Privacy Policy

1. Information we collect

We collect information you provide directly, data generated through your use of the Service, and limited technical data necessary to operate and secure the Service.

• Account data: email address, authentication identifiers, and profile photo (if uploaded) when you create an account or sign in.
• Profile and biometrics: name, sex, age, height, weight, body composition, activity level, goals, preferences, and any other health metrics you choose to enter.
• Health logs: food, water, exercise, sleep, supplement, medication, weight, adherence, symptom, and biomarker entries you create or import.
• Uploads: meal photos, product scans, lab reports, and other documents you submit for analysis or record keeping.
• Integrations: data you authorize us to sync from third-party services such as Oura Ring, Google Fit, or Apple Health.
• Communications: messages you send to Coach Cornelis or our support team.
• Technical data: browser type, operating system, device identifiers, approximate location derived from IP address, crash logs, timestamps, and pages viewed.

2. How we use your data

We use your information to:

• Provide, maintain, and improve the Service.
• Calculate personalized calorie, macro, longevity, and pillar targets.
• Generate AI-driven insights, meal suggestions, supplement guidance, and lab interpretations.
• Deliver reminders and notifications you enable.
• Sync your data across the devices you use.
• Respond to your support requests and communicate updates.
• Monitor usage, detect abuse, and secure our systems.
• Comply with legal obligations and enforce our terms.

We do not sell your personal data and do not use your health data for advertising, including interest-based advertising.

3. How we share your data

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers: with trusted vendors who host our infrastructure, process payments, send emails, run analytics, or provide AI services under strict confidentiality and security obligations.
• Legal compliance: when required by law, regulation, legal process, or to protect our rights, users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.
• With your consent: when you explicitly ask us to share information, such as exporting data to a connected service.

4. Storage, security, and retention

Account data and synced logs are stored in our managed backend (Lovable Cloud, powered by Supabase) with row-level security so each user can only read and write their own records. Data in transit is encrypted using HTTPS/TLS, and data at rest is encrypted by our hosting provider.

Some data, including recent logs and offline settings, may also be cached in your browser's local storage or on your device so the app works when connectivity is limited. You can clear this cache through your browser or device settings.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your profile and logs from our production systems within a reasonable time. Residual copies may remain in encrypted backups for a limited period before being overwritten.

5. Subprocessors and integrations

We rely on the following categories of service providers to operate the Service:

• Lovable Cloud / Supabase (hosting, database, authentication).
• Lovable AI Gateway (AI analysis for photos, labs, coach messages).
• Open Food Facts (public product lookup by barcode).
• Oura, Apple Health, Google Fit (only if you connect them).
• Google (only if you choose "Sign in with Google").
• Stripe or Paddle (payment processing, if applicable).

Each integration is optional and only occurs with your authorization. We do not control the privacy practices of third-party services and encourage you to review their policies.

6. Cookies and tracking technologies

We use essential cookies and similar technologies to authenticate you, remember your preferences, and keep the Service secure. We do not use tracking cookies for advertising purposes. You can control cookies through your browser settings; disabling essential cookies may affect Service functionality.

7. International data transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. Regardless of where data is processed, we apply appropriate safeguards, such as standard contractual clauses and encryption, to protect your information in accordance with this Privacy Policy.

8. Your rights and choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information in your Profile or by contacting us.
• Deletion: request deletion of your account and associated data.
• Portability: request your data in a structured, commonly used, machine-readable format.
• Restriction and objection: request that we limit or stop certain processing of your data.
• Withdraw consent: revoke consent for optional features, such as integrations or marketing communications, without affecting the lawfulness of prior processing.
• Lodge a complaint: file a complaint with your local data protection authority if you believe your rights have been violated.

To exercise these rights, contact us at privacy@cornelismethod.com. We will respond within the timeframe required by applicable law.

9. Children's privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us so we can delete it.

10. Health disclaimer

The Cornelis Method provides educational information and self-tracking tools. It is not a medical device and does not diagnose, treat, cure, or prevent any disease or condition. Always consult a qualified healthcare professional before making changes to your diet, exercise, supplements, or medications.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you through the Service or by email. Your continued use of the Service after the changes take effect constitutes acceptance of the revised policy.

12. Contact us

If you have questions, concerns, or requests about this Privacy Policy or your data, please email us at privacy@cornelismethod.com.