Privacy Policy

Account data. Email address, password (stored as a hash by our auth provider, never readable by us) and an optional display name.

Fitness inputs. What you enter to get a Score and a plan: lifts, 5k time, training days, equipment access, race date, unit preference and, if you provide it, sex (used only to select Open division race weights).

Training activity. Session logs (done or missed and how it felt), weekly streaks, points, badges and week feedback, including pain flags you choose to report. A pain flag adjusts your week. It is never treated as a medical record, and we deliberately do not collect medical conditions or diagnoses.

Payment data. Payments are processed by Stripe. Your card number never touches our servers. We receive only what we need to know your subscription status.

Technical data. Standard hosting logs (such as IP address and browser type) via Vercel, used for security and operations.

• compute your Score and generate and adapt your plan,
• run streaks, points, badges and progress tracking,
• manage your account and subscription,
• send transactional email (confirmation, account messages), and
• keep the Service secure and working.

We do not sell your data. We do not share it with advertisers. We have no third party ad trackers.

Data is stored in a Supabase Postgres database with row level security, which means the database itself enforces that only your authenticated account can read your rows. Authentication sessions use secure cookies, not local storage. Payments and card data live with Stripe. Hosting is on Vercel.

Engine uses cookies only to keep you signed in (authentication session cookies set by our auth provider). No advertising or cross site tracking cookies.

Depending on where you live (including under the California Consumer Privacy Act and the EU GDPR) you may have rights to access, correct, export or delete your personal data. With Engine everyone gets the same deal:

• Access and export. Email us and we will send you what we hold about you.
• Correction. Most data you can edit in the app by re-entering it. For anything else, email us.
• Deletion. Email us and we will delete your account and its data. Deleting your account removes your scores, plans, logs, streaks, badges and feedback.

Requests go to support@enginