Privacy Policy

Account Data

When you create a GritLeanPulse account, we collect your name, email address, and password (stored as an encrypted hash). You may also optionally provide your date of birth and profile photo.

Health & Tracking Data

GritLeanPulse is a health tracking application. By using it, you voluntarily provide health-related data including: body weight and measurements, nutrition and food intake logs, physical activity and step counts, GLP-1 medication details (type, dose, schedule, injection sites), body composition measurements, mood and energy levels, water intake, lab results and bloodwork values, and any other information you choose to log. This data is used solely to provide the services you request within the application.

Usage Data

We collect standard technical information about how you use our application, including: device type and operating system, app version, session timestamps, features accessed, and crash logs. This information helps us improve the product and diagnose technical issues. It does not include the content of your health logs.

Workout Logs, Routines and Imports

The sets, reps, weights and notes you log for a workout, the routines and custom exercises you create, and workouts you log on an Apple Watch are saved to your own account and are visible only to you unless you choose to share them: with an organization (Section 6), or with a friend using Send to a friend. Sending a routine to a friend copies its name, exercises, sets, reps and rest times to a shared copy on our servers that is identified by a short code and kept for up to 90 days. Your weights are copied only if you choose to include them, and your notes are never copied. Anyone who has the code and is signed in to GritLeanPulse can view the shared copy and save their own editable copy; it does not include your name, profile or any other information about you. A strength workout logged on your Apple Watch is sent from the Watch to your iPhone and saved to your account the same way as a workout you log on the phone. If you import a spreadsheet (CSV) file of workouts or other logs from another app, the file is read on your device and its contents are saved to your account; the file itself is not uploaded or kept by us, and nothing from it goes to anyone else.

Email Addresses Organizations Give Us

A clinic, gym, trainer or nutritionist (an "organization") that works with GritLeanPulse can give us a list of email addresses, or an email domain such as its own company domain, to reserve seats or to decide who may join with its code. If it does, we store those addresses (in a standard lower-case form) for that organization. We use them only to match against the confirmed email address on an account when someone signs up or enters that organization's code, and the organization can remove them at any time. They are held until the organization removes them. If an organization asks to approve each person who enters its code, we send it your name and account email address with your request, and you can withdraw a request that is still waiting. See Section 6.

Communications

If you contact us for support or other inquiries, we retain the content of those communications to provide assistance and improve our service.

Service Delivery

Your data is used to operate and deliver the features of GritLeanPulse — including health tracking, AI meal planning, GLP-1 toolkit functionality, analytics, and coaching reports. We process your health data only to provide the services you have requested.

Product Improvement

Anonymized, aggregated usage data may be used to understand how the product is being used and to guide feature development. This data cannot be linked back to any individual user.

Communications

We may send you transactional emails related to your account (password resets, billing confirmations) and, with your consent, product updates and health tips. You can unsubscribe from non-transactional emails at any time.

Features Calculated From Your Own Logs

Some features work only from the numbers already in your account, using fixed rules in the app rather than AI: your Consistency Score, the Monthly Recap card, the suggested next weight after a workout, the "same as yesterday" food copy, and Coach check-ins and the alerts inbox. Coach check-ins are reminders the app works out on your device (for example a protein, water, movement or logging prompt); they are scheduled as local notifications on your phone, are limited to one a day and never during your quiet hours, and their lock-screen text never contains your weight, a medical condition, a medication or mental-health wording. None of these features sends your data to anyone new. If you tap "Talk to coach about this", the message is only filled in for you; it goes to the AI Coach (and so to Anthropic, see Section 5) only if you choose to send it. You can switch Coach check-ins off in the coach settings.

We Do Not Sell Your Data

GritLeanPulse does not sell, rent, license, or trade your personal information or health data to any third party for marketing, advertising, or any other commercial purpose. This is a core commitment of our company.

Infrastructure

Your data is stored on Supabase, a SOC 2 Type II compliant cloud database platform. All data is encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.2 or higher.

Row-Level Security

We implement row-level security (RLS) in our database, which means that database queries are automatically scoped to the authenticated user. Queries made with your own sign-in cannot return another user's data. Information reaches anyone else (a clinic, gym, trainer or nutritionist you join, or an AI assistant you connect) only through the sharing controls described in Sections 6 and 7, and only for what you have chosen to share.

Authentication

Account access is protected by industry-standard authentication. We support secure email/password authentication as well as OAuth providers (Apple, Google). Passwords are never stored in plain text.

Limitations

No method of data transmission or storage is 100% secure. While we use industry-standard practices to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Access

You have the right to access the personal data we hold about you. You can view all of your health data within the app at any time. To request a full account data export, go to Settings > Data & Privacy > Export My Data.

