Your stuff stays yours.

Effective October 14, 2026 · Last updated October 14, 2026

1. Who we are

The Million Dollar Machine ("MDM," "we," "us") is a coaching program created by Brittany Lewis and operated by Be A Wolf Biz. It includes the 3-day challenge, the paid membership, the member portal at portal.themilliondollarmachine.com, our AI coach Millibot, and the member community. This policy covers all of those, plus our sales page at themilliondollarmachine.com.

2. What we collect

Information you give us

• Account details: your email address and name. If you choose to, a display name and a profile photo.
• Purchase details: what you bought, when, and the status of your membership. Stripe collects your payment details (card, billing address) directly; we only receive limited information back, such as the card brand, last four digits and whether a payment went through.
• Millibot conversations: the messages you type or speak to Millibot, and its replies.
• Voice: if you use the microphone with Millibot, a short recording of what you say is sent to be turned into text. We keep the text, not the recording.
• Community activity: posts, comments, likes, saves, follows, reports and the lessons you attach to posts.
• Messages to us: anything you send when you email us or ask for support.

Information collected automatically

• Progress: which challenge days, videos and lessons you've opened or finished, so the portal can pick up where you left off.
• Notification settings: your alert preferences and, if you turn on phone or desktop alerts, a push subscription for that device (a technical address your browser gives us so we can deliver alerts).
• Technical information: like any website, our hosting provider receives your IP address, browser type and device type when you visit. We use this to keep the service running, prevent abuse and fix errors.
• Error reports: if something breaks, we log what went wrong so we can fix it.

We don't use advertising cookies, ad pixels, or cross-site tracking, and we don't buy information about you from data brokers.

3. How we use it

• To give you access to what you bought, sign you in, and remember your progress.
• To run Millibot, including remembering earlier conversations so it can keep helping you over time.
• To run the community and send the notifications you've asked for.
• To process payments, manage your membership and send receipts.
• To answer your questions and give you support.
• To keep the service safe: preventing fraud, spam, abuse and misuse of the AI tools.
• To understand, at a general level, how the program is used so we can make it better.
• To meet legal, tax and accounting obligations.

If you're in a place where the law asks us to name a "legal basis," we rely on: performing our agreement with you (giving you what you bought), our legitimate interests (keeping things safe and improving the program), your consent (for example, push notifications and your profile photo), and legal obligations (for example, tax records).

4. Millibot and AI

Millibot is an AI coach. When you chat with it, your messages are sent to our AI provider to generate a reply. A few things worth knowing:

• Who processes it: replies are generated by Anthropic (the company behind Claude). Voice messages are converted to text by Groq, and if you have Millibot read a reply out loud, the text is converted to speech by Google Cloud.
• No training on your chats: these providers process your messages to give you a response. Under their business terms, they don't use what we send them to train their models.
• Weekly summaries: for members, Millibot may create a private summary of your recent conversations so it can remember your progress. Only you see it.
• Who can see your chats: your conversations are private to you. They're stored securely so Millibot can remember context. Our team does not read them as a matter of routine; limited access may happen only to investigate a technical problem, a safety issue, or misuse, or if the law requires it.
• Not professional advice: Millibot is a coaching tool. It isn't a lawyer, accountant, financial advisor or therapist, and it can make mistakes. Please don't share passwords, card numbers, government ID numbers or other highly sensitive information in chat.

5. The community

The community is a shared space. What you post (your name, profile photo, posts and comments) is visible to the other people in that space: challenge participants in the challenge community, and members in the members' community. Please only share what you're comfortable with others seeing.

Brittany hosts the community. She can feature and pin posts, and remove posts that break the community rules. Members can report posts. We never send the text of a post inside a push notification, so your words don't show up on someone's lock screen.

