Privacy Policy

Welcome to Brotein. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account data: When you sign up we store your email, display name and the username you provide.
• Profile data: Optional profile fields, body stats, workout and food plan choices, logged sets, favourite gyms, gym ratings, friendships and messages are stored in our database.
• Payment data: We use Stripe to process payments. We never store full card numbers on our servers; Stripe handles payment card information.
• Usage data: Logs and analytics to help us improve the site (errors, pages visited, feature usage).

How we use your information

We use collected data to provide and improve the service, to process payments, to communicate account-related messages, and to comply with legal obligations.

Cookies and browser storage

Brotein uses local and session storage for sign-in, saved preferences and page functionality. Third-party advertising may use cookies or similar technologies if you choose to enable it.

• Account and sign-in: Account information you submit, such as your email, is stored by Supabase. Brotein's Supabase client keeps sign-in session tokens in this browser's local storage so you can stay signed in.
• Preferences: Brotein stores choices such as your theme, accent color and language in local storage. These are used to remember your settings.
• Optional advertising: On the index page, Google AdSense is loaded only after you choose “Accept all.” Google may use cookies or similar identifiers for ad delivery, measurement and personalization, subject to Google's settings and policies. Choosing “Reject optional” prevents the AdSense script from loading.
• Your choice: Brotein saves your advertising choice in local storage. You can reopen the choices with “Cookie settings” in the index-page footer. If you switch from “Accept all” to “Reject optional,” Brotein stops loading AdSense; cookies Google has already set may remain until they expire or you remove them through your browser.

Google's use of information is described in its advertising privacy information. Fonts and other static assets are also requested from external providers; those providers may receive technical request information such as your IP address.

Sharing and third parties

We rely on third-party providers:

• Supabase: Stores your account, profile, and app data.
• Stripe: Processes payments and provides transaction records.
• Google AdSense: Provides optional advertising on the index page when you accept it.
• CDNs and hosting: GitHub Pages and public CDNs host static assets, fonts and icons.

Security

We take reasonable measures to protect your data, including using TLS for data in transit and access controls for our databases. No method is 100% secure; if you have concerns, contact us at [email protected].

Children's privacy

Brotein is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us and we will remove it.

Your rights

You may request access, correction, or deletion of your personal data. You can delete your account and everything in it yourself from Settings; for anything else, contact [email protected]. We may need to retain certain information for legal or security reasons.

Changes to this policy

We may update this policy from time to time. We will publish the changes on this page with a revised effective date.

Questions? Write to [email protected]