Privacy Policy

We collect what a meal and workout plan needs, and nothing else. We do not sell your information, we do not share it with advertisers, and the site runs no third-party analytics or tracking scripts at all. We do count page visits ourselves, in a way that cannot identify you — see “Counting visits” below.

• Account: your first name, email address, and a scrambled (hashed) version of your password. If you sign in with Google, we receive your name, email address and whether Google has verified it — never your Google password.
• About your body: age, sex, height, weight, and optionally waist, neck and hip measurements, plus the BMI and body-fat estimates calculated from them.
• Your goals and training: goals, activity level, where you train, equipment, session length and the types of exercise you choose.
• Health information you choose to share: health conditions and allergies. This is sensitive, and we treat it that way — see below.
• Food preferences: diet, meals per day, cuisines, foods you usually eat, foods to avoid, and any foods you add yourself.
• Your plans and progress: the meal and workout plans we build, edits you make, weight entries, steps, workouts completed, food logged, weekly check-ins and any progress photos you upload.
• Consent records: which terms you accepted and when.
• Sessions: a sign-in token stored in a cookie so you stay logged in.

So we can see how the site is used, we record each page view on our own servers: the page address, the site that linked you here (its name only, never the full address), whether you were on a phone, tablet or computer, your country, and whether you were signed in.

We do not store your IP address, and we set no cookie for this. To count a person once a day rather than once a click, we turn your IP address and browser into a scrambled code using a secret that changes every day — so the same code cannot be linked to you, and cannot be matched from one day to the next. Visit records carry no account number, so they can never be traced back to your profile. No third party ever receives any of it.

To build and adjust your plan, to keep it safe for you, and to show your progress. Health conditions and allergies are used to keep unsuitable foods and exercises out of your plan — allergens are checked against every meal we generate.

Your data is held in a managed PostgreSQL database (Supabase) hosted in Canada, and the site itself runs on Vercel. Both are processors acting on our instructions. Connections use encryption in transit, and passwords are stored only as bcrypt hashes, never in readable form.

Nobody, other than the hosting and database providers above that are needed to run the service. We do not sell personal information, we run no advertising, and we do not send your data to analytics companies. If you sign in with Google, Google tells us who you are; we do not send Google anything about your health, food or training.

• See and change it: everything you entered can be viewed and edited in the app.
• Delete it: deleting your account removes your personal data from our database. Ask us any time using the address below.
• Emails: notification preferences are in Settings.
• Access or a copy: write to us and we will help.

We keep your information while your account exists. When an account is deleted, its personal data is removed.

The service is for adults aged 18 and over. We do not knowingly collect information from anyone under 18.

If this policy changes, we will update this page and the date above. Questions, corrections or a deletion request: 11nithin@gmail.com.