Effective date: August 12, 2026
Last updated: October 5, 2026
1. Scope and what this policycovers
This Privacy Policy explains how BB Body, Inc. (“Brooke Burke Body,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our quizzes, websites and subdomains, apps, streaming content, and related checkout, email, account and support features, and any other site or app that links to this policy (together, the “Services”).
This policy covers the personal information you give us directly (for example, when you take a quiz or buy a plan), information we collect automatically (for example, through cookies and similar technologies), and information we receive from the service providers described in this policy.
This policy does not apply to third-party websites, apps, or services that we do not operate. If you do not agree with this policy, please do not use the Services.
2. Who we are and how to contact us
Operator and data controller:
BB Body, Inc., a California corporation, United States
Privacy contact: contact@brookeburkebody.com
We are based in the United States and direct our Services to users in the United States. For how to exercise your privacy rights, see Section 16.
3. Information we collect
We collect the following categories of personal information.
3.1. Quiz and onboarding information
When you take a Brooke Burke Body quiz, you provide answers used to build a personalized fitness and wellness plan. The questions may change over time; they may include, for example:
- Age and gender
- Height, current weight, and target weight
- Body type, dream body, and focus areas
- Fitness level, walking habits, and activity patterns
- Work schedule, method familiarity, and goal pace
Sleep duration and sleep-related patterns, which may include hot flashes and insomnia
- Eating patterns and post-meal energy
- Habits you choose to share, such as alcohol use and smoking
- Medical conditions you choose to share, such as blood pressure, diabetes, depression, heart disease, cancer, and cholesterol
- Medications you take, such as hormones, antibiotics, and vitamins
- Life events, which may include menopause, pregnancy, grief, or caregiving
- Pain or injury zones, setbacks, and the cost of inaction to you
- Your goals, and any event or date you are working toward
Many of these answers describe your health. We treat those answers as sensitive information with additional protections. See Section 4.
3.2. Account information
If you create an account, subscribe to streaming or app content, or contact support, we collect information such as your name, email address, password, and the content of your messages to us.
3.3. Purchase information
When you buy a plan, our payment providers collect the information needed to process your order, such as billing details and transaction records. We receive confirmation of your purchase, the plan you bought, and limited billing metadata. We do not store your full card number on our own systems.
3.4. Device, cookies, and similar technologies
When you use the Services, we and our providers automatically collect technical information such as your device type, browser, operating system, IP address, general location inferred from your IP address, referring pages, and how you interact with our pages. We collect this through cookies, pixels, software development kits (SDKs), and similar technologies. See Section 6.
3.5. Information from integrations and providers
We receive information from the service providers that help us run the Services, such as our email/CRM platform, payment and checkout providers, advertising and analytics providers, and our content delivery network. See Section 8.
3.6. Inferred and derived information
From your quiz answers we calculate derived values such as your body mass index (BMI), a personalized body-type image, and a personalized plan or segment. These derived values are part of your personal information and are treated with the same care as the answers they are based on.
We use automated processing, including machine-learning and artificial-intelligence models, to build and personalize your plan, to analyze how the Services are used, to improve our content and Services, and to derive de-identified or aggregated insights. Where the law requires it, we will tell you about automated decisions that have a legal or similarly significant effect on you and give you a way to ask for human review.
3.7. De-identified and aggregated information
We may create de-identified or aggregated information from personal information, including quiz answers, by removing or altering details so that it can no longer reasonably be linked to you. We may use and share de-identified and aggregated information for any lawful purpose, including analytics, research, product development, model training and improvement, benchmarking and reporting, and we may keep it indefinitely. We maintain and use it only in de-identified form, we will not attempt to re-identify it, and we contractually require any recipient to do the same.
4. Sensitive and health-related data
Some quiz answers describe your body, weight, sleep, habits, medical conditions, medications, and life events such as menopause and pregnancy. We treat this as sensitive information (including special-category data under the GDPR and consumer-health data under certain US state laws) and ring-fence it with additional protections:
- We use it to build and deliver your personalized plan and related features, to personalize the content, offers and communications we show you, to improve and develop our Services, and in de-identified or aggregated form as described above.
- Before you begin the quiz, we tell you that by continuing you agree to this policy and our Terms. On the page where the health-related questions begin, and on the same screen as your answer choices, we tell you in clear language that by answering you agree that we may use your answers for the purposes described in this policy. Answering those questions is your affirmative consent, and we rely on it as our legal basis where applicable law (for example, in Washington or Nevada) requires a separate consent for health-related information. You can skip those questions or leave the quiz at any time.
- We do not send your health-related quiz answers or your medical or medication answers to advertising platforms, and we do not use them to target advertising to you. We may use de-identified or aggregated information derived from quiz answers as described in Section 3.
- You can withdraw your consent to our processing of sensitive information at any time, without affecting unrelated parts of the Services and without affecting processing that already took place before you withdrew. To withdraw consent, contact contact@brookeburkebody.com. See Sections 10, 11, and 16.
You provide these answers voluntarily when you take the quiz, and we ask for your agreement before we use them to build your plan.
