Privacy notice

• Account and sign-in information — the email address and authentication details used to create and access your account.
• Profile and nutrition preferences — the inputs needed to build a plan: calorie and protein targets, weekly budget, meals per day, cook time, equipment, country/market, allergens, exclusions and preferred proteins.
• Product usage and event data — records of actions such as generating a plan or using a Smart Swap, used to operate features and enforce plan limits, plus basic diagnostic and error information.
• Billing and subscription identifiers and status — the identifiers and subscription state needed to grant or remove Pro access.
• Messages you send us — the email address, topic and content you submit through the contact form.

Payment card processing is handled by Stripe. ATHLYRO does not store full payment card details. We hold only the subscription and customer identifiers and the subscription status needed to operate Pro access.

• To create and operate your account and keep you signed in.
• To generate, save and re-open your weekly plan, grocery list and tracking.
• To enforce plan and Smart Swap limits and to grant Pro or trial access correctly.
• To keep the service reliable, diagnose faults and improve the product.
• To answer support, billing and privacy questions you send us.

The product runs on services that process data on our behalf: Supabase (database, authentication and server-side storage), Stripe (subscription billing and payment processing), Lovable (application hosting) and, only if you accept analytics, Google (Google Analytics). We do not sell your information, and we do not use it for advertising.

ATHLYRO keeps its own basic product statistics — for example that a plan was generated or an upgrade screen was shown — without names, emails, nutrition targets, allergens or any free text. These are used to understand whether the product works and are not shared with advertising services.

Separately, and only if you choose “Accept analytics”, we use Google Analytics on our public pages (home, guides, recipes, products, legal and contact pages) to understand how visitors find and use the site. Google Analytics is not loaded before you decide, and never on signed-in pages such as Today, Plan, Shop, Profile or onboarding. It receives the public page address (without sign-in codes or other personal parameters), page title, basic device, browser and approximate location information, and sets its own cookies (named _ga). Advertising features, personalised ads and Google Signals are switched off, and we never send your account identity, profile, nutrition, allergen, plan, recipe choices or contact-form content to Google. Google may process this data on servers outside your country, including in the United States.

Your choice is remembered on this device for 12 months. You can change it at any time through “Cookie settings” in the page footer or on your profile; rejecting after accepting stops Google Analytics and removes its cookies from this site.

Information is retained as long as necessary to operate the service — for example, to keep your account, saved plans and entitlement state working — and, where applicable, to keep legal, accounting and business records. We do not publish fixed retention periods for an early-stage service, because they would be inaccurate.

• Update your targets, budget, market, allergens and exclusions at any time from your profile.
• Reset your app data — profile, weekly plan, grocery list and tracking progress — from the profile screen.
• Ask a privacy question or request help with your data through the contact form, choosing the “Privacy or data request” topic.

As the product develops, this notice will be updated to keep describing what actually happens. Material changes will be reflected here.