Privacy & Data Deletion

• What we collect: Health information you enter or import (blood tests, weight, blood pressure, protein intake, wearable data, daily check-ins), plus your name and email for account access.
• How we use it: To display trends and summaries for your personal wellness tracking. We do not sell your data or use it for advertising.
• Data security: All records use row-level security — only you and authorised admins can access your data. No health data is cached on your device.
• Household sharing: Opt-in only. Your private health records are never shared automatically.

If you still have the app installed:

1. Open the app and sign in
2. Go to Settings → Privacy & Legal → Delete Account
3. Click "Export my data first" to download a copy of your records
4. Click "Request account deletion"
5. Type DELETE in the confirmation box and submit

If you no longer have access to the app:

You can request deletion through this public privacy/deletion page by contacting support using the details below. Please include the email address you used to register.

When your deletion request is processed, all personal health data associated with your account is permanently removed, including:

• Health profiles and user profiles
• Daily check-ins (weight, blood pressure, mood, sleep, Mounjaro side effects)
• Blood test results and import records
• Wearable health records (Fitbit, Google Fit, Apple Health)
• Canonical daily health summaries
• Protein logs, meal entries, and personal food library
• Diet plans and nutrition context
• ECG readings
• Milestones, journey insights, weekly reviews
• Health goals, activity context
• Household membership, shared meals, nudges, wins, sharing permissions
• Partner/expert profiles and review notes
• App feedback submissions

This action is irreversible.

The following shared reference data is not affected by account deletion, as it is not personal data:

• Blood marker knowledge library (clinical reference ranges and explanations)
• Diet templates (expert-reviewed nutrition templates)
• Blood marker library and marker knowledge base
• General health FAQ questions
• Shared protein food database

• Your request is submitted immediately and enters a pending state.
• An administrator reviews and processes the request.
• Personal health data is deleted when the request is processed.
• Authentication account removal is completed manually by an administrator where platform limitations require this.
• Certain data may be retained only where legally, operationally, or security required.
• You can cancel a pending request at any time before it is processed.

Once you submit a request, it moves through the following statuses:

• Pending — Your request has been submitted and is awaiting admin review.
• Cancelled — You (or an admin) cancelled the request before it was processed. Your data is unaffected.
• Processed — An admin has processed the request and your personal health data has been permanently deleted.
• Completed / auth removal pending — Your data has been deleted and your authentication account removal is pending manual completion by an administrator.

You can view your current request status at any time in Settings → Privacy & Legal → Delete Account.