Consumer Health Data Privacy Policy

Body measurements: height, bodyweight and its history, and, if you photograph a body-composition printout, the readings on it — body fat, skeletal muscle, segmental lean mass, visceral fat and basal metabolic rate.

Fitness activity: every session, exercise, set, weight, repetition count, rest interval and personal record you log.

Diet: every food entry, its calories and macronutrients, and your water intake.

Device health data, only if you turn it on: steps, active energy and bodyweight from Apple Health or Health Connect.

Inferences: your estimated energy expenditure, calorie and macro targets, progression suggestions, and what the coach says about your log. These are derived from the data above and are themselves health data.

Almost all of it comes from you, typed into the app.

Some of it comes from your phone's health store, and only after you grant that permission separately, per category. You can revoke it at any time in the operating system, and the app keeps working without it.

Some of it is calculated by us from the first two.

To run the app you are paying for: keep your log, carry loads forward, calculate targets, draw your charts, and answer questions about your own training.

We do not use health data for advertising, and we do not profile you for anyone else. There is no advertising in QuietGains and no advertising identifier is collected.

We have never sold consumer health data, we do not sell it now, and selling it would require your separate signed authorisation, which we have never asked for and do not intend to ask for.

Supabase hosts our database, file storage and sign-in, in the European Union. PowerSync runs the synchronisation between your devices and that database.

Apple and Google handle sign-in and payment. We never receive your payment details. RevenueCat tells our servers whether your subscription is active, and receives no training or health content.

OpenAI and Anthropic process the specific text or photograph you submit when you ask the coach a question, log a meal by photo or voice, or scan a body-composition sheet. They receive that item and the numbers needed to answer it, they are contractually barred from training models on it, and they do not receive your account identity.

Sentry receives crash reports and PostHog receives anonymous counts of which screens are used. Both are configured to carry no health content: no food names, no weights, no measurements, no message text.

Push notifications are delivered through Expo, Apple and Google, and carry only the short text you see on the lock screen.

Form videos in the exercise library are embedded from YouTube, Vimeo or TikTok. When you play one, that host sees your device's network address, as it would on any web page. Nothing about your log is sent with it.

These are service providers acting on our instructions. None of them is an advertising network, a data broker, or an affiliate of ours. QuietGains has no parent company, no subsidiaries and no affiliates.

No third party collects consumer health data through QuietGains over time or across other websites or online services. There is no advertising network, no analytics SDK that can see health content, and no tracking that follows you anywhere else. The processors above see only what they need for the request in front of them.

We ask for your agreement before collecting health data, on a screen that exists only for that, after you sign in and before you enter anything. Agreeing is a deliberate action, not a consequence of continuing.

Reading from Apple Health or Health Connect is a separate permission, asked separately, and writing back to them is separate again.

You can withdraw consent at any time in Settings. Withdrawing stops further collection and processing; it does not delete what is already stored, which is what the deletion right below is for.

Access: export your entire log as CSV or JSON from Settings, at any time, without asking us.

Confirmation: ask us whether we hold or have shared your health data, and with whom. The answer is this page, made specific to your account.

Deletion: delete your account from inside the app. That erases your health data from our systems and from every device of yours that reconnects, within 30 days. A device that is never opened again keeps its encrypted local copy until it is, because we cannot reach a phone that never comes online.

Withdrawal: revoke consent in Settings, or revoke the health permissions in your operating system.

We answer within 45 days and will say so if we need the extension the law allows.

If we decline a request, we will tell you why in writing. You can appeal by replying to that message, or by writing to the address below with the word appeal in the subject line. A different person reviews the appeal, and we answer within 45 days with the reasons.

If we deny the appeal, you may complain to your state's Attorney General.

Your log is kept for as long as your account is open, because keeping it is the point of the app.

A photographed body-composition sheet is deleted as soon as the readings are extracted from it. Crash and usage data is kept for 12 months. Deleted accounts are purged within 30 days.

hello@quietgains.app. Write to us for any request under this policy, including appeals.

If we change what we collect, why, or who processes it, we will update this page and tell you in the app before the change takes effect.