6. Who we share it with

We do not sell or rent your personal information, and we don't share it for targeted advertising. We share it only with the service providers that help us run MDM, who are only allowed to use it to provide their service to us:

Provider	What they do	What they receive
Stripe	Payments and subscriptions	Payment details, email, purchase history
Supabase	Database and photo storage	Account, progress, community and chat data
Vercel	Website hosting	Technical information when you visit
Anthropic	Millibot's AI replies	Your chat messages and context
Groq	Voice-to-text	Voice recordings you choose to send
Google Cloud	Text-to-speech	Reply text you choose to hear
Airtable	Internal records and usage tracking	Usage records and chat logs
Resend	Sign-in and welcome emails	Your email address and name
Your browser's push service (Apple, Google, Mozilla, Microsoft)	Delivering phone and desktop alerts	A short alert, never the text of a post

We may also share information if the law requires it, to protect the rights, safety or property of our members, our team or others, or as part of a sale or reorganization of the business (in which case this policy would continue to apply to your information).

7. Cookies and device storage

The portal keeps you signed in and remembers small preferences (like light or dark mode, whether you've dismissed a banner, and whether you've installed the app) using your browser's local storage on your own device. These are needed for the portal to work. We don't use advertising or cross-site tracking cookies.

Stripe sets its own cookies on the checkout page to process your payment and prevent fraud. Those are covered by Stripe's privacy policy.

You can clear local storage at any time in your browser settings; you'll just need to sign in again.

8. Emails and notifications

• Account emails: sign-in links, welcome emails and payment receipts are part of the service and are sent when needed.
• Notifications: in-portal notifications (the bell) are always on. Phone and desktop alerts are only sent if you turn them on, and you can choose exactly which ones (replies, posts from Brittany, all new posts, the daily digest) or turn them off under Account → Notifications.
• Call reminder emails: members get reminders before live calls. You can turn them off any time on the Live calls page.
• Marketing: if you've joined one of our email lists, every marketing email has an unsubscribe link.

9. How long we keep it

• Account, progress and chats: for as long as you have access to the challenge or membership, and for a reasonable period afterward in case you come back. You can ask us to delete them sooner.
• Community posts: until you or the host removes them, or you ask us to delete your account.
• Purchase records: as long as tax and accounting laws require (usually up to 7 years).
• Voice recordings: not stored by us; only the resulting text is kept with your chat.
• Technical logs and error reports: kept for a limited time and then deleted.

10. How we protect it

We use encrypted connections (HTTPS) everywhere, passwordless sign-in links that expire, access controls on our database, and reputable providers with strong security programs. Only the people who need access to run the program have it. No system is 100% secure, but we take protecting your information seriously, and we'll let you know if a breach affects you, as the law requires.

11. Your choices and rights

Wherever you live, you can ask us to:

• See the personal information we have about you, and get a copy.
• Fix anything that's wrong. You can change your name and photo yourself under Account.
• Delete your information. Some records (like purchase records) we must keep for legal reasons.
• Stop push notifications or marketing emails at any time.
• Cancel your membership at any time from Account → Billing.

To make a request, email us at the address below from the email on your account. We'll confirm it's you, then respond within 30 days (or sooner if your local law requires). We won't treat you differently for exercising your rights.

12. U.S. state privacy rights

Residents of California and other states with privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon) have the rights described above, including the right to know what categories of personal information we collect and why, to access, correct and delete it, and to opt out of the sale or sharing of personal information for targeted advertising. We don't sell personal information or share it for targeted advertising, and we haven't in the past 12 months. In the past 12 months we've collected the categories described in section 2: identifiers (name, email), commercial information (purchases), internet activity (portal usage), audio (voice messages, if used) and content you create. You can use an authorized agent to make a request on your behalf. If we deny a request, you can appeal by replying to our response.

13. Visitors outside the U.S.

MDM is run from the United States, and our providers store and process information in the U.S. and other countries. If you're in the UK, the EU or elsewhere, your information will be transferred to the U.S., and we rely on our providers' standard contractual protections for those transfers. You also have the right to complain to your local data protection authority.

14. Children

MDM is for adults. It isn't intended for anyone under 18, and we don't knowingly collect information from children. If you think a child has given us information, let us know and we'll delete it.

15. Changes to this policy

If we change this policy, we'll update the date at the top. If the change is significant, we'll also let members know in the portal or by email before it takes effect.

16. Contact us

Questions, requests, or just want to know what we have on file? Email support@beawolfbiz.com with "Privacy" in the subject line, and a real human will get back to you.