Deletion

You have the right to request deletion of your account and all associated data. To permanently delete your account, go to Settings > Account > Delete Account. This action is irreversible and will permanently remove all of your health data from our systems within 30 days. This includes the files stored for you (progress photos, body scan photos, photo attachments in journals and logs, your profile picture, photos and videos you posted to the community, and files an organization attached to a care plan for you) and everything tied to your account in a clinic, gym, trainer or nutritionist program: your messages, check-ins, intake forms, food-log comments, plans, questionnaire answers, suggestions, challenge entries and join requests. One record is kept: an organization's access log, which notes the date, the staff member's name, what they opened and your member number (not your health information), is kept so the organization can show who accessed a record. Information a clinic, gym, trainer or nutritionist has already received and saved or exported on its own systems, or that an AI assistant you connected has already read, is held by them and is not deleted by this; contact them or use that service's own controls.

Data Export

You can export your health data at any time in CSV format from within the app. You can also generate provider-ready reports to share with your care team (as text from the app, and as a weight and nutrition PDF from the web dashboard). Your data is yours, and you should always have access to it.

Correction

You can update or correct any information in your profile or health logs at any time within the app. If you need assistance correcting data you cannot access directly, contact us at support@gritleanpulse.com. One exception: once you send a check-in or intake form to a clinic, gym, trainer or nutritionist, you cannot edit or delete it yourself, so that the record they received is not changed afterwards. You can stop sharing at any time, and deleting your account removes it.

Service Providers

We use a limited number of trusted third-party services to operate GritLeanPulse, including: • Anthropic (Claude AI) — AI coaching, food scanning, body analysis, and health insights. When you use an AI feature, relevant health data from your profile and recent activity logs (nutrition, activity levels, GLP-1 medication details, and health goals — only what is contextually relevant) is transmitted to Anthropic's API over an encrypted HTTPS connection to generate personalized responses. This data is not used to train Anthropic's models and is not sold. We ask your permission before any AI data sharing and send nothing until you allow it; you can withdraw it at any time in Settings > AI features (see Section 5A for what is sent, how it is used, and the protections Anthropic commits to). See Anthropic's privacy practices: anthropic.com/privacy. Anthropic handles this data under its own terms: its commercial terms currently say it does not train its models on content customers send through its API, and its published practices currently say API inputs and outputs are automatically deleted from its systems within 30 days of receipt or generation, with exceptions (for example where the law requires longer retention or to enforce its usage policy). Those are Anthropic's terms and may change. • OpenAI (Whisper speech-to-text) — if you choose to send a voice message to the AI Coach, the audio recording you make is sent (via our backend) to OpenAI to be turned into text. Nothing is sent unless you have given permission the first time you use voice; you can withdraw that permission at any time in Settings > AI features and the app stops sending audio. As published today, OpenAI's API terms say data sent through its API is not used to train its models by default and may be kept for up to 30 days for abuse monitoring. See openai.com/policies/privacy-policy. • Hume AI (voice-tone analysis) — the same voice recording is sent to Hume AI to estimate the emotional tone of your voice (for example, stressed or calm) so the AI Coach can respond more supportively. Same permission and the same withdraw switch as above. As published today, Hume AI's API Data Usage Policy (hume.ai/api-data-usage-policy) says it does not use API customers' data to train its own models. See Hume AI's privacy policy at hume.ai. • Supabase — database and authentication (SOC 2 Type II compliant; supabase.com/legal/dpa) • RevenueCat — subscription management for mobile (App Store / Google Play) and web (via Stripe) • Stripe — payment processing for web subscriptions (via RevenueCat's web checkout; stripe.com/privacy) • Nutritionix — food and nutrition database API powering food search, restaurant menus, and natural language food and exercise logging. Food search queries are transmitted to Nutritionix servers; no personally identifiable information is included in these requests. • FatSecret — food database used through our server for food search; the food name you search for is sent, with no name or account details • Sentry — crash and error reports. When the app has an error, a report is sent to Sentry (sentry.io, United States) with the error, your device type and app version, a random account ID and the screens involved. Before sending, the app removes web-address query parts and console output and does not send your email or name. The connection's IP address may be visible to Sentry. We do not put your health entries in these reports on purpose • OpenStreetMap services (Overpass and Nominatim) and Google Places — when you use nearby restaurant search, the location you choose or your device location (after you allow it) is sent, through our server for Google Places, to find places near you; no name or account details are sent • U.S. National Library of Medicine (RxNav and Clinical Tables) and openFDA — when you search for a medication or condition name, or scan a medication barcode, the text you type or the code is sent to look it up; no name or account details are sent • USDA FoodData Central — publicly accessible federal food database used for the Diet-Friendly Foods browser; no personal data is transmitted • Open Food Facts — open-source food database used for barcode scanning fallback; no personal data is transmitted • EPA AirNow — when live air quality is switched on, the 5-digit ZIP code you type into the Air Quality screen is sent to our server, which asks the EPA AirNow service for the nearest monitoring area's reading; the ZIP is not stored by us for this purpose and AirNow never receives your name or account details. Results are shown unaltered, are preliminary and not fully quality-assured, and are credited to the U.S. EPA and its partner air quality agencies via AirNow (airnow.gov) • NASA POWER — if you turn on Weather Patterns in the Mood Tracker, your approximate location (rounded to about 7 miles) is sent from your device to NASA's POWER service (power.larc.nasa.gov) to look up daily air pressure; no name or account details are sent. On supported iPhones, your phone's barometer reading is also saved with a mood entry you log. Data credit: these data were obtained from the NASA Langley Research Center (LaRC) POWER Project, funded through the NASA Earth Science/Applied Science Program • Open-Meteo — the app only offers a link to open-meteo.com in your browser; GritLeanPulse does not send Open-Meteo any data from the app, and once you open the link you are on their site under their own terms • Open Beauty Facts — open cosmetics database (Open Database License) used when you scan a cosmetics barcode; only the barcode number is sent • Exercise illustrations — the start and end position pictures on exercise form guides are by Everkinetic (everkinetic.com) and wger.de contributors, from the wger.de exercise database, licensed Creative Commons Attribution-ShareAlike 3.0 (creativecommons.org/licenses/by-sa/3.0/). We resized them, placed them on a white background and converted them to WebP; the resized copies stay under the same license, which covers the pictures only and not the app. They are loaded from our own storage, so nothing about you is sent to wger.de • YouTube (Google) — some exercise form guides show a how-to video. The video player is loaded from YouTube only when you open that guide, and YouTube (Google) then receives your device's IP address and standard technical information under its own terms and privacy policy. We send YouTube nothing about your account or your health data, and the app only looks up which video belongs to an exercise • Resend — if an organization's staff have switched on email alerts or the weekly summary, Resend delivers those emails. They contain counts and a link only, never member names, messages or health information • AI assistants you choose to connect (optional; Claude and ChatGPT only) — only if you start a connection from your own assistant (for example Claude from Anthropic, or ChatGPT from OpenAI), sign in to GritLeanPulse and approve it, that assistant can read a read-only summary of the sections you tick, until you disconnect or the access period you chose ends. This is separate from our own use of Anthropic described above, and nothing is shared unless you set it up. See Section 7. • Expo — mobile app build and delivery infrastructure • Strava — optional activity sync via OAuth (only accessed if you choose to connect your Strava account; we receive only activity data you authorize) Anthropic, OpenAI and Hume AI each process the data you send under their own terms and privacy policies, in addition to ours. Our other service providers listed above are contractually bound to process data only as directed by us and may not use your data for their own purposes.

