Privacy Policy
v2026-06-21
This explains exactly what we collect, who else sees it, and how you delete it. No fine print: we do not sell your personal information, and your health information is never used for marketing.
What we collect
We collect only what it takes to coach you. This is the whole list:
- Account: your name, email, phone, and preferred language.
- Your body and goals: sex, age, height, weight, goal weight, body fat percentage (optional), activity level, and what you are working toward.
- Health and safety: injuries, conditions such as PCOS or thyroid issues, pregnancy or postpartum status, and the pre-exercise safety questionnaire.
- Nutrition: what you log, including the photos you take of your meals.
- Training: the workouts you complete and your progress through them.
- Progress: your weight over time, measurements, and any photos you upload.
- Community and messages: what you post, and what you write to your coach.
- Technical: IP address, device type, and basic usage data.
Your health information
Your health information gets the strictest handling of anything we hold. It is used for one thing: building and adjusting your plan, and keeping you safe while you train.
We never use it for advertising or marketing, we never send it to our marketing tools, and we never sell it. That separation is built into the system, not just promised.
What we use it for
- Calculating your calories and macros and generating your plan.
- Adapting workouts to your injuries, conditions, and available equipment.
- Estimating macros from the food photos you upload.
- Answering your messages with your actual progress in view.
- Billing your subscription and sending receipts.
- Telling you about your account and, if you opt in, about the program.
Who else sees your data
We do not sell your personal information. Not ever. We work with the providers below to run the app, and each one receives only what it needs to do its part.
| Who | What they receive | Why |
|---|---|---|
| Supabase | Your account, profile, health profile, logs, messages, and photos | Database, sign-in, and file storage. This is where your data lives. |
| Vercel | Requests to the app, including your IP address | Hosting and delivering the app. |
| Stripe | Name, email, and payment details | Taking payment. Card numbers go to Stripe directly; we never see or store them. |
| OpenRouter | Food photos and the text you send the coach | Routing those requests to the model that answers them. OpenRouter passes them to OpenAI, Google, or Anthropic depending on the feature. |
| OpenAI, Google, Anthropic | Food photos and coach messages, through OpenRouter | Reading a meal photo to estimate macros, and generating coaching replies. |
| Mux | Which videos you play and basic playback quality data | Delivering exercise videos. |
| Cloudflare | Your IP address on sign-up, and video delivery as a backup to Mux | Blocking bots on forms, and backup video hosting. |
| Resend | Your email address and the contents of emails we send you | Sending account email: sign-in links, receipts, and notifications. |
| GoHighLevel | Name, email, phone, language, and membership status | Coaching communication and marketing. Your health information is never sent here. |
| Twilio | Your phone number and the contents of texts we send you | Sending text messages, if you opt in. |
| Sentry | Technical error reports, which can include your account id | Finding and fixing crashes. |
| PostHog | How the app is used, such as which screens are opened | Understanding which features help and which do not. |
How long we keep it, and how you delete it
- You can delete your account inside the app, under Account, at any time. You do not need to email anyone.
- Deleting removes your profile, health profile, logs, photos, and messages, and cancels an active subscription.
- We keep payment records for as long as tax and accounting law requires, even after you delete.
- You can also download a copy of your data from Account before you delete it.
Your choices
- You can edit your health profile any time under You, Health profile.
- You can unsubscribe from marketing email without losing account email.
- You can withdraw consent by deleting your account.
- If you want to know what we hold about you, ask us from the Support page and we will tell you.
Age
Thick & Fit is not for children under 13, and we do not knowingly collect data from anyone under 13.
Changes
If we change how we handle your data we update this page and its version number. If the change is significant, we will tell you.
Contact: Reach us from the Support page
← Back to home