolvlife.com.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — WOLV does not sell personal information. To opt out of cross-context behavioral advertising sharing (advertising cookies), enable Global Privacy Control in your browser or email support@thewolvlife.com with the subject “Do Not Share.”
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different quality of service because you exercised any of these rights.
• Right to access — request a copy of your personal information in a portable format.

To exercise any of these rights, email support@thewolvlife.com. We will verify your identity before processing and respond within 45 days (with a 45-day extension if reasonably necessary).

You may designate an authorized agent to exercise your rights. We will verify the agent’s permission before processing.

13. EU / UK / Swiss data protection

If you are in the EU, UK, or Switzerland, our processing is governed by the GDPR (or UK GDPR / FADP equivalents). The legal bases we rely on are:

• Contract — to fulfill orders, run subscriptions, deliver the app.
• Consent — for marketing emails, push notifications, non-essential cookies, and use of sensitive (health) data in the app.
• Legitimate interest — fraud prevention, security, analytics, improving the Services.
• Legal obligation — tax records, responding to lawful requests.

You have the right to lodge a complaint with your local supervisory authority.

14. Children’s privacy

The Services are not directed to anyone under 16 years old. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please email support@thewolvlife.com and we will delete it. Some products (e.g., supplements, caffeine-containing items) are intended only for adults 18 or older.

15. Third-party links and services

Our Services may contain links to third-party websites or services (e.g., partner charities, social platforms). We are not responsible for their privacy practices. Review their policies before sharing information with them.

16. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated by email (for active subscribers) or by a prominent banner on the website for at least 30 days before they take effect.

17. Contact us

Privacy questions, requests, or complaints:
WOLV LLC
1276 Bald Hill Road / Route 2, Unit 15 #1054
Warwick, RI 02886
United States
support@thewolvlife.com