Subscription Billing

iOS subscriptions are processed by Apple (App Store). Web subscriptions are processed by RevenueCat's web checkout, which uses Stripe as the payment processor. In all cases, SJK & Sons LLC® does not receive, process, or store your full payment card details. Billing is governed by the respective privacy policies of Apple, RevenueCat, and Stripe. Android (Google Play) is coming soon.

No Advertising Networks

GritLeanPulse does not use advertising networks, third-party trackers, or behavioral analytics services. We do not embed tracking pixels or share your data with ad platforms.

What Is Sent, and How We Collect It

GritLeanPulse's AI features (the AI Coach and other AI tools, photo, label and body scanning, document and lab report reading, AI insights and summaries, and AI-generated plans and recipes) are powered by Claude, an AI model made by Anthropic, a third-party company. When you use one of these features, and only if you have allowed AI data sharing, our servers send Anthropic the information that feature needs to answer you, over an encrypted (HTTPS/TLS) connection: • What you type to the AI Coach and other AI tools. • Photos you choose to scan, such as food, labels, body or face photos, documents and lab reports. • Health information the feature needs, from what you entered or imported (including from Apple Health and Apple Health Records): for example your profile, nutrition, activity, weight and goals; medications with their doses (including GLP-1 details), conditions, allergies and vaccinations; lab results; glucose readings; and, for the matching features, mood and mental-health check-ins, cycle, fertility, pregnancy, menopause and men's hormone or sexual-health logs. Each feature sends only what it needs, and only when you use it. This information is collected from you directly, when you type it, take or choose the photo, or log it in the app. It is sent at the moment you use an AI feature, not in advance and not for any other purpose. Some AI features, for example Health Correlations, the Drug Interaction Checker and the Supplement and Nutrient Audit, start only when you tap Analyze with AI. The AI features on the web dashboard work the same way.

Who Receives It

Anthropic, PBC (anthropic.com/privacy). Voice recordings are separate: they need their own permission, given the first time you use voice, and go to OpenAI (speech-to-text) and Hume AI (voice tone), as described in Section 5. Optional features your clinic, gym, trainer or nutritionist switches on, and assistants you choose to connect, are described in Sections 6 and 7.

How It Is Used

Only to produce your answer for the feature you used. We do not sell your data, and it is not used to train AI models: Anthropic's Commercial Terms say that Anthropic may not train models on customer content from its services. AI output is general wellness information, not medical advice.

We Ask Your Permission First, and You Can Withdraw It

Before any of your information is sent to Anthropic, the app shows you what is sent, who receives it and how it is used, and asks you to choose Allow or Not now. The two choices are presented equally, and the screen tells you that you can change your choice at any time in Settings > AI features. You are asked in these places: as its own step during setup, right after the medical disclaimer (agreeing to the disclaimer does not allow AI data sharing); when you open the app, if you have not chosen yet, including if you were already a user before this step existed; and, if you still have not chosen, just before the first time you use an AI feature. We record the date you allowed it on your account. If you choose Not now, the AI features stay off, nothing is sent to Anthropic, and everything else in the app still works. We remember your choice on your device and remind you once, about three days later, that you can choose again. You can change your choice at any time in Settings > AI features (the switch "Share data with Anthropic's AI", in the app and on the web dashboard). Turning it off stops AI requests from your devices at once. It does not recall information Anthropic has already received, which it handles under the terms described below. You can also switch individual kinds of AI feature on or off in the same place.

The Protection Anthropic Commits To

We use Anthropic's API under its Commercial Terms, which incorporate its Data Processing Addendum (anthropic.com/legal/commercial-terms and anthropic.com/legal/data-processing-addendum). As published today, those documents provide that: Anthropic acts as our processor and handles personal data on our documented instructions; it may not train models on customer content from its services; customer content is treated as confidential and used only to provide the service; Anthropic will not sell or share the personal data, nor retain, use or disclose it outside its direct business relationship with us; its security measures include AES-256 encryption for data at rest and TLS 1.2 or higher for data in transit over public networks; the people who handle the data owe a duty of confidentiality; and any subprocessors it uses are listed publicly (anthropic.com/subprocessors) with notice of changes. Anthropic's published practice is to delete API inputs and outputs from its systems automatically within 30 days of receipt or generation, with limited exceptions, for example where the law requires longer retention or to enforce its usage policy. These commitments are comparable to the protections we describe in Sections 3 and 6: encryption in transit and at rest, no sale of your data, and use only for the purpose you asked for. They are Anthropic's terms and may change; the links above always show the current versions. Anthropic's general consumer privacy policy (anthropic.com/privacy) does not apply to content processed on behalf of businesses like us.

How We Protect Your Health Information

GritLeanPulse is a consumer wellness and health tracking application. As a consumer app, we are not a HIPAA-covered entity (we are not a healthcare provider, health plan, or healthcare clearinghouse). However, we treat your health data with the same seriousness and care that those standards require: • Your health data is encrypted at rest (AES-256) and in transit (TLS 1.2+) • Row-level security keeps each account's records separate; other people see your information only through sharing you set up (Sections 6 and 7) • We never sell or license your health data. We share it only as described in this policy: with our AI provider after you allow it (Section 5A), with the few services listed in Section 5 that need a limited piece of it, and with a clinic or provider only as you choose • You can export or permanently delete your data at any time • Our infrastructure (Supabase) is SOC 2 Type II certified • We comply with the FTC Act and applicable state health data privacy laws

Apple Health Records (Optional Import)

GritLeanPulse can read the health records that your doctor, lab or clinic added to Health Records on your iPhone: lab results, medications, allergies, conditions and immunizations. This happens only when you tap an Import from Apple Health button (in Lab Results, Medications, the Emergency Medical Card, Conditions or the Vaccination Record) and approve Apple's permission sheet, where you choose which health provider records to share. It is read-only: we never write to Health Records, and the app does not read them in the background or on a schedule. The records are shown to you first, and only what you confirm is saved. The raw Health Records data is not uploaded or kept. What you confirm is saved to your account: lab values (with the test date) to your Lab Results, medications to your Medication Log, allergies to your allergy list (also used by your Emergency Medical Card), immunizations to your Vaccination Record, and conditions to your list of medical conditions. We use it to fill in those screens, your history and your trends, and to personalize your targets and insights. We do not use it for advertising, marketing or data mining, and we never sell it. AI features: if you have allowed AI data sharing (Section 5A), the AI features you use can include this information when it is relevant to what you ask or analyze. For example, the AI Coach can use your conditions, medications and lab values, and some insight cards can use your allergies or vaccinations. It is sent to Anthropic only to answer you, as described in Section 5A. If you have not allowed AI data sharing, none of it is sent. If you tap the research-context button on a biomarker, only that biomarker's name, value, unit and high or low status are sent to look up published research, with no name, email or account ID. Lab results are never included in the optional ChatGPT or Claude summary (see Section 7). Your saved records are stored in your account and protected by row-level security so only you can read them. Lab results are shared with a clinic only if you joined that clinic and chose to share the biomarkers category; gyms, trainers and nutritionists can never receive lab information. Control and deletion: to stop imports, do not use the import buttons, or in iPhone Settings, Health, Data Access & Devices, GritLeanPulse, switch off Health Records. You can check and correct every value in the review list before it is saved. You can delete medications and conditions one by one in their screens. To remove saved lab results, allergies or immunization records, email support@gritleanpulse.com and we will delete them; deleting your account (Settings > Delete Account) removes all of them.