5. Why we use your information and our legal bases
The table below maps each purpose to the categories of information used and, for users protected by the EU or UK GDPR, the legal basis we rely on.
In addition to the purposes in the table, we may use personal information to personalize the content, offers and plans we show you; to research, develop and launch new products, features and brands (using health-related information only in de-identified or aggregated form unless you have consented); and for any other purpose we describe to you when we collect the information.
PURPOSE: Build and deliver your personalized plan
CATEGORIES USED: Quiz and onboarding data, derived data
GDPR / UK LEGAL BASIS: Explicit consent for special-category data; performance of a contract or your request for other data
PURPOSE: Create and manage your account and content access
CATEGORIES USED: Account data
GDPR / UK LEGAL BASIS: Performance of a contract
PURPOSE: Process purchases and prevent payment fraud
CATEGORIES USED: Purchase data, device data
GDPR / UK LEGAL BASIS: Performance of a contract; legitimate interests in preventing fraud
PURPOSE: Provide customer support
CATEGORIES USED: Account data, quiz data as relevant
GDPR / UK LEGAL BASIS: Performance of a contract; legitimate interests
PURPOSE: Send service and marketing messages (email, SMS, push and other channels)
CATEGORIES USED: Account data, email/CRM data
GDPR / UK LEGAL BASIS: Consent where required; legitimate interests for service messages
PURPOSE: Measure and improve the Services
CATEGORIES USED: Device and usage data, session-replay data
GDPR / UK LEGAL BASIS: Consent where required; legitimate interests in improving the Services
PURPOSE: Advertising and measurement
CATEGORIES USED: Device and usage data, conversion events and non-health parameters
GDPR / UK LEGAL BASIS: Consent where required; legitimate interests
PURPOSE: Comply with law and defend legal claims
CATEGORIES USED: Any category as needed
GDPR / UK LEGAL BASIS: Legal obligation; legitimate interests
6. Advertising and tracking
6.1. Cookie and SDK categories
We use the following categories of cookies and similar technologies:
- Strictly necessary: required to run the site, load pages, and process checkout.
- Functional: remember your preferences and choices.
- Analytics/performance: help us understand how the Services are used.
- Advertising/targeting: measure ad campaigns and reach people who may be interested in Brooke Burke Body.
You can turn off advertising and analytics cookies at any time using the cookie settings available on our website. Strictly necessary cookies cannot be turned off because the Services do not work without them.
6.2. Advertising and analytics providers
We work with advertising, analytics and measurement providers. These may include, for example, Meta (Facebook and Instagram), Google (Ads, Analytics and Tag Manager), Microsoft (Advertising and Clarity), Snap, TikTok, Pinterest, Reddit, X, Amazon Ads, AppLovin, OpenAI, Taboola, Outbrain, Criteo and similar providers, and may change from time to time without an update to this policy. The providers we currently use include:
- Meta (Facebook) pixel: campaign measurement and audiences
- Google Ads: conversion measurement and remarketing
- Microsoft Bing (Microsoft Advertising): campaign measurement
- AppLovin: mobile advertising measurement
6.3. What these tools receive, and what they do not
Your health-related quiz answers are not sent to advertising platforms. Our advertising pixels and tags fire event data such as page views, quiz steps reached, checkout started and purchases completed, together with standard technical and page-level information, and may include non-health parameters such as order value, currency, plan or product tier, the starting option you selected and your age range. They do not carry your weight, height, target weight, body type, sleep, habits, medical conditions, medications, life events, or any health-related answer or segment derived from them.
What we do share with advertising platforms. To measure conversions and match them to ad campaigns, we may share identifiers such as a hashed (SHA-256) email address, a hashed name, an internal session identifier, and city, postal code and country where a platform’s specification requires them, together with device, usage and event data about your interaction with the Services. We may also upload hashed contact lists of existing customers to advertising platforms in order to reach existing customers or to exclude them from campaigns. None of this includes health-related information. Some state laws describe this kind of disclosure as “sharing”; you can turn off advertising cookies as described above and can ask us to remove you from these lists using the contact details in Section 16.
7. Session replay and session analytics
We may use session-analytics and session-replay tools, such as Microsoft Clarity, to understand how visitors use our pages, diagnose problems, and improve the experience. These tools can record page navigation, clicks, and scrolling.
When we use these tools, the text you type is masked, and because the quiz asks about your body, health conditions, medications, and life events, we also mask the answer choices on health-related questions so that recordings do not capture them.
The providers of these tools act as our service providers and process recordings on our behalf. Given the health-related nature of the quiz, we treat recordings with the same protections as other sensitive information.
8. How we share your information
We share personal information only as described here. We do not sell your personally identifiable information, as such terms are defined by applicable privacy law, this includes your health-related quiz answers, medical data, or medication data.
