Privacy

What we hold, what we do not, and why. Effective [the date these take effect].

This document is a draft and is not in effect.

Still to be supplied: the operating entity's registered name; the state of incorporation; a monitored contact address; a postal address for arbitration opt-out notices; the date these take effect. It has also not been reviewed by a lawyer.

The short version

We hold your email address, your first name if you gave one, and what you do in the app: check-ins, streak, credits, the programs you start and finish, the coupons you unlock and the shop items you open. Our customer relationship system, GoHighLevel, holds the same details so that we can send you email, and text messages if you ask for them.

We do not hold your health answers. They stay on your phone. There is no advertising or analytics software in our apps or on our site. We do not sell your personal information, and we do not share it for advertising.

You can delete your account from inside the app. That deletes your records with us and your contact in GoHighLevel. It is a deletion, not a deactivation.

Your health answers stay on your phone

When you first set up the app it asks a few questions about things you may have been advised to avoid. Your answers never leave the handset, and they are never sent anywhere. They are turned into plain filters on the device, such as “no extended fast”, and the filtering happens there against content the app has already downloaded. The filters stay on the device too.

The filters are deliberately built so they cannot be read backwards into a reason. A filter such as “no high potassium” could come from a kidney condition, a medication, or a doctor's advice, and we designed it that way so that even the filter does not describe you.

Two things do reach us: that you completed the questions, and which version of the disclaimer you accepted. Neither carries any health information. We keep them because they are how we show what the product did to keep people safe.

Because we hold nothing, your answers do not move to a new phone and do not survive reinstalling the app. You answer again, which takes a moment. That is a deliberate trade.

What we hold

What we never hold

No request the app makes is shaped by your filters either. It never asks us for content filtered by them, because that would tell us the filter just as surely as storing it would. The whole catalogue is already on your device, so it never needs to.

Why we hold it

To sign you in, to keep your streak and credits honest across your devices, to give you what you have paid for, to send the notifications you allowed, to answer your support messages, and to keep the service secure and working.

To send you email about your account, your programs and our offers, and text messages if you signed up for them. Your activity in the app decides which email you get. For example, a member who opens a juicer in the shop may get an email about juicers.

We use our own records, and reports from the companies below, to understand how the product is used in aggregate. We do not use any of it for advertising on other sites or apps.

Who else touches it

Only companies that run part of the service for us, under contract, and only for that purpose:

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There are no advertising networks and no data brokers in that list, and adding one would require changing this notice first.

We will disclose data if the law requires it, and we would tell you unless we were forbidden from doing so. If the business is sold, your data may move with it, subject to this notice.

Email and text messages

As a member you get email about your account and your programs, and marketing email with tips, offers and products. You can unsubscribe from any email with the link in it. The email that signs you in or resets your password is not affected, because you need it to use the app.

We send text messages only to people who sign up for them separately, on our text sign-up form, by ticking a consent box. There is one box for marketing texts and one for other texts, and both start unticked. Joining the app does not sign you up. Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop them. Reply HELP for help, or email [a monitored contact address].

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

No advertising or analytics software

Our apps contain no third-party advertising or analytics software, and our site loads nothing from another company: no hosted fonts, no tags, no widgets, no pixels. The apps are checked for advertising and analytics software before every release, and the site's content pages are checked for requests to other companies after every release.

No app activity is sent to any advertising platform. We do not give your email address to an advertising platform, and our member lists are not used to target advertising.

Because there is no cross-app tracking, the app does not ask for permission to track you, and it never will while this remains true.

Notifications

The app asks before it sends notifications. If you allow them, it can set a daily check-in reminder on your phone. Your phone schedules that reminder itself, and nothing about it is sent to us.

Other notifications come from our server. To send them we hold your device push token, and each message passes through Expo's push service and then Apple's or Google's systems on its way to you. A notification may name a program or a product. Some are started by GoHighLevel, which tells our server who to notify; it never holds your device token. Turn notifications off in your device settings at any time.

If you turn on offers in the app, we send you marketing notifications and keep a record that you agreed, with the date and the wording you saw. You can turn offers off at any time in the app, under You, Notifications. We keep the record of when you agreed and when you stopped.

How long we keep it, and how to delete it

We keep your data while your account is open. You can delete your account from inside the app. That removes your records from our database: your profile, check-ins, credit history, program progress, unlocked coupons, purchases, shop activity, grocery list and device push token. It also deletes your sign-in account, and your contact in GoHighLevel, including your mobile number and text consent if you gave them.

Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in the store first, as the terms of use describe. A membership bought on the web is set to end when the period you have paid for ends.

GoHighLevel can restore a deleted contact for up to 60 days. Our database backups are kept for up to 35 days, after which deleted data is gone from them too. Our service logs record the IP address and the path of each request, and are kept for up to 90 days.

When you delete your account, we also ask RevenueCat to delete its record of you. Apple, Google and Stripe keep their own records of your payments under their own policies, and deleting your account does not delete those. We may keep a minimal record of a transaction where tax or accounting law requires it, and that record contains no health information.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, and ask for it in a portable form. Email [a monitored contact address] and we will answer within 30 days. We will not treat you differently for asking.

If you are in California: we collect the categories listed above, for the purposes described above, and we disclose them only to the service providers named above. We have not sold or shared personal information for cross-context behavioural advertising, and we have no plans to, which is why there is no “Do Not Sell or Share” link on our site. Adding one would mean we had started, and we would tell you first.

If you are in the United Kingdom or the European Union, you also have the right to object to processing, including marketing at any time, and to complain to your local data protection authority.

Under 18

The service is for adults, and you must be 18 or older to hold an account. We do not knowingly collect anything from anyone under 18. If you believe a child has given us information, write to [a monitored contact address] and we will delete it.

Security

Everything travels encrypted. Your sign-in is handled by our identity provider's own pages, so the app never sees your password, and the token that keeps you signed in is held in your device's secure store and marked so that it does not travel to a new handset in a backup. Access to member data inside our systems is limited to the parts of the service that need it.

No system is perfectly secure, and we do not claim ours is.

Where your data is

Our own systems are in the United States, in Amazon Web Services' Northern Virginia region. The companies named above process it under their own security and transfer terms. If you use the service from elsewhere, your data is transferred to the United States and handled under this notice.

Not medical advice

Nothing here or in the app is medical advice. If you are unsure whether something suits you, ask a clinician. The terms of use set this out in full.

Changes, and how to reach us

If we change this notice we will change the date at the top, and we will tell you before a material change takes effect. A change that widened what we collect or who we share it with would be told to you, not quietly published.

[the operating entity's registered name], [a postal address for arbitration opt-out notices]. Email [a monitored contact address].