Privacy policy
We respect the privacy of your data — especially health data, which receives heightened protection. Below you will find, in accordance with Regulation (EU) 2016/679 (GDPR), what data we collect, how we use it and what rights you have.
What data we collect
- Account data: your email address.
- Health data you enter: profile (age, sex, weight, blood pressure, declared medical conditions), daily journal, weight history, blood work, progress photos, generated programs.
How we use it
Solely to provide the features of the service: generating your personalized program, tracking, syncing across devices and — if you work with a partner coach or nutritionist — allowing them to follow your progress. We do not sell or rent your data to anyone.
Where it is stored
On secure Supabase servers (European Union), protected by strict access rules (Row Level Security) — every account sees only its own data. To generate your personalized program, profile data is sent to our artificial intelligence provider (Anthropic) strictly for the purpose of producing the recommendation.
Who can see your data
Only you — and, if you signed up with the code of a partner coach or nutritionist, they can see your program and progress in order to guide you. A coach cannot change your identity data.
Your rights (GDPR)
- Access to your data, rectification and erasure (the "right to be forgotten").
- Portability — you can export your data.
- Withdrawal of consent at any time.
- Lodging a complaint with the supervisory authority (in Romania, ANSPDCP).
You can delete your account and all associated data at any time, directly from the app. See the detailed steps in Deleting your account and data.
Contact
For any request regarding your data: contact@protokol.help.
Informational document — to be reviewed by a lawyer (DPO) before commercial launch.