PRIVACY POLICY
Last updated: September 30th, 2025

We respect your privacy. This Privacy Policy explains how X.KRISTEN INC. collects, uses, shares, and protects your personal information when you access our Site, purchase our Program, or engage with us on social media. Capitalized terms used and not defined below are defined in our Terms of Use.

By using our Site or Program, you consent to this Policy.

1) Information We Collect
We limit the information we collect to the following:
* Personal Information: name, email, mailing address, phone, and other information (including audio and video content, stories, testimonials, anecdotes, and other content) you provide during checkout, account creation, surveys, coaching intake or participation in the Life at Ten Program.
* Transaction Data: products purchased, payment method token, billing info handled by
payment processors.
* Account and Usage Data: IP address, device info, browser type, pages visited, time stamps,
referring URLs, and general analytics.
* Community and Communications: posts or messages on our Site or similar platforms,
comments, testimonials, and support emails.
* Social Data: information you allow social platforms to share with us when you interact with our
accounts or log in using a social service.
* Mobile Data: device ID, model, operating system, and approximate location if enabled.
* Cookies and Similar Technologies: small files to remember preferences, keep you logged in,
personalize content, measure performance, and support advertising where permitted. See
Cookies section below.

2) How We Use Your Information
We limit the use the information we collect to:
* Provide and improve the Site and Program.
* Create and manage your account, deliver purchases, and provide support.
* Send transactional messages, updates, and marketing communications you opt into.
* Personalize content and recommendations.
* Conduct analytics, research, and product development.
* Detect, prevent, and address technical issues or fraud.
* Comply with legal obligations and enforce our agreements.

3) Legal Bases
We process data on the basis of your consent, our legitimate interests in running and improving our business, performance of a contract with you, and compliance with legal obligations. At any time you can withdraw your consent by unsubscribing from the Site and withdrawing from the Program. Your withdrawal does not apply to actions we have already taken based on your prior consent.

4) Sharing Your Information
We share information with trusted third-party processors only to operate the Site and Program.
These may include:
* Hosting, course, and community platforms, such as Circle.
* Payment processors, such as Stripe, PayPal, or Shopify Payments.
* Email, CRM, and automation providers, such as ActiveCampaign, Calendly, and Zapier.
* Analytics and advertising partners, such as Google Analytics and Meta Ads, where permitted.
We may share information to comply with law, respond to legal requests, protect our rights, or in connection with a merger, acquisition, or corporate reorganization. We do not sell personal information.

5) Cookies and Tracking
We may use essential, functional, analytics, and advertising cookies where permitted by law. You can manage cookies via your browser settings. Blocking cookies may impact site functionality. We may use pixels and tags for analytics and advertising. For more information or to update preferences, contact [hello @ xkristen.com]  The use of cookies by our tracking utility company and service providers is not covered by our Privacy Policy. We may use a third-party tracking service, which uses cookies to track non-personally identifiable information about users of our Site in the aggregate to capture usage and volume statistics. We have no access to or control over these cookies. We may from time to time implement other third-party analytics services that also use cookies. We will ensure that no personally identifiable information is included in those cookies. If the use of cookies by any service provider differs materially from the practices already listed, we will
revise this document accordingly and notify existing users of the change(s). In order for us to communicate with you via any mobile App, we may save a device token on your device. We use the device token to provide you with notifications relating to the Program. The device token identifies your mobile device to us but cannot be used to identify you. We
store the token in encrypted format and retain it only as long as necessary to provide you with the Program.

6) Data Retention
We retain personal data as long as needed for the purposes described in this Policy, to provide services, to comply with legal obligations, and to resolve disputes. When no longer needed, we will delete or anonymize data. When personal data is viewed via a mobile device, some data is cached in the memory of the device. That data is deleted when the related application is closed and does not persist. If the application is put in the background without closing, the data may remain in the cache. We take no responsibility for any unauthorized viewing of this data by third parties.

7) Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. No method is completely secure. You are responsible for safeguarding your account credentials. We use industry standard safeguards to protect against unauthorized access to your personal information.

8) Children
Our Site & Program is not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us to request deletion.

9) Your Choices and Rights
* Access and Correction: We make every effort to ensure the accuracy of your information. However, you must verify all information created from your use of the Program and the Site. You may request a copy of your personal data or ask us to correct inaccuracies.
* Deletion: request deletion of your personal data, subject to legal obligations to retain certain records.
* Marketing Preferences: unsubscribe from marketing emails using the link in any email or by contacting us. Transactional emails will continue as needed to service your account.
* Cookies: manage cookies in your browser settings.
* Data Portability: where required by law, request a machine-readable copy.
To exercise rights, contact our privacy officer at: hello @ xkristen .com. We may need to verify your identity.

10) International Transfers
Our servers, processors, or partners may be located in Canada, the United States, or other countries. By using the Site or the Program, you consent to international transfers subject to appropriate safeguards.

11) Third-Party Links
Our Site may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal information.

12) Changes to This Policy
We may update this Policy from time to time. The “Last updated” date will change. Your continued use of the Site or the Program means you accept the updated Policy.

13) Contact
If you have questions about this Policy or your data rights, contact our privacy officer at: hello @ xkristen .com