Privacy Policy

LOAD is operated by LOAD, contactable at [contact email — to be set before public launch]. We are the data controller for the information described here.

Account: email address and, if you sign in with Google, your Google profile basics (name, profile picture). Profile: sex, date of birth, height. Health & fitness: body weight and computed BMI, workout sessions and logged sets, your nutrition diary entries, computed calorie and macro targets, water intake logs, fasting logs, and any custom foods you create. Technical: session identifiers, IP address, and browser user-agent for security and abuse prevention.

We process the data that powers the core tracking service under Article 6(1)(b) GDPR (performance of a contract) — storing what you enter is the service you signed up for. Because body stats, workouts, and nutrition logs are health data (special-category under GDPR), we additionally rely on Article 9(2)(a) GDPR (your explicit consent)for that special-category processing. You give this explicit consent when you create your account, and you can withdraw it at any time (see “Your rights” below).

Our processors: Neon (database hosting), Vercel (application hosting), Google (sign-in, if you use it). We query the USDA FoodData Central API server-side for food information; we do not send your personal data to USDA. We do not sell or share your data with advertisers, and we never use your health data to target ads.

To help resolve an issue you report, an authorized operator may temporarily view your account the way you see it (“view as user”). This access is read-only and time-limited, and every session is recorded in an internal audit log (which operator accessed which account, and when). An operator cannot change your password or email, cannot delete your account, and cannot record new data while viewing your account.

Our hosting providers operate in the United States. Transfers from the EEA are covered by Standard Contractual Clauses (SCCs) as adopted by the European Commission.

We keep your data while your account is active. You can export or delete everything at any time — see /account/delete. Deletion is immediate and cascades across every table tied to your account.

Under GDPR (and equivalent laws) you have the right to access, rectify, export (portability), and erase your data — all available from Settings → Privacy & Data. You may also withdraw your health-data consent (Art. 9) at any time using the Withdraw consent control in that same section; because health-data consent is the only lawful basis for processing your data, withdrawing it permanently deletes your account and all associated data. You may also lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, the DPC in Ireland).

You must be 16 or older to use LOAD (the minimum may be 13 in some countries — see your local law). We do not knowingly collect data from anyone under the applicable minimum age.

This app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Calorie, macro, and BMI guidance is informational only. Consult a qualified healthcare professional before changing your diet or exercise routine.