Privacy Policy

Who we are and how to reach us

The company responsible for your data (the controller) is WONDERFUL TOOLS LLC, a limited liability company organised under the laws of the State of Wyoming, USA. Our address is 30 N Gould St Ste N, Sheridan, WY 82801, United States. Our phone number is +1 307-227-4983.

For anything about your personal data, email privacy@mynutrigym.com or use the contact form at mynutrigym.com/support with the topic "Privacy & your data". For everything else, email support@mynutrigym.com. We have not appointed a data protection officer; the privacy inbox is read by a person who handles every request.

The short version

We never sell your Health Data. In the US, free-plan ads may be personalized unless you opt out; in Washington, they appear only if you allow them. You can change your choice anytime in You › Privacy & data › Your privacy choices.

• Health Data (your weight, measurements, meals, workouts and progress photos) is stored on your phone and, only with your explicit consent, in your account in the EU. It is never used for advertising, never sold, and never sent to advertising, analytics or crash-reporting tools.
• The website loads Google Analytics only after you accept it. There are no ads on the website.
• The waitlist uses your email address to send you the emails you asked for, until you unsubscribe.
• No AI training. We do not collect, use or sell personal data to train large language models or any other AI model.
• Your rights. You can see, correct, export and delete your data in the app or by emailing privacy@mynutrigym.com. We answer within 30 days (45 days where US law allows).

What this policy covers, and the words it uses

This policy covers three things: this website at mynutrigym.com, the waitlist you can join on it, and the MyNutriGym app for iPhone and Android. Each has its own section below, and the sections on ads, transfers, retention and your rights apply to all three.

• Health Data is what the app records about your body and habits: weight, body measurements, meals and their nutrients, workouts, progress photos, and anything exchanged with Apple Health or Health Connect.
• User means a person with a MyNutriGym app account, whether or not they pay.
• Waitlister means a person who joined the waitlist and confirmed their email address.
• Waitlist Offer means the 3 months of Premium at no cost that every Waitlister gets when the app launches.

If you live in Washington or Nevada, our separate Consumer Health Data Privacy Policy lists exactly what those states' laws ask for. Our Cookie Policy lists everything the website stores in your browser.

The website

Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, United States. To deliver the pages, it processes your IP address and request data (the page you asked for, your browser type, the time of the request), and the form data that passes through our server functions. It acts as our processor under its data processing addendum, and it lists its own subprocessors here. With the settings we use, it sets no cookie on your browser.

Analytics, only with your consent

We use Google Analytics 4 to count visits and see which pages and posts bring people to the site. Nothing from Google loads before you accept it in the cookie banner, where Reject and Accept are equally easy. If you accept, Google receives your IP address, your browser and device information, the pages you visit and the source you came from, and sets cookies described in the Cookie Policy. Google signals and ad personalization are off, we have linked no advertising account, and analytics data is kept for 14 months. When you join the waitlist, we record one "sign-up" event with no personal data in it, not even your email address. You can change your choice at any time with the "Cookie settings" link in the footer.

This website treats a Global Privacy Control signal from your browser as an opt-out: Google Analytics doesn't load.

The contact form

The contact form on the support page asks for your name, your email address, a topic and your message. The message is sent through our own server function and Resend, our email provider, to support@mynutrigym.com, or to privacy@mynutrigym.com when the topic is "Privacy & your data" or "Delete your account". We use it only to answer you. We keep messages for 24 months, and longer if a request is still open.

What the website stores in your browser

The website stores only your cookie choice, your theme, your language and a flag that says you joined the waitlist. It never stores your email address. The Cookie Policy lists each key, its purpose and how long it lasts. The website shows no ads and loads no advertising or social-media pixels.

The waitlist

What we collect and why

• Your email address, to send you the confirmation email and then the emails about MyNutriGym: a welcome, at most one build update a month, a reminder 7 days before launch, the launch-day email with the store links and your Waitlist Offer, and news after launch.
• Your first name and whether you use an iPhone or Android, if you choose to give them, so the emails address you by name and point to the right store.
• The language you signed up in, so every email comes in that language.
• The source of your visit: the UTM source, medium, campaign, term and content tags on the link you arrived from, to learn which posts and accounts bring sign-ups.
• The time you signed up and the time you confirmed, as proof of your consent.

We send nothing before you click the confirmation link. If you never confirm, your sign-up is deleted after 30 days and you get no further email. Every email carries a one-click unsubscribe link, and we stop at once when you use it. Health Data is never used in these emails.