Form Check (Camera)

Form Check uses your iPhone camera, or a workout video you choose from your photo library, to count repetitions and give simple technique tips. The camera frames are analyzed on your device using Apple's body-pose technology. No video or image is recorded, saved, or sent to us or to anyone else. If you tap Save, only the result is saved to your account: the exercise, the date, the number of reps, how many were clean, and which tips came up. The tips are rough guidance from angles measured in a flat image. They are not coaching, medical, or injury advice.

Glucose Features (Optional): Apple Health, Nightscout and Alerts

The glucose screens show readings you already have: from Apple Health (including Dexcom and other sensors that share with Apple Health) or from your own Nightscout site. A direct Dexcom connection is not available yet. If you connect Nightscout, the app contacts your Nightscout site directly from your phone; your access token or secret is kept only in your iPhone's secure Keychain and is never sent to our servers. Readings, and insulin amounts recorded in Nightscout, are copied to your account so you can see them in the app, and you can disconnect and delete them at any time. Optional glucose alerts compare your readings with thresholds you choose and notify you on your device. The insulin log is a record only. GritLeanPulse never calculates, suggests, or adjusts a dose, and its alerts are informational and not a substitute for your device's own alarms or for medical care. In an emergency, call 911.

Food Recall Checks

To warn you about food recalls, GritLeanPulse downloads the public list of recent food recall notices published by the U.S. Food and Drug Administration (openFDA) and compares it with your pantry, scanned products and, if you choose, logged foods on your device. Nothing about your pantry or your products is sent to the FDA or to anyone else. A match means a recall notice may apply to a product: check the lot code on the package. No match is not a guarantee that a product is safe.

Sharing With Your Healthcare Provider

GritLeanPulse includes features to generate provider-ready reports and export your data for your healthcare appointments. When you share data with your provider, you control exactly what is shared. We do not transmit your health data to any healthcare provider, insurer, or third party without your consent. For a clinic, gym, trainer or nutritionist program, your consent is the set of categories you choose to share with that organization, which you can change at any time.

Secure Provider Share Links

In the Provider Report you can create a secure link for a provider who does not use GritLeanPulse. You choose which sections to include and how many days of history. When you create the link, we build the report once and store a frozen snapshot of exactly what you chose; the provider's page shows that snapshot, not your live account. The link's secret token is stored only as a one-way hash, and the separate 6-digit passcode you give the provider is stored only as a keyed hash, never in readable form. Each time the link is opened or a passcode is tried, we record the outcome, the time, a short browser description and a hashed network address (not the readable address), and you can see the view count and last view in the app. Too many wrong passcodes lock the link. A link expires on the date you choose (30 days at most), and you can revoke it at any time: it stops working immediately and its stored snapshot is deleted. Anyone you give both the link and the passcode to can read the snapshot until it expires or you revoke it, so share them only with people you trust and send the passcode by a different route than the link.

If You Join a Clinic, Gym, Trainer or Nutritionist Program

An organization that works with GritLeanPulse (a clinic, or a gym, personal trainer or nutritionist) can give you a code that connects your account to it. You can be connected to one organization of each type at the same time (for example one clinic and one nutritionist), and each connection has its own sharing choices. Nothing is shared with an organization until you choose categories after joining. A clinic can be offered up to thirteen categories (for example weight, nutrition, medications, conditions, labs, activity and recovery). A gym, trainer or nutritionist can only be offered nutrition, weight, body measurements, exercise and activity and recovery (a nutritionist can also be offered supplements); medication, GLP-1, mental health, hormone, lab and medical-condition information is never offered to them. The activity and recovery category is your daily steps, sleep hours and quality, heart rate variability and resting heart rate, from your logs and Apple Health; it is offered to every type of organization. The organization's staff can see, in their staff portal, your name, your patient, member or client number and the information in the categories you currently share. That information comes from the intake, check-ins and progress reports you send, including an automatic weekly check-in, and, for the staff views described below, directly from the entries you log in the categories you share. Staff also see basic profile details sent with an update (goal type, activity level, language and biological sex), anything you type into a check-in or message, and whether you have been logging recently (the date you last logged and a "quiet" flag after the organization's chosen number of days), which is worked out only from the categories you share with that organization. Messages you send are visible to its staff. You can change or stop sharing, or leave the organization, at any time. It then stops seeing those categories right away, including in updates you sent earlier, and the app keeps a dated history of what you shared. Check-ins and intake forms you have already sent cannot be edited or deleted by you afterwards, but the organization stops seeing what you no longer share, and they are removed if you delete your account. If an organization ends its agreement with us, your access through it ends; your own account and data are not deleted. Staff sign in with their own accounts, each time they open a record it is logged for the organization's administrators, and GritLeanPulse gives the organization combined statistics about its members (for example the share who checked in this week). How the organization itself uses information it receives is governed by its own privacy practices. A gym, trainer or nutritionist uses GritLeanPulse as a coaching-support tool; its advice is its own and is not medical advice from us.

