Privacy, plainly.

Private coaching measurements

Coaching measurements include weekly weight and waist, strength-test results, and optional progress photos. These records remain private to you and the designated coach and are encrypted at rest. Progress photos have identifying image metadata removed and are never published. Progress photos and DEXA report files are never sent to AI; only numeric measurement trends are included in consented weekly coaching briefs. You may remove your measurements or photos in Coach or request deletion of all your records below. Existing access, retention and safety protections continue to apply.

Optional private food logging

You may save meal names, portions, calculated nutrients, notes and favorites. Your coach may set food-log targets and leave private comments. These records and optional meal photos are encrypted at rest and available only to you and the designated coach. They are never used for advertising or sold. Calories may be hidden by your coach. Unknown nutrient values remain unknown; photo portions and recipe values are estimates, not medical advice.

If you choose photo logging and give the separate photo consent, a metadata-stripped meal photo is sent to Anthropic to identify foods and estimate portions. Nutrients are calculated from food-database records, never invented by AI. You review and correct the identification before saving a meal. Raw food-identification responses and final corrections are kept encrypted for accuracy review, not public sharing or automatic model training. Unsaved photos expire after 24 hours and are removed by the scheduled privacy cleanup. This meal-photo option never sends progress photos or DEXA reports to AI and does not turn on daily AI coaching.

With your separate coaching-AI consent, daily and weekly coaching requests may include meal names, logged protein and fiber, permitted calorie totals, food-log targets and numeric trends. Meal photos, raw image responses, micronutrients and private coach comments are excluded. Missing food logs do not establish low intake or a deficiency. In-app coach-comment notices and optional push notifications contain generic text, never health details. Food records follow the coaching retention and deletion policy below; deleting a meal removes its associated meal photo, corrections and comments.

Collect less. Keep it private.

We never sell health data or share it for advertising. We do not send health inputs to Meta, Google Analytics, advertising networks, or audience-building services. Health information is not used to target ads, build advertising profiles, or train an advertising model.

Calculators, quizzes, and trackers

Your age, measurements, habits, dietary preferences, medication response, safety answers, and resulting estimates are calculated entirely in your browser. We do not receive or store them. The quiz does not ask for your name, email, or phone number. Answers, results, and tracker check-ins exist only in page memory and disappear when you clear, reload, or close the page. Saving or printing a PDF is your choice and happens on your device.

Previously saved quiz answers and trackers have been removed from active storage. Server report links and quiz-result or tracker emails are retired. Necessary contact and booking administration for existing paying or enrolled clients is retained separately, without quiz answers.

Applications, intake, and coaching records

To respond to a coaching application we collect your name, email, chosen coaching goal, market or country, and an optional WhatsApp number with separate contact consent. Applications no longer ask about medication use or duration. Please do not put diagnoses, medications, test results, or other health details in these initial contact forms or scheduling messages.

If you become a client, we keep only information needed for your agreed coaching, such as progress measurements and necessary coaching notes. Private contact and health fields are encrypted at rest and access is restricted to the designated, verified admin account after sign-in. Two-factor authentication is not required by the app. Private client results and photos are not available through public result APIs. Admin notification emails say only “New application received” and link to the secure admin area; they do not contain your health details or form answers.

Your Health Bud Coach

The authenticated Coach app is separate from the public calculators and quiz. With your explicit consent, it stores your name, login email, timezone, program, start date, consent choices, coach-assigned protein/calorie/strength/sleep targets and focus notes. Your daily check-ins contain protein grams, whether you met your calorie floor, strength activity, appetite and digestion scores, sleep, an optional weekly weight, and an optional note. We retain AI feedback, adherence statistics, safety flags and weekly coach briefs to support your agreed coaching. Contact and health fields are encrypted at rest.

You can see only your own Coach records. The designated, verified coach admin can review client records after sign-in. This does not make private application records or photos public. Coach contains no page-view tracking, analytics or advertising. Check-in contents and notes are never included in application logs. We do not cache health records in the installed app or browser storage.