Legal basis

The emails rest on your consent, which you give when you sign up and confirm, and which you withdraw by unsubscribing. Keeping the source of your visit rests on our legitimate interest in knowing which posts and accounts bring sign-ups; it changes nothing in the emails you get, and you can ask us to remove it. After you unsubscribe, we keep only your email address, your language, the version of the consent you gave and its dates, as proof of your consent and so that we don't email you again by mistake. This rests on our legitimate interest, and we delete them 3 years after you unsubscribe.

Who processes it

Sign-ups are stored in our own database at Supabase, in the EU, the same provider that hosts the app's accounts. The emails are sent by Resend, in the United States (see Where your data goes). The sender address and the unsubscribe link in every email are ours.

Your Waitlist Offer after launch

If, after launch, your MyNutriGym app account uses the same email address as your waitlist sign-up, we match the two inside our own database. We then read that account's subscription status from RevenueCat, the service that manages subscriptions for the app, to send you the Waitlist Offer reminder email 7 days before the free period ends. Nothing new goes to RevenueCat: no email address and no waitlist data; it already holds the account's subscription under the app account's id. The recorded offer (the store and the end date) is kept with your waitlist entry, and the checks stop when you unsubscribe. This rests on the same consent as the other emails, which covers emails about your Waitlist Offer.

Because MyNutriGym is a nutrition and training app, Washington's and Nevada's health-data laws may treat a waitlist sign-up as consumer health data. Our Consumer Health Data Privacy Policy therefore lists the waitlist too.

The app: your account and sign-in

You can use the app as a guest, with everything stored on your phone only. An account lets you back up and sync your data. To create one you give an email address and choose a sign-in method:

• Email: we store your email address and a hash of your password. A 6-digit code is emailed to you to confirm a new account, and a link when you reset your password. These account emails are sent by Postmark, in the United States, from no-reply@mynutrigym.com.
• Sign in with Apple: Apple sends us your name, if you share it, and your email address or an Apple relay address that forwards to you. Apple is an independent controller for the sign-in itself, under Apple's privacy policy.
• Google sign-in: Google sends us your email address and basic profile. Google is an independent controller for the sign-in itself, under Google's privacy policy.

Accounts, sync and storage run on Supabase, in the EU (Ireland). Your profile holds the details you enter during onboarding: first name (and last name, if you add it), date of birth (to check that you are 18 or over and to compute your targets), sex, height, weight, goal, activity level and training preferences. Guests keep all of this on the phone; nothing leaves it until you create an account and give the Health Data consent described below.

The app can lock itself with Face ID, Touch ID or your phone's own lock. That check happens on your phone; we never receive biometric data.

The app: your Health Data

Health Data is special-category data under the GDPR and consumer health data under several US state laws. We process it only with your explicit consent, which the app asks for on its own screen, separately from the Terms of Use and from any other choice.

What it is

• your weight and body measurements, and the notes you add;
• your meals, hydration, custom foods, recipes and nutrition targets, with their calories, macronutrients and micronutrients;
• your workouts, sets, programs, training preferences and readiness check-ins (sleep quality and sore areas);
• your progress photos, with the pose, date and weight you record with them;
• anything you choose to exchange with Apple Health or Health Connect.

Where it lives

Health Data is stored on your phone first. With your consent, it is also stored in your account at Supabase, in the EU (Ireland), encrypted at rest and in transit, so that you can back it up and sync it between your devices. Progress photos go to private storage that only your account can read, through time-limited links. They are never analysed, never shared and never shown to anyone else.

If you turn on Apple Health or Health Connect in the app, the app exchanges the data you choose with that service, on your phone, under Apple's or Google's rules for that data. We use data from Apple Health or Health Connect only to show your progress and compute your targets. We never use it for advertising, never sell it and never pass it to anyone else.

What we never do with it

Health Data, progress photos included, is never used for advertising, never sold, and never sent to advertising, analytics or crash-reporting tools. It is never used to train AI models.

No third party collects your health data over time and across other websites or apps through MyNutriGym. When ads are personalized, Google collects your advertising ID and ad interactions across apps, never your health values. The app sends no custom targeting keys (such as a goal, a weight band or a diet) to any advertising service.