8.1. Categories of recipients
- Payment and checkout providers: to process your orders
- Email, messaging and CRM providers: to send account and marketing messages by email, SMS, push notification and other channels (with your consent where the law requires it), and to personalize them using information such as your goal, age and body measurements from the quiz
- Advertising and analytics providers: as described in Sections 6 and 7
- Hosting and content-delivery providers: to run and serve the Services
- Professional advisers and authorities: where required by law or to defend legal claims
- A buyer or successor: in a merger, acquisition, or similar business transfer, subject to this policy
- Affiliates and business partners: companies that operate the Services with us or jointly offer them, under written agreements that require them to protect your information
- Cross-promotion: we may tell you about other products and services offered by us or by our partners; you can opt out of marketing messages at any time
8.2. Key service providers and advertising partners
The service providers we work with include, but are not limited to:
- Digistore24: checkout and merchant-of-record
- ActiveCampaign: email and CRM
- Amazon Web Services / CloudFront: hosting and content delivery
- Technology, monitoring and operations providers: that operate the quiz, checkout integration, email delivery, error monitoring and related systems on our behalf
- Advertising partners: Meta, Google, Microsoft, Snap, TikTok, Pinterest, AppLovin, OpenAI and similar platforms receive the limited measurement data described in Section 6 and process it under their own terms as independent businesses, not as our service providers.
9. International data transfers
We are based in the United States, and our providers may process your information in the United States and other countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information may be transferred to countries that do not provide the same level of data protection as your home country.
Where we make such transfers, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) and, for the United Kingdom, the UK International Data Transfer Agreement or Addendum (IDTA). You can ask us for more information about these safeguards using the contact details in Section 16.
10. Your privacy rights
Depending on where you live, you may have some or all of the rights below. We honor verified requests as required by applicable law.
10.1. Rights for EU, UK, and Swiss users (GDPR / UK GDPR)
- Access a copy of your personal information
- Correct inaccurate information
- Delete your information (“right to erasure”)
- Restrict or object to certain processing
- Data portability
- Withdraw consent at any time, without affecting prior processing
- Lodge a complaint with your data protection authority
10.2. Appeals
If we decline your request, you may appeal by replying to our decision or contacting contact@brookeburkebody.com with the word “Appeal.” We will respond within the time required by your state’s law.
10.3. Non-discrimination
We will not deny you services, charge you a different price, or provide a lower quality of service because you exercised your privacy rights.
10.4. Authorized agents
You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof of authorization and may ask you to verify your identity directly.
10.5. Worldwide
If you are outside the regions named above, you may still contact us to access, correct, or delete your information, and we will respond consistent with applicable law.
11. Consumer-health privacy rights (Washington and Nevada)
Because the Brooke Burke Body quiz collects health information, including medical conditions, medications, and life events, this section is especially important.
If you are a Washington State resident, the My Health My Data Act may give you additional rights regarding “consumer health data,” which can include your body, weight, wellness, medical-condition, medication, and life-event answers. These rights include the right to know what consumer health data we collect and share, the right to withdraw consent, and the right to have your consumer health data deleted. We do not sell consumer health data, and we do not share it for advertising.
If you are a Nevada resident, you may have the right to opt out of the sale of certain covered health information. We do not sell such information.
To exercise these rights, contact contact@brookeburkebody.com with “Consumer Health Data Request” in your message.
12. Retention and deletion
We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law.
- Deletion requests: when you ask us to delete your information, we delete it from our active systems within the time required by applicable law and in any event without undue delay, and we instruct our service providers to do the same.
- Backups: residual copies may remain in secure backups for a limited period consistent with our backup cycle, after which they are overwritten or deleted.
Category-level retention. We retain each category of personal information as follows:
CATEGORY: Account data
RETENTION BASIS: Kept while your account is active
RETENTION PERIOD: For as long as necessary for the purposes described in this policy
CATEGORY: Quiz / onboarding data (including medical, medication, and life-event answers)
RETENTION BASIS: Kept to deliver and maintain your personalized plan
RETENTION PERIOD: For as long as necessary to deliver and maintain your plan, or until you ask us to delete it
CATEGORY: Purchase / tax records
RETENTION BASIS: Kept for the period required by tax and accounting law
RETENTION PERIOD: 7 years
CATEGORY: Support records
RETENTION BASIS: Kept to resolve your request and for a reasonable period afterward
RETENTION PERIOD: For as long as necessary to resolve your request and for a reasonable period afterward
CATEGORY: Marketing data
RETENTION BASIS: Kept until you unsubscribe or object, then suppressed
RETENTION PERIOD: Suppressed; deleted in line with our retention practices
13. Security
We use administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects you, we will notify you and the relevant authorities as required by law.
14. Children
The Services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, contact contact@brookeburkebody.com and we will delete it.
15. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the effective date at the top and, where required by law, provide additional notice (for example, by email or an on-site notice). Your continued use of the Services after an update means you accept the revised policy, except where your consent is required.
16. Contact us and exercising your rights
To ask a question about this policy, or to make a privacy request, contact:
BB Body, Inc.
Email: contact@brookeburkebody.com
To help us respond, tell us which right you want to exercise and give us enough information to verify your identity. We will respond within the time required by applicable law.
