Privacy Policy

The data controller is [COMPANY NAME], [REGISTERED ADDRESS], United Kingdom. For anything in this policy, including requests about your data, contact [SUPPORT EMAIL].

• Account details — email address, password (stored hashed, never in readable form), display name, and the sign-in provider you used.
• Health and body data you enter — age, sex, height, weight, body composition, activity level, dietary restrictions and goals.
• Activity you log — workouts, sets, weights and reps, food entries and photos you upload for analysis, check-ins and progress notes.
• Preferences — units, plan settings, saved articles and recipes.
• Feedback you send us — the message you write plus the page you were on and basic browser information, so we can reproduce problems.
• Technical data — standard server logs needed to run and secure the service.

Health-related information is a special category of personal data under UK GDPR. We process it only because you have given explicit consent by entering it, and only to produce your plan and progress.

• To generate and adapt your training and nutrition plan (performance of our contract with you).
• To show your history, records and progress.
• To fix bugs and improve the product (our legitimate interest in a working service).
• To send service emails such as confirmations and password resets.
• To send optional product updates, only if you opt in.

We do not sell your data, and we do not use it for advertising profiling.

We use a small number of providers to run the service: cloud hosting and database infrastructure, transactional email delivery, and an AI provider used to interpret food photos and descriptions you submit. They act on our instructions under contract. Food images sent for analysis are used to return a result to you, not to train third-party models.

Data is stored on servers within the UK/EU where possible; some providers may process data elsewhere under appropriate safeguards such as UK international data transfer agreements.

We keep your data for as long as your account exists. If you delete your account, personal data is removed within 30 days, except where we must keep limited records (for example payment records for tax purposes). You can also wipe your logged history from within the app using Fresh Start without deleting your account.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, withdraw consent, and receive it in a portable format. Email [SUPPORT EMAIL] and we will respond within one month.

If you are not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

We use storage on your device for things the app cannot work without: keeping you signed in, remembering your preferences, and holding workout data offline until it can sync. We do not use third-party advertising or tracking cookies.

See the Terms of Service and the health disclaimer.