Withdrawing your consent

Withdrawing consent is as easy as giving it. In the app, go to You › Account › Withdraw consent & delete cloud data; the app offers to export a full copy of your data first. Withdrawing deletes your account: the app clears your data from that phone at once and signs you out, and the account and everything in it are permanently deleted 30 days later. Until then, signing back in restores everything. You can keep using the app as a guest, with your data on that phone only. Withdrawing doesn't affect what we did while your consent stood.

The app: the services it uses

The app uses these services and no other. Each receives only what its column says. None of them receives your Health Data.

Push notifications (meal and workout reminders, the rest timer, the trial-ending reminder) are scheduled on your phone; no notification service receives your data. We will update this policy before adding any other service.

App usage analytics

To understand how the app is used, it can send a short list of named events to PostHog, hosted in the EU: for example that onboarding was completed, a sync finished or the paywall was viewed. The events carry an anonymous id, your device type and the app version. They never carry health values, meal names, weights or your account id; the app refuses to send any field that looks like one.

• In the EEA, the UK and Switzerland, analytics runs only if you allow it in Google's consent message, which the app shows at first launch and again from You › Privacy & data › Your privacy choices.
• In Washington (the Ads section says who that covers), analytics runs only if you allow "App usage analytics" on the app's privacy screen, and stops when you withdraw that choice in You › Privacy & data › Your privacy choices.
• Elsewhere, including the rest of the US, analytics rests on our legitimate interest in improving the app, and you can turn it off in the same place.

Crash reports

When the app crashes, stops responding or meets an unexpected error, it sends a technical report to Sentry, so that we can find the fault and fix it. Sentry stores the reports in the EU (Frankfurt, Germany) and acts as our processor under its data processing addendum.

• What a report holds: the error and the place in the app's code where it happened, the app version, your phone's model, operating system, language and time zone, technical details such as memory, storage, battery, connection and the permissions you gave the app, and the app's last steps before the error: the screens you opened, your taps, the app going to the background, changes of network, and the app's network requests, without what they carried.
• What it never holds: your Health Data, your account id, your email address, a picture of your screen or your IP address. The app is built so that none of these goes into a report, and Sentry doesn't store your IP address. Sentry may work out your approximate location (country, region and city) from your connection and keep it with the report.
• Random ids: Sentry's code creates a random install id on your phone, so that we can count how many people a crash affects; reinstalling the app replaces it. On iPhone, a report also carries a code made from the identifier Apple gives our apps on your phone. Neither is linked to your account, and deleting your account doesn't change them.
• Sessions: the app also tells Sentry when you open it and whether that session ended in a crash, under the same install id, so that we can measure how often the app crashes before we release a new version.

Crash reports rest on our legitimate interest in keeping the app working. They're on until you turn them off in You › Privacy & data › Crash reports. From then on, the app sends no new report; one already waiting to be sent may still go out. The choice belongs to the phone, not to your account: it applies to that phone only, and it stays when you sign out, switch accounts or delete your account.

Sentry keeps each report for 90 days at most, and deletes its backups 90 days after making them. It keeps sessions for as long as its own retention rules set.

Ads in the free plan

The free plan shows ads through Google AdMob; Premium shows none. An ad request tells Google your IP address, your device and app information, and, where you allow it, your advertising ID and your interactions with ads. Google and the advertising companies that bid through it decide which ad to show. We send no health values and no custom targeting keys with any ad request, and we never run ads next to your progress photos or your data.

• In the EEA, the UK and Switzerland, the app shows Google's consent message before any ad request. Personalized ads need your consent there; without it, ads are chosen without a profile. You can change your choice anytime in You › Privacy & data › Your privacy choices.
• On iPhone, Apple's App Tracking Transparency prompt asks whether the app may track you. If you choose "Ask App Not to Track", Google's ad tools get no advertising identifier, and ads are chosen without one. Your privacy choices explains how to change that choice later.
• In the US, free-plan ads may be personalized unless you opt out in You › Privacy & data › Your privacy choices, or without the app on Your privacy choices. If you opt out, Google shows only non-personalized ads, chosen from the app and your approximate (city-level) location, and acts as our service provider under the US state privacy laws its terms name.
• In Washington, ads appear only after you allow them on the app's privacy screen. If you don't, the app makes no ad request at all, and shows offers for MyNutriGym Premium in their place. They're built into the app: nothing goes to Google or any other advertising company. The app treats you as in Washington when you're there, when you tell us you live there, or when it can't tell which US state you're in.
• How the app knows: we use your IP address, and your answer if you tell us you live in Washington, to work out whether Washington's law applies, only to decide which privacy screen to show. We don't keep the IP address, and your answer stays on your phone. The check runs on Cloudflare, Inc., which also hosts this website.