Joining: Email Lists and Approval

An organization can choose how people join with its code: open to anyone who has the code, only email addresses on its list (or from an email domain it has named), or only people it approves. For a list, we compare the confirmed email address on your account with the list; we do not tell the organization anything about you unless you are on it and join. For approval, your name and account email address are sent to the organization with your request so it knows who is asking; you can see the request while it is waiting and withdraw it. An organization can later release a member whose email address is no longer on its list; that ends the connection (and the organization's view of your data) but never deletes your own account or data. Requests are kept with your account until you delete it.

Staff Views Built From the Entries You Share

Besides the updates you send, some staff views read your entries directly, and only from categories you share with that organization at that moment (turning a category off stops it right away, and earlier entries stop showing). Opening any of them is recorded in the organization's access log, and if the log cannot be written the view is not shown. • Food-log review (nutrition category): staff can open the foods you logged (name, brand, serving, calories and nutrients), but only from the day you began sharing nutrition with that organization, never earlier days. They can leave comments (up to 1,000 characters) or one-tap reactions and mark a day as reviewed. You see them read-only in the app, and a short, generic notification (no more than one a day and not during your quiet hours) may tell you a note arrived. Comments are kept until you delete your account and you see them only while you are connected. For members using the gentle (eating-disorder-safe) view, no calorie or nutrient numbers are shown to staff and comments quoting numbers are refused. • Muscle-protection view (nutrition, weight and exercise categories): protein per kilogram of body weight over the last 7 and 28 days, strength sessions per week and the weekly pace of weight change. It uses no medication data. For members on the gentle view it shows habits only and body weight is not read. • Activity and recovery view: your averages of steps, sleep, heart rate variability and resting heart rate, if you share that category. • GLP-1 timeline (clinics only, glp1 category): injections, dose changes, logged side-effect ratings and, if shared, weight and protein, in one date-ordered view. Gyms, trainers and nutritionists cannot open it.

Plans, Questionnaires, Suggestions and Reminders From an Organization

Care plans, programs and pathways: staff can write plans for you, including steps that appear on a schedule and files they attach. You can read them and tick steps off; you cannot change them. Staff see which steps you ticked and when. Questionnaires: an organization can ask you short check-in questions (a weekly set, or one you are asked to answer once). They are the organization's own questions, not medical or mental-health screening tools, and gyms, trainers and nutritionists cannot ask medical questions. Only that organization's staff read your answers, and once sent they cannot be edited. You can skip anything you prefer not to answer. Suggestions: staff can send you a suggestion, such as new nutrition targets, the gentle view or a supplement plan. Nothing in your account changes unless you accept it, and you can decline it or undo an accepted one for seven days. A suggestion expires if you do not answer. The organization can see whether a targets or supplement suggestion was accepted, declined, expired or undone; for the gentle-view suggestion it sees only that it was answered. Suggestions that would go below the app's calorie safety minimum are not delivered, and members using the gentle view are never sent calorie targets. Welcome message and starter plan: an organization can set a welcome message and a starter plan that are delivered once when you first connect. The message arrives as an ordinary message from the organization (we fill in your first name) and does not use your logs. Reminders: an organization can switch on gentle reminders (for example if nothing has been logged for a number of days, a check-in day, or a plan step coming up). They are sent as push notifications through Expo's notification service with fixed, generic wording and no health information, respect your quiet hours and are limited to one reminder a day. A protein reminder uses your protein for the day only if you share nutrition with that organization.

Organization Challenges

An organization can run a private challenge for its members (for example days logged, workouts, steps or days at your own protein target, never weight or calories). Nothing is shared when you join except what is described here. Your progress is worked out from your own logs during the challenge dates, whether or not you share those categories, and only members of that organization can see the challenge. Other participants see you only if you choose to appear on the leaderboard, and then only under the display name you pick (not your account name), with your score. Staff see group totals and, for people who chose to appear, the display name and score. A group total is shown only once at least five members have joined. You can leave a challenge at any time; your own logs are not deleted.

