TDEE Tracker

Consumer Health Data Policy

Updated and in effect from 4 November 2026Applies to the TDEE Tracker app and website

The short version

  • The health data we hold is what you log in the app: food, weight, body measurements, workouts, health stats, fasts and check-in answers.
  • Your account keeps it only with your consent, asked in its own box. You can withdraw it at any time in Settings.
  • We use it only to run the features you use. We never sell it, and never use it or share it for advertising or to train AI.
  • Supabase stores it for us so it syncs between your devices. Our other service providers (hosting, email, reminders) never get your log.
  • You can download it, delete it or close your account at any time, in the app or by email. We answer requests within 45 days.

TDEE Tracker is run by [Company name] ("Champions Performance", "we", "us"). This policy explains how we handle consumer health data, as Washington State's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy act ask. We apply it to everyone, wherever you live. It adds to our Privacy Policy, which covers everything else.

1. Who we are

[Company name] runs TDEE Tracker and decides how your health data is used.

Postal address: [Postal address]
Email: support@championsperformance.net

2. What this covers

"Consumer health data" means information linked to you that says something about your physical or mental health, including what can be worked out from it. In TDEE Tracker, that's most of what you log. Without an account, your log stays only on your device and never reaches us; progress photos always stay on your device. We describe them here too so you have the full picture.

3. The health data we collect

We don't collect precise location, biometric identifiers (like face or fingerprint data) or genetic data, and we don't read data from other apps or wearables.

4. Why we collect and use it

Only to provide the features you use:

We never sell your health data, never use it to target ads, never use it to train AI models, and never share it with advertisers, data brokers or the stores behind Coach's pick links. When free users start to see ads, those ads won't use your health data.

5. Where it comes from

From you: what you type in, tick or scan in the app. Some numbers, like your targets, nutrient totals and real burn, are calculated by the app from what you've entered. Nutrition facts for foods come from food databases (the USDA, Open Food Facts, restaurant chains and brands), but those databases don't hold anything about you. We don't buy health data or receive it from other companies.

6. Who receives it

Only the service providers that run TDEE Tracker for us, and only what each needs for its job. They act on our instructions and may not use your data for anything else.

Food databases. When a packaged food isn't in our own list, a search or barcode lookup sends only the words you typed or the barcode number to USDA FoodData Central (a US government database); barcode lookups can also go to Open Food Facts (a nonprofit food database). Nothing else from your log or account goes with it, but like any website their servers see your IP address. They aren't our service providers; the lookup happens because you asked for it.

Nobody else. We don't sell, rent or give your health data to anyone. No other company collects health data about you over time or across other websites through TDEE Tracker: there are no ad trackers, pixels or third-party analytics. The only other times it could be disclosed are if the law requires it, or as part of a sale or merger of the business, in which case this policy keeps applying to it.

Before your account keeps it. When you create an account (with email, a sign-in link, Google or Apple), you're asked for your consent to collect and store your health data. It's its own box, separate from agreeing to the Terms, and never pre-ticked. Next to it we say what we keep, why, who gets it and how to withdraw. Accounts made before we asked this way are asked once, the next time they sign in or open the app. We record the time you consented and which version of the wording you saw.

If you'd rather not, you can use the app without an account: your log stays on your device and never reaches us.

Extra switches. The more sensitive extras have their own switch in Settings, with a plain explanation, and start off:

Withdraw it at any time: Settings → Privacy → Health data consent → Withdraw. Your account then stops collecting your health data and you're signed out. What's already saved stays in your account until you delete it or the account (or ask us to). You'll be asked again if you sign in later.

We'd ask for your separate consent before sharing health data for any other purpose. We don't do that today.

8. See it, delete it or withdraw consent

Email support@championsperformance.net from the address on your account. We'll confirm it's you, then answer within 45 days. If we need longer, we'll tell you why within those 45 days and finish within 45 more. Requests are free. If we turn down a request, we'll tell you why. You can appeal by replying with "Appeal" in the subject line, and we'll answer the appeal within 45 days. If we still say no, you can contact your state's Attorney General, for example in Washington, Nevada or Connecticut. We won't treat you differently for using any of these rights.

9. How long we keep it

For as long as your account exists, or until you delete it. Withdrawing consent stops new data being collected; it doesn't delete what's already saved, so delete your account (or ask us) if you want that gone too. After you delete your account, your data leaves our live database straight away and our backups within 30 days. Without an account, your data stays only on your device until you clear it. See the Privacy Policy for consent records, usage counts, server logs and support emails.

10. Changes

If we change how we handle health data in a meaningful way, we'll update the date at the top and tell you in the app or by email before the change takes effect. If a change means using your health data in a new way or sharing it with someone new, we'll ask for your consent again first.

11. Contact

[Company name] ("Champions Performance")
[Postal address]
Email: support@championsperformance.net