We never sell your Health Data. In the US, free-plan ads may be personalized unless you opt out; in Washington, they appear only if you allow them. You can change your choice anytime in You › Privacy & data › Your privacy choices.

Google is an independent controller for the ads it serves, under Google's privacy policy and its advertising terms. Google's "publisher first-party ID" is turned off in the app.

Targeted advertising and sale (US)

In the free app, unless you opt out (in Washington, only if you allow ads), we let Google AdMob and the advertising companies that bid through it collect your advertising ID, IP address, device and app information and your interactions with ads, to show you ads based on your activity across apps. Under Connecticut and other US state laws this is targeted advertising and may be a sale of personal data. Categories sold: advertising identifiers, IP address, device and app information, ad interaction data. Categories of third parties: advertising networks (Google and the advertising companies that bid through it). The third parties we sell it to, or may sell it to, are Google LLC (AdMob) and the advertising companies Google admits to bid in its ad auctions. We never send them your health values. Opt out at any time: Your privacy choices.

• We never sell Health Data, to anyone, in any state.
• Opting out turns on Google's restricted data processing: Google then shows only non-personalized ads and acts as our service provider under the US state privacy laws its terms name. In Washington, it means no ads at all. It takes effect on every device signed in to your account. You can also opt out without the app by emailing privacy@mynutrigym.com and giving your account's email address; we ask for no proof, and an authorised agent may do it for you. We apply it within 45 days, and in practice at once.
• You can ask for the list of the third parties your personal data was sold to, in the year before your request, as Connecticut law provides.
• Minors. We don't show targeted ads to, or sell the data of, anyone we know is under 18.
• On the website, there are no ads and nothing is sold. This website treats a Global Privacy Control signal from your browser as an opt-out: Google Analytics doesn't load.

Why we use your data, and on what legal basis

In the EEA, the UK, Switzerland and other places whose laws ask for it, each use of your data needs a legal basis. These are ours.

You don't have to give us anything. Without an email address there is no account, but you can use the app as a guest. Without the Health Data consent, your data stays on your phone and isn't backed up. We make no decisions about you by automated means that have legal or similarly significant effects.

Subscriptions and purchases

Premium is sold through the App Store and Google Play, which bill you and hold your payment details. We never see your card number. Through RevenueCat we receive what the store reports about your subscription: the product, its status, its dates, your store country and an anonymised transaction id, tied to your account by an opaque id. We use it to unlock Premium, to apply the Waitlist Offer and to keep the records tax and consumer law require.

We also use your account's email address for the subscription emails the law requires: the confirmation of your subscription, the notices before a renewal, the reminder 7 days before the free period of your Waitlist Offer ends, and an annual reminder of your subscription. Records of your subscription consent are kept for 3 years, or for 1 year after the subscription ends, whichever is longer, even after your account is deleted. The Subscription terms explain renewal, cancellation and refunds.

Where your data goes (international transfers)

We are based in the United States. Our service providers are based in the United States, Singapore and the EU. Where a provider isn't certified under the EU–US Data Privacy Framework (and its UK and Swiss extensions), we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum and Swiss adaptations, as included in that provider's data processing terms. If the Framework stops applying, we rely on those clauses for Google too. To get a copy of these safeguards, email privacy@mynutrigym.com.

• Certified under the Data Privacy Framework (EU, UK and Swiss): Google LLC (Google Analytics, and AdMob and Google sign-in for users in the UK), PostHog Inc., Functional Software, Inc. (Sentry) and Postmark. Cloudflare, Inc. is certified too, and Resend for the EU and the UK; both had their re-certification under review at the time of writing, and both have the Standard Contractual Clauses in their terms as a fallback, which also cover transfers from Switzerland to Resend.
• Standard Contractual Clauses: Supabase (Supabase Pte. Ltd., Singapore; your data is hosted in the EU) and RevenueCat, Inc. (United States), through the clauses in their data processing terms.
• Apple (Sign in with Apple) acts as an independent controller and relies on the Standard Contractual Clauses in its own terms.
• Google Ireland Limited, in the EU, is the controller for AdMob and Google sign-in for users in the EEA and Switzerland, so no transfer tool is needed there.

