Privacy Policy

Welcome to Brotein. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account data: The name and answers you give in the plan questionnaire, your username, and an email address only if you save your account with Google or an email.
• Profile data: Optional profile fields, body stats, workout and food plan choices, logged sets, favourite gyms, gym ratings, friendships and messages are stored in our database.
• Profile photos: If you add a profile photo, every Brotein member can see it, and so can anyone who has its link. Before it is uploaded, your phone shrinks it and saves a fresh copy, which removes location and camera details. You can remove it at any time on your profile, and it is deleted with your account.
• Payment data: We use Stripe to process payments. We never store full card numbers on our servers; Stripe handles payment card information.
• Usage data: Logs and analytics to help us improve the site (errors, pages visited, feature usage).

How we use your information

We use collected data to provide and improve the service, to process payments, to communicate account-related messages, and to comply with legal obligations.

Cookies and browser storage

Brotein uses local and session storage for sign-in, saved preferences and page functionality.

• Account and sign-in: Your account, and your email if you add one, are stored by Supabase. Brotein's Supabase client keeps sign-in session tokens in this browser's local storage so you can stay signed in.
• Preferences: Brotein stores choices such as your theme, accent color and language in local storage. These are used to remember your settings.

Fonts and other static assets are requested from external providers; those providers may receive technical request information such as your IP address.

Sharing and third parties

We rely on third-party providers:

• Supabase: Stores your account, profile, and app data.
• Stripe: Processes payments and provides transaction records.
• CDNs and hosting: GitHub Pages and public CDNs host static assets, fonts and icons.

Security

We take reasonable measures to protect your data, including using TLS for data in transit and access controls for our databases. No method is 100% secure; if you have concerns, contact us at [email protected].

Children's privacy

Brotein is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us and we will remove it.

Your rights

You may request access, correction, or deletion of your personal data. You can delete your account and everything in it yourself from Settings; for anything else, contact [email protected]. We may need to retain certain information for legal or security reasons.

Changes to this policy

We may update this policy from time to time. We will publish the changes on this page with a revised effective date.

Questions? Write to [email protected]