Privacy notice

A Human Web is operated by Just Brands, LLC, a New York limited liability company. This notice covers A Human Web, not other services operated by the company or websites we link to.

• Account details: the name and email you submit, a password hash, verification and recovery records, and sign-in sessions. Passwords are not stored as readable text. Authentication may also store an IP address and browser information for session security and abuse prevention.
• Saved preferences: experience level, browsing goal, position or equipment constraints, and display time zone, when you choose to save them.
• Routines and completed sessions: movements and variations, side, planned or actual sets, repetitions, hold time, load, effort, dates, time zones, and a snapshot of the lesson guidance and demonstration version.
• Optional observations: notes, symptom ratings before, after, or the next day, and named assessments and measurements. These can reveal health information. The editor requires a separate confirmation to store them; you can save a record without them.
• Technical requests: the host receives your IP address, requested page or API address, and browser information when delivering the site. Infrastructure may produce access and error logs.
• Messages: if you contact the company through existing support or membership email links, we receive the information you send and the details needed to reply. A mailto link opens your own email app; it does not send a message until you choose to send it.

Do not put another person’s private information in your records. We do not request medical documents, insurance details, precise location, camera access, or microphone access for these features.

We use account information to authenticate you, secure the service, and send verification or recovery messages when email is configured. We use saved records to show routines, history, comparisons, exports, and the guidance associated with each record. Preferences help filter educational content.

Records are private to your account in the application; they are not a public profile. Authorized operators and service providers may need access to operate, secure, or support the service. We do not use training records to diagnose conditions, automatically prescribe treatment, or decide insurance or employment eligibility.

The current service does not sell personal information, provide it to advertisers for behavioral targeting, or use private training records to train AI models. Creating an account does not subscribe you to marketing.

Current discomfort-screening answers, unsaved discovery preferences, and library search/return state are kept in temporary browser memory. They are not automatically saved to your account. Account sign-in, sign-out, and deletion clear this temporary discovery state; a full reload also resets it. Unsaved training form entries are not an offline backup.

The older quiz has a separate optional local bookmark containing the email entered, four quiz answers, and save/update dates. It remains in that browser until replaced or cleared; signing out of an account does not remove it.

Area, side, collection, and older quiz-answer links may appear in the page address and therefore in browser history, copied links, and server requests. Current discomfort-screening answers and free-text library searches are not put into shareable addresses. See Cookies & browser storage.

Account and training records are held in the application server’s database. In the local preview, that server is the computer running the site. The public educational site is hosted by Cloudflare. Account creation, saved routines, and progress tracking are unavailable on that deployment; it does not create an account or training database. Account hosting, processing locations, and backup retention must be confirmed before public accounts launch.

Cloudflare Email Service processes email recipients and verification or password-reset message content when account email is configured. Those messages contain time-limited account links, not training notes. Local preview does not send email unless configured. Messages you send through existing mailto links are also handled by your email provider and the recipient’s inbox provider, separately from account records.

Cloudflare Web Analytics is optional and off by default. If enabled, this integration records only the public educational page a visit lands on, and only when its address has no query; later navigation within the site and custom events are not reported. Account, routine, progress, quiz, body, movement-library, and studio routes are excluded. Normal hosting requests are separate from analytics.

We may disclose information when legally required, to respond to a lawful request, or when reasonably necessary to protect rights, security, or safety. A change of ownership would require continued protection of personal information and any notices or choices required by applicable law. External reference sites have their own policies.

Saved account, preference, routine, and session records remain in the active database until you delete them or the account is removed. Session access expires, but expiration alone is not a promise that all historical authentication or security records are immediately erased.

Deleting an account removes its training records from the active database. Operator backups can retain earlier copies. The local migration tool makes backups, and no automatic backup-deletion schedule is currently implemented. Public backup, security-log, and correspondence retention periods must be confirmed before public account launch.

The application uses password hashing, account-based authorization, and protected session cookies. Public account configuration requires HTTPS. These measures do not make the service risk-free. It is not an emergency record system, and we do not claim HIPAA certification or clinical confidentiality guarantees. Keep downloaded exports secure.

Where accounts are available, you can edit or delete routines and sessions, remove optional observations, and update saved preferences. The account page exports your account name/email, preferences, and all saved training records as JSON, and offers permanent account deletion. The export does not include passwords or session tokens and is not a complete copy of infrastructure logs.

Clearing browser data removes local storage and sign-in cookies, not server records. Deleting the server account does not erase downloaded exports, an older quiz bookmark, separately sent messages, or existing backups.

Depending on where you live, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to certain processing, withdraw applicable consent, or complain to a privacy regulator. Contact the company using the details below. We may need to verify your identity and will respond as required by applicable law; legal exceptions may apply. We do not charge or treat you unfavorably merely for exercising a privacy right.

We do not conduct cross-site behavioral advertising, including when a browser sends Global Privacy Control or Do Not Track. Those signals do not delete saved records or replace account controls.

The site is a general-audience educational service, not directed to children under 13. Do not create an account or submit personal information if you are under 13. A parent or guardian who believes a child has submitted information can contact the company to request review and deletion. The service does not claim to verify everyone’s age.

We will update the date on this notice when practices change. Material changes will be explained on the site, and any consent required for a new use of previously collected information will be obtained before that use.