Health Data is hosted in the EU and leaves it only when you sync it to your own phone. Supabase's company is in Singapore and its support team in the United States; their access for support and operations is covered by the clauses above.

How long we keep your data

The Delete account page explains the deletion steps, in the app and by email, and what is kept.

Your rights

Wherever you live, you can ask us to tell you what personal data we hold about you, to correct it, to delete it, to give you a copy, to stop using it for a purpose you object to, and to restrict what we do with it while we check a request. You can withdraw any consent at any time, with effect for the future. None of this costs anything, and we never treat you differently for using a right.

How to exercise each right

• See and correct your data: in the app, under You. Your profile, logs, meals, workouts and photos are all editable there.
• Export your data: in the app, under You › Privacy & data, the export creates a copy of your data on your phone, photos included.
• Delete your account: in the app, You › Account › Delete account, or by email as the Delete account page explains.
• Withdraw the Health Data consent: in the app, You › Account › Withdraw consent & delete cloud data.
• Opt out of targeted advertising, sale or analytics: in the app, You › Privacy & data › Your privacy choices, or without the app on Your privacy choices. Turn off crash reports: in the app, You › Privacy & data › Crash reports.
• Unsubscribe from the waitlist: the link in any of our emails.
• Anything else, including access, objection, restriction and the list of third parties your data was shared with or sold to: email privacy@mynutrigym.com from the email address of your account, or use the contact form at mynutrigym.com/support with the topic "Privacy & your data". If you use Sign in with Apple with a hidden email address, write from any address and tell us the relay address or the name on your account.

We answer within 30 days, or within 45 days where US law allows; where that law allows, we may extend once by 45 days when a request is complex, and we tell you if we do. To protect your data, we act on a request only once we are sure it comes from you, which is why we ask that it comes from your account's email address. An authorised agent may make a request for you where the law provides for it.

How to appeal

If you disagree with our answer, you can appeal: reply to our answer, or write to privacy@mynutrigym.com with the subject "Appeal". We answer appeals within 60 days and explain our decision. If we deny your appeal and you live in Connecticut, you can submit a complaint to the Connecticut Attorney General at dir.ct.gov/ag/complaint. Residents of other states can contact their state's Attorney General.

In the EEA, the UK and Switzerland

You have the rights of access, rectification, erasure, restriction, objection and data portability under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection, and the right to withdraw consent at any time. Where we rely on a legitimate interest, you can object on grounds relating to your situation, and we stop unless we have compelling grounds. You can also complain to your data protection authority (see Complaints).

In the United States

Depending on your state, you have the right to know what personal data we collect and how we use and share it, to access it, to correct it, to delete it, to get a copy, to opt out of targeted advertising, sale and profiling, to limit the use of sensitive data, to appeal, and not to be discriminated against for using these rights. Washington and Nevada residents can also ask for the list of third parties and affiliates their consumer health data was shared with, and ask that it be deleted from our systems, backups included. We never sell Health Data and we never process it without your consent. We don't share personal data with data brokers. Nevada residents can ask us not to sell their personal information by writing to privacy@mynutrigym.com.

Complaints

If you're unhappy with how we handle your personal data, you can complain to us. Email privacy@mynutrigym.com, use the contact form at mynutrigym.com/support (topic "Privacy & your data"), or write to us at our postal address. We acknowledge every complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome. You can also complain to your data protection authority. In the UK, that is the Information Commission (ICO): ico.org.uk/make-a-complaint.

In the EU, you can complain to the authority of the country where you live or work, listed by the European Data Protection Board. In Switzerland, it is the Federal Data Protection and Information Commissioner.

How we protect your data

Your data travels encrypted between your phone and our systems, and is stored encrypted at rest. Every table in our database only answers to the account that owns the rows, progress photos sit in private storage opened only by time-limited links, and the keys that run our server jobs never reach the app. Your phone excludes the app's data from Android backups and from iCloud backups, and you can lock the app with Face ID, Touch ID or your phone's own lock. If a breach ever affects your data, we tell you and the authorities as the law requires, within the deadlines it sets.

Changes to this policy

The month and year of the last change are shown at the top of this page. We update this policy when we add a service, a feature or a use of your data, and before that change takes effect. If a change matters to you, for example a new recipient of your data or a new purpose, we tell you in the app or by email before it applies, and we ask for your consent again where the law requires it.