Privacy & your data

The short version

• Everything you write is private to your account. No other user can read it.
• Health, cycle, skincare and email content is treated as the most sensitive data in the app.
• We never sell data, and we don't use your content for advertising.
• You can export everything and delete your account at any time from Import & export.

For non-lawyer humans

Here is the plain-English version. We wrote the longer sections below because lawyers like detail, but this is what actually matters.

• Your account is yours. When you write a note, log a workout, or track your cycle, that data lives in your account and is kept separate from everyone else.
• We can't casually browse your stuff. The database is built so each row belongs to one user. There is no "see all journals" button for us.
• We only look if you ask us to. If something breaks and you need help, we might need to peek at the specific record causing the problem. Otherwise we don't read it.
• AI only sees what you send to AI. The assistant and coach are opt-in. If you never click them, your data never goes near an AI model. When you do use AI, Gemini only answers your question and does not keep or learn from your data.
• Google sign-in is just a login button. Google confirms who you are; it does not get your notes, health records or anything else you store here.
• No ads, no profiles, no selling. We charge subscriptions so we don't have to monetize your data. We don't build advertising profiles and we don't sell lists of users.
• You can leave with everything. Export your data or delete your account whenever you want. Deletion really deletes it.

Who can see what

• You. Every table is protected by row-level rules in the database keyed to your user id, so a request for someone else's row returns nothing — even if the app asked for it.
• Nobody else using the app. The only shared surface is the roadmap board, and it shows the title, text, status and vote total of a suggestion — never who wrote it or who voted.
• Us. Access to the production database is restricted to the operator of this app and used only to keep it running or when you ask for support. We don't browse your entries.
• Google sign-in. If you log in with Google, they only verify your identity and email address. Google does not receive or store your notes, health data, tasks or any other content you create in this app.
• Gemini AI. When you use the assistant, coach or email triage, your prompt is sent to Gemini through our AI gateway to generate a response. Gemini does not retain that data and does not use it to train its models.
• Uploaded scan files (DEXA, InBody, bloodwork) sit in a private bucket; links are short-lived and generated only for you.

What we store

• Account: email, display name, avatar, time zone, plan.
• Productivity: notes, tasks, lists, labels, calendar events, habits.
• Body & training: workouts, routines, body metrics, uploaded scans, food logs, nutrition targets.
• Wellbeing: daily check-ins, sleep, gratitude, cycle logs, skincare logs, medical records and health flags.
• Email: mailbox settings and the messages you sync. Mailbox passwords are encrypted (AES-256-GCM) with a key held server-side; they are never shown back to you or sent to the browser.
• Usage: AI credit counters and purchase records.

Special-category (health) data

Cycle, medical events, health flags, bloodwork and body composition are special-category data under GDPR Art. 9. We process them only on your explicit consent, given by choosing to enter them. Those modules are optional — you can hide them from your menu in Settings and never fill them in, and the rest of the app works fine without them.

AI processing

• AI features are opt-in and only run when you trigger them (assistant, coach, import mapping, email triage).
• Prompts are sent to the model provider through our AI gateway to generate your answer. Your data is not used to train those models.
• The assistant is given only the context relevant to what you asked (for example your health flags when it writes a training plan). You can avoid all AI processing by staying on Free or Plus.

Sub-processors

• Hosting, database, authentication and file storage — the platform this app is deployed on.
• AI model inference — via our AI gateway.
• Payments — a merchant of record handles checkout and invoices; we never see your card details.

Retention

Your data stays until you delete it. Deleting a record removes it immediately. Deleting your account removes the account and every row attached to it, including uploaded files, within 30 days at the latest (backups age out on that cycle). Billing records are kept as long as tax law requires.

Your rights

You can access, export, correct, delete, restrict or object to processing, and withdraw consent. Export and erasure are self-service in the app under Import & export; the rest you can request by email. You also have the right to complain to your local data-protection authority (in Czechia: Úřad pro ochranu osobních údajů).

Contact

Questions or a data request: reach the operator of this app by email from your account address. We answer within 30 days as required by GDPR.