For AI feedback, we send only your assigned protocol, the relevant check-ins and notes, program/food context, and code-calculated weekly statistics to Anthropic through Replit AI Integrations. We do not add your name, email or account identifiers to model requests. Avoid writing identifying details in optional notes. AI supports—not replaces—your human coach and is not medical care. Urgent safety phrases are checked in code before any model request; an urgent flag withholds AI feedback and directs you to your doctor or emergency services. The coach receives a minimal email identifying the client and linking to the dashboard, without symptoms, notes or measurements.

If you choose reminders, we keep an encrypted browser push subscription. Your browser's delivery provider (Google, Mozilla, Apple or Microsoft, depending on your browser) delivers a generic reminder with no health details. You can disable reminders in Coach. Installed iPhone apps require home-screen installation and permission for web push.

Analytics and cookies

On public sensitive pages we keep only cookie-free, first-party daily page-view totals. Coach is excluded entirely. A total contains the day, a fixed page path, and a count—not an IP address, visitor ID, name, email, query string, referrer, form answer, or result. We do not track quiz answers, completions, or booking clicks. This site has no Meta Pixel or Google advertising analytics installed.

A session-only browser preference can remember that you dismissed a quiz invitation; it contains no answers and is not an analytics identifier. Necessary authentication cookies are used for client and admin login. Coach login session data is encrypted, expires after seven days, and is deleted on sign-out or account erasure. Hosting providers may process limited connection and security information to deliver and protect the site; our application logs do not include form bodies, health answers, or URL query strings.

How long we keep information

• Quiz and calculator inputs: not retained by us; page memory only.
• Coach accounts without an assigned coaching protocol: deleted after 90 days if they never become coaching clients. Active Coach records are retained for the agreed coaching relationship and any required administration, then reviewed for deletion; you can request erasure sooner.
• Applications and provider requests from people who never become clients: automatically deleted after 90 days. Each new record has its own retention period. Existing records with unknown client status require an admin review before destructive cleanup, so an actual client's records are not deleted by assumption.
• Client records: only while needed for the agreed coaching relationship, responding to your requests, or a specific legal obligation. We review records when coaching ends; you may request deletion at any time.
• Optional newsletter subscriptions: email and consent only, until you unsubscribe or request deletion. They are separate from health tools.
• Anonymous page-view totals: 90 days.

Permanent deletion removes the person's active database records, related email queues, and private result photos. Payment processors may retain receipts required by law. Hosting backups age out according to the provider's backup schedule; we cannot instantly remove an individual record from every historical backup. Any restored backup must undergo the same privacy cleanup before the service is opened.

Service providers

• Replit: website/API hosting and PostgreSQL storage.
• Google Cloud Storage through Replit App Storage: private client media storage.
• Clerk: admin identity and sign-in verification, not quiz or calculator answers.
• Replit Auth: client login identity and session verification for Coach.
• Anthropic through Replit AI Integrations: consented AI coaching feedback and weekly briefs using the minimal coaching context described above, not advertising.
• Your browser's push provider (Google, Mozilla, Apple or Microsoft): opted-in generic reminders, not your notes or health measurements.
• Stripe, if you pay through it: payment and receipt processing. We do not store full card details or pass health answers with a payment.
• Resend: minimal service notifications and separately consented email updates, not individual health answers or result reports.
• The calendar provider shown on a scheduling link, including Google Calendar where configured: scheduling information you choose to provide on its site. We do not embed that provider on health-input pages or pass quiz answers to it. Its own privacy policy applies when you leave our site.
• WhatsApp, if you choose that contact channel: your contact messages under its terms. Do not send health details there.

Providers may process information in countries other than your own. We use them only for the service purposes described above, not to sell health data or share it for advertising.

Delete my data

You can request access, correction, deletion, or withdrawal of consent. Email us from the address you used, with the subject “Delete my data.” Do not include health details. We verify that you control the address before the admin permanently deletes matching records. We aim to acknowledge requests within 7 days and complete verified requests within 30 days, unless a specific legal requirement prevents part of the deletion; we will explain any exception.

Unsubscribing stops marketing messages; it is not the same as deleting coaching records.

India: consent and your rights

For people in India, we seek specific, informed, unambiguous consent through an affirmative application checkbox before processing the requested contact information for a coaching enquiry. Coach asks separately for consent to private health-record processing and AI feedback before enrollment. WhatsApp contact, push reminders and marketing are separate, optional choices. Refusing optional contact or reminder choices does not stop you using the private calculators or quiz.

