Privacy Policy

1. Who we are

Registered company name — to be confirmed
Registered address — to be confirmed
Contact: support@retainmuscle.app

2. What we collect

Information you give us

• Name and email — to create your account and contact you about it.
• Age, biological sex, height — inputs to the equation that estimates your calorie floor.
• Current and goal weight — your protein target is calculated from your goal weight.
• Activity level and strength-training experience — adjusts your protein target.
• Whether you take a GLP-1, which one, and your dose — sensitive health data.
• Nausea frequency and daily stomach check-ins — sensitive health data, used for gentle-food guidance.
• Other medications you choose to enter — optional context only. We do no drug-interaction checking. Sensitive health data.
• Meals you log and progress photos you take.
• How you heard about us — including clinic referral codes.

Collected automatically

Device and browser type, rough region from your IP address, and which pages you viewed. The app also records in-app events such as “completed intake” or “logged a meal”. These carry the action only — never your medication, dose, nausea reports, weight, or what was in your food log.

Today those events go nowhere. No analytics provider is connected — the code that would send them does nothing at all. If we connect one, we will name it in section 4 before it is switched on.

Payment information

Handled by our payment processor. We never see or store your full card number. We receive a customer identifier, whether your subscription is active, and the last four digits.

3. The rules we hold ourselves to

These are architectural commitments — built into the software, not just promised here.

• We do not sell your personal information — including under the very broad definitions state privacy laws use.
• Health data never goes to advertising platforms. Your medication, dose, nausea reports and weight are never sent to any ad network, and are never used to build custom or lookalike audiences.
• No advertising trackers on sensitive screens. No advertising pixel runs on onboarding, intake, or account pages.
• Marketing consent is separate. Agreeing to our Terms subscribes you to nothing. The marketing checkbox is unticked by default.
• Our email platform gets your address and app behaviour — not your health data. We do not build marketing segments out of medication or dose.
• Row-level database security. Every health record is locked to your own account at the database level, not merely by app code.
• Progress photos are private. Stored in a non-public bucket, reachable only through short-lived links generated for you.

4. Who else processes your data

• Supabase — database, sign-in, and file storage. All account and health data, encrypted at rest.
• Stripe — payments. Your name, email, and card details, which go to Stripe directly and never touch our servers. No health data.
• Vercel — hosting. Technical request logs, including IP address.
• Klaviyo — opt-in email and SMS. Email address, first name, app behaviour. No health data.
• USDA FoodData Central and Open Food Facts — nutrition lookups. When you search for a food or scan a barcode, the search text or barcode goes to these databases to fetch protein and calorie figures. The request is made by our server, not your device, so they receive the food you looked up and nothing that identifies you — not your name, account, IP address, or anything else in your log.
• Analytics — none today. The analytics layer in the app is a stub that writes nothing and sends nothing anywhere. If we add a provider we will name it here first.

5. If a clinic referred you

If you came through a healthcare provider's referral link or code, we record that a referral happened so the partnership can be measured. We do not send your health data back to that clinic. Your provider does not get access to your account, food log, or weight because they referred you. If we ever build something that shares a summary with your care team, it will need your explicit, separate, revocable consent at that time.

6. How long we keep it

• Account and health data: while your account is active, then deleted within 30 days of a deletion request.
• Billing records: as long as tax and accounting law requires, typically seven years.
• Backups: deleted data survives in encrypted backups for up to 30 days before it is overwritten.

7. Your rights

Wherever you live, you can ask us to see, export, correct or delete your data, and to withdraw marketing consent at any time without it affecting your subscription.

Email support@retainmuscle.app. We aim to respond within 30 days. We will not charge you, cut down your service, or treat you differently for asking.

Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have additional rights, including the right to appeal if we refuse a request.

Consumer health data (Washington and Nevada)

Washington State's My Health My Data Act, and the similar Nevada law, give you specific rights over consumer health data — which here means your medication, dose, nausea reports, weight, and anything else about your health you put into the app. You can ask us to confirm what health data we hold, tell you who we shared it with, withdraw your consent to us collecting or sharing it, and delete it. Email support@retainmuscle.app and say what you want; we will not ask you to justify it.

Standalone consumer health data policy — to be confirmed Washington law asks us to publish these rights as their own separate document rather than as a section of this one. That document is being prepared. Until it is up, the rights above are the full and accurate statement of what you can ask for, and the email address above is the way to ask.

8. Children

RetainMuscle is for adults. It is not aimed at anyone under 18 and we do not knowingly collect their data. If we find out we have, we delete it.

9. Security

Data is encrypted in transit and at rest, and access is restricted per account at the database level. No system is perfectly secure and we won't pretend otherwise — if a breach affects your data we will tell you and the relevant regulators, as the law requires.

10. Where we operate

RetainMuscle is run from the United States, your data is processed there, and it is offered to United States residents only. We do not target, market to, or knowingly accept signups from the EU, the UK, or anywhere else.

11. Not medical care

RetainMuscle is a nutrition tracking tool. It is not a medical device, it does not diagnose or treat anything, and it does not give medical advice. It does no drug-interaction checking. Never change your medication, dose, or treatment based on anything in the app. Talk to your prescriber. The full statement is in Terms of Service section 1.