Reports and Statistics for an Organization

Organizations can see combined statistics and download monthly reports about their members, such as how many are connected, how many logged during the month and how many sent updates. Any count of 1 to 4 is shown as "<5", and any rate or distribution that would describe fewer than five members is not shown. Reports contain no individual names unless an administrator chooses to add a roster, which lists each member's number, name, join date and the categories they share with that organization; creating a report is recorded in the access log. Reports for gyms, trainers and nutritionists describe participation, not health outcomes. Staff can opt in to a weekly summary email with four counts (members active, quiet, to look at, and unread messages) and a link; it contains no names or health details, and email is not a secure channel.

When Staff Use AI to Help Write Messages and Summaries

Some organizations may switch on an optional tool that helps their staff write a short message to you or a short summary of how you or the group are doing. It is off for every organization unless we switch it on for that organization, and the organization's administrators can switch it off again. A staff member must press a button each time; nothing is generated or sent automatically, the AI never sends anything, and the staff member reads, edits and sends the message themselves. When it is used, our servers send Anthropic (the maker of Claude) only numbers worked out from the categories you currently share with that organization for the last two weeks (for example days you logged, your average protein against your own target, workouts and minutes, average steps and sleep hours, number of weigh-ins and net weight change), the type of organization, the purpose of the message and an optional short tone note typed by staff. Your first name is included only if the staff member ticks a box for that draft. We do not send your last name, email address, phone number or account ID; any message, note, or food or workout description (and, for a draft message, any check-in text; check-in summaries are covered separately below); any medication, GLP-1, mental-health, hormone, women's or men's health, lab or condition information; or anything from a category you have switched off. For members using the gentle view, no weight, calorie or protein numbers are sent. The draft is checked automatically before staff see it, and if it fails a check a fixed template is shown instead. If a tone note contains words about suicide, self-harm or harming others, nothing is sent to the AI and the staff member sees crisis resources instead (the check is a plain word list, not AI). For each request we keep a usage record (organization, staff account, date, kind, token counts and cost, and a one-way hash and length of the text, never the text itself or any member's identity), and the organization's access log notes that a draft was asked for, with the member number when it concerned you. Anthropic processes these requests under its own terms (see Section 5). Check-in summaries are a separate optional tool. It is off for every organization unless we switch it on for that organization and its administrators allow it, and a staff member must press a button each time. When a staff member asks for a summary of your recent check-ins with that organization, our servers send Anthropic the answers you submitted to that organization in its check-ins and questionnaires over roughly the last two to five weeks, including anything you typed in those answers (for example your win of the week, what needs attention, how food sat with you, and, for a clinic only, days with side effects), and the type of organization. We do not send your name, email address, phone number or account ID, anything you did not submit to that organization, your logs, or anything from a category you have switched off. The result is a short list of wins, concerns and suggested follow-ups for the staff member to read. The AI does not contact you, does not diagnose, and does not give treatment advice, and a staff member decides what, if anything, to do. If your answers contain words about suicide, self-harm or harming others, nothing is sent to the AI and the staff member sees crisis resources instead (the check is a plain word list, not AI). The app explains this tool on the screen where you manage what you share with an organization. The same usage record and access log described above apply, and you can stop sharing with an organization at any time.

Message Translation

Messaging with an organization works without AI: your messages and the organization's replies are delivered exactly as written. Messages are translated automatically only if YOU have allowed AI data sharing (the permission in Settings > AI features, which the app also offers from the message screen). When you have allowed it, each side can read the conversation in their own language: messages you send are translated into English for staff, and messages staff send you are translated into your app language when it is not English. The text of the message is sent through our servers to Anthropic (Claude) for this; nothing else is sent with it. If you have not allowed it, or you turn it off, nothing in your conversation is sent to Anthropic: messages stay as written, and staff see that a message was not translated because you have not allowed AI translation. You can also keep talking with the organization by phone, text or in person. Turning AI data sharing off stops translation of new messages from then on. Both the original and, when translation was allowed, the translation are stored with the message, are visible to you and to that organization's staff, and are deleted with your account.

AI Safety & Crisis Response

GritLeanPulse's AI features are designed to help you track and understand your own health data — they are not a diagnostic tool, a substitute for professional medical or mental health care, or a counselor. If your responses on a mental health screening (such as a PHQ-9 or GAD-7 assessment) indicate a risk of self-harm or suicidal thoughts, our AI does not attempt to respond to or discuss that content. Instead, you will immediately see resources for real, human help: the 988 Suicide & Crisis Lifeline, the Crisis Text Line, and instructions to call 911 in an emergency. GritLeanPulse may also alert you to patterns in your logged data (in both mental health and condition-specific nutrition tracking) that may be worth discussing with your healthcare provider — these alerts are informational only and never a diagnosis. Coach check-ins and alerts that the app starts itself are simple rules applied on your device to your own logged numbers; they are not generated by AI and never discuss mental health or medication.