Under India's Digital Personal Data Protection Act, 2023 and applicable rules, as they apply to the processing, you may request information about processing, correction, completion, updating, erasure, and withdrawal of consent. You may also raise a grievance or nominate another person to exercise applicable rights in the circumstances provided by law. Contact shaurya@withyourside.com for these requests or concerns.

Withdrawing consent stops future consent-based processing, subject to obligations required by law; it does not make earlier consented processing unlawful. We will explain information that must be retained and any impact on the coaching service. We do not intentionally collect children's health information. This notice is not a claim that coaching is medical treatment or that this site has a legal compliance certification.

Optional selfie twin

The selfie twin is a separate, optional consent. It is not part of coaching AI consent, and refusing it does not affect coaching. If you agree, your selfie is sent to DeepInfra, which runs self-hosted FLUX and Qwen models. The selfie is processed in memory and the input is discarded after generation. It is not used for training. Generated portraits may be temporarily hosted by the provider for about a day before removal. We store only the generated portraits. We do not store your selfie, face embeddings or facial geometry. You can delete your portraits at any time.

Buds and challenges

Buds posts are private to the peers in your current shared squad or challenge. Meal photos are shared only when you explicitly choose to share them. Text and photos you post are sent to DeepInfra for safety checks and are not used for training. Weight, body measurements, calories, labs and check-in details are never shared automatically.

If you opt in to a public challenge invite link, anyone with the link can see only the challenge name, type, dates, the creator's first name and the creator's rested twin portrait. Turning off community sharing or deleting your account disables your public links. We cannot recall copies of share cards you have already downloaded or shared elsewhere.

You can delete your posts, block members and report posts or members. Blocking also leaves groups and challenges you share with that person, with your confirmation. Reports are reviewed by the owner, who may dismiss a report, remove content or suspend a member from Buds. A Buds suspension does not remove private coaching access.

Mobile app, photos, wearables and squads

Updated October 18, 2026. The mobile app uses the same private coaching records as this website. We collect your verified identity, timezone, goals, daily targets, food and nutrient logs, optional meal photos, check-ins, and optional wearable summaries that you choose to submit.

If you request human coaching, we store your selected plan and optional note privately so the coach can respond. The notification email contains no health details. Requests older than 90 days are deleted if you remain on the free plan without a published coach protocol; this does not delete your active free account or personal logs. A request is not a purchase or an assignment to a coach.

Clerk processes mobile email/password, password-reset emails and Apple sign-in. Replit hosts the API, database and private file storage. Anthropic through Replit AI Integrations processes meal images and minimal coaching context only when you consent to AI processing. Resend processes service emails. Expo and your device's push provider process opted-in device tokens and generic reminders. We do not send health details in notification text.

Wearables are optional and require separate consent. Only daily steps, sleep duration, resting heart rate, active energy and weight are supported. These summaries are private to you and your authorized coach. They are not used for advertising or sold. Consented weekly AI reviews can use these summaries; we do not send them to advertising vendors.

Squad participation is optional. Joining explicitly permits sharing behavioral activity and streaks with the current members of your small squad. Weight, meal details, photos and check-in answers stay private unless you separately enable sharing for that specific field. You can change sharing or leave the squad. Another member may have seen information before you withdrew permission.

We keep active account records to provide the service until you request deletion, subject to any required legal retention. Unconverted applications are subject to the 90-day policy above. Device refresh sessions expire after 30 days. Deleting an account permanently removes its active logs, photos, check-ins, wearable records, squad membership and device tokens. Historical hosting backups expire separately and are not public records.

We never sell health data or share it for advertising. Health-entry pages have no advertising trackers. Our public calculators and quiz keep health inputs in your browser. AI processing is optional and can be withdrawn in your settings. Under India's data-protection framework, you can withdraw optional consent and request access, correction or deletion using the contact below. Withdrawal does not make past lawful processing unlawful.

Delete my data or account. Contact shaurya@withyourside.com for a request or question. We verify ownership before acting on email requests. Do not include health details or passwords in your email.