Health-data privacy and choices

Optional device-only records

Weight check-ins, notes, check-in photos, quiz answers, checklist responses, workout history, starter plans and weekly reflections stay in this browser. Saving is off by default. Use “Save fitness progress on this device” in Account or the tools to turn saving on or off. When off, tools can be used temporarily without saving new fitness records. Turning saving off does not erase earlier records; use the separate clear action.

Calorie and macro inputs are processed in browser memory, without automatic saving or upload. Local check-in photos are resized and re-encoded, then stored in this browser’s image database. They are not uploaded to Supabase. Browser/device loss or clearing site data can permanently lose these records; our server backups cannot recover them. Do not enter someone else’s information or medical reports.

What still uses account hosting

Authentication, account identity, verified purchase entitlement and minimal reading continuity still use our account services. Signed-in reading continuity contains your last chapter, completed chapter identifiers and a day-level update date. Exact scroll positions, quiz answers and checklist details do not sync. Fitness saving is separate from purchased access and minimal reading continuity.

Older versions stored check-ins, detailed reading records and private photos in Supabase. This change does not automatically delete those historical records. They remain available through account export or an assisted request; Review now shows device records. An avatar is separate: its URL may be public, so never use a sensitive progress photo as an avatar. Removing a recognised owned avatar attempts to remove its bytes before unlinking it.

Providers and external connections

Supabase handles authentication, account data, minimal reading continuity, avatars and historical cloud records. Netlify hosts the application and operational logs. Gumroad handles existing purchases under its own privacy policy; Resend handles transactional delivery email when configured. Authorised support and the operator in Jordan may handle account requests. These providers may process account information outside your country; no particular regional guarantee or international-transfer agreement is claimed here.

Choosing to load an optional YouTube video connects to YouTube. This version does not run Meta Pixel, conversion APIs, Google Ads, remarketing or newsletter enrollment. We do not use device fitness records for advertising.

Export, clearing and assisted deletion

Account offers separate cloud and device exports. The device export includes this account’s saved local photos. The cloud export includes account records and historical check-in metadata, but not cloud photo bytes or independent payment/email provider records. Request an assisted byte export when needed.

Clear this account’s device records in Account, or delete individual device check-ins in Review. Other accounts’ scoped records are kept. Older unassigned records are hidden because their owner cannot be established; their separate clear action asks you to confirm ownership or permission. Avoid a shared browser profile for private data: account separation is not encryption against another person with access to your browser storage.

For account deletion, historical cloud-photo cleanup, correction or privacy help, email the contact above. We verify identity without asking for your password. Provider-controlled records and any justified financial/dispute retention require separate handling. Backup copies may persist until their applicable retention expires; deletion restrictions must be reapplied before a restored service opens. No immediate erasure of every vendor copy, fixed legal retention period or automatic account deletion is promised.

Additional rights and complaint routes depend on applicable law. This notice and operating process remain subject to professional privacy review; this service is not represented as HIPAA certified.