What It Is

GritLeanPulse offers an optional connector, off unless you set it up, that lets an AI assistant you choose (for example Claude or ChatGPT) read a summary of numbers you have logged. Nothing is shared unless you start the connection from your own assistant, sign in to GritLeanPulse, and approve it on our approval page.

Who Receives Your Data

Only the assistant you connect, and only the sections you tick on the approval page: weight, nutrition, activity and sleep, and workouts, and, only if you deliberately tick them, mood and symptoms, glucose, and your medication log. Mood, glucose and medication start switched off. The summary contains only numbers and short labels you logged, with units. Workout types, symptoms, side effects and medication names come from our standard lists; anything else is shown only as 'other'. Claude and ChatGPT are the only assistants that can connect. It never includes your name, email address, account ID, free-text notes, photos or lab results.

Read-Only, Limited and Revocable

The assistant can only read the summary. It cannot add, change or delete anything in your account. Access ends automatically after 7, 30 or 90 days, as you choose, and you can disconnect at any time in Data Export, which stops further reads immediately. The assistant holds a short-lived access credential (about one hour) that is renewed during the period you chose. We store only a one-way hash of the credentials, never the credentials themselves, and we record when each connection was created, when it was last used and how many times. Connections are deleted if you delete your account. Each time it reads, the assistant asks for a period (7, 14, 30, 60 or 90 days) within the sections you ticked.

What We Do Not Control

Once an assistant has read the summary, it is held by that assistant's company under its own terms and privacy policy (for example Anthropic for Claude, OpenAI for ChatGPT). GritLeanPulse does not control what the assistant does with it and cannot take it back. Disconnecting stops new reads but does not delete what the assistant already received; use that service's own controls for that. Our own AI features are not involved in this connection, and our own AI safety rules (Section 6) apply to GritLeanPulse's AI only; an assistant you connect is outside them. Only connect assistants you trust.

What We Collect

Certain optional AI wellness features — Face Age Scan and AI Body Composition Scan — ask you to take a photo with your device camera (a selfie for Face Age Scan; body photos for Body Composition Scan). These photos are used only to generate an estimate (apparent age and skin condition, or body composition and posture notes) for your own motivational and educational tracking. This is not medical diagnosis, and it is not facial recognition, identity verification, or biometric authentication — we do not use these photos to identify or authenticate you, and no faceprint or biometric template is ever created or stored.

How the Photo Is Used and Shared

When you take a photo for one of these features, it is transmitted once, over an encrypted HTTPS connection, to Anthropic's Claude API (via our backend) to generate the analysis. Our servers pass the photo to Anthropic and do not save it. The photo itself is not shared with any other third party. As with all AI features, the photo is sent to Anthropic only after you have allowed AI data sharing (Section 5A); until then nothing is sent.

Retention — What Is Kept and What Is Not

Face Age Scan: your selfie is held in your device's memory and sent once for analysis. We do not write it to our database or file storage. Only the result (for example an estimated apparent age and a skin-health note) is saved to your account, and only if you tap Save. AI Body Composition Scan: the photos are held in memory and sent for analysis in the same way. If you tap Save on a result, the scan result is saved to your account and up to four of the scan's photos are also saved, privately, in your account's photo storage (the same place as Progress Photos), so they appear in Body Scan Photo History and Progress Photos. If you do not tap Save, the photos are not kept. Photos you add on purpose: photos you take or upload in Progress Photos, and the optional photo attachments in some condition-tracking logs and journals, are stored in your account's private photo storage. Only you can see them, they are never posted to the community, and they are shown to you only through short-lived links made for you. If you use the AI analysis in Photo Comparison, the two photos you pick are shared with Anthropic to analyze them. Your optional profile picture, and any photo or video you post to the community, are stored so that the people who can see your profile or post can see them. Photos read for a quick result: the food photo scanner, nutrition and ingredient label scans, lab report and document readers, recipe and menu photos, the AI Coach photo question, and the clothing, cosmetics and cookware scans send the photo once for analysis through our servers to Anthropic. They do not save the photo; where anything is kept it is the text or number result you choose to save. A vial photo you add in the Peptide Tracker stays on your phone.

Deletion

You can delete any saved scan result at any time from within the app (the History tab on the relevant screen). Photos saved from a body scan are listed in Progress Photos, where you can delete each one; deleting a photo there removes the stored file, and deleting a scan result does not automatically delete its photos, so delete both if you want both gone. Deleting your account (Settings > Account > Delete Account) removes your account data, including the records of your saved photos and scan results and the stored photo files themselves.

GritLeanPulse is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@gritleanpulse.com and we will promptly delete that data.

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page and notify you via email or in-app notification if the changes are material. Your continued use of GritLeanPulse after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: SJK & Sons LLC® support@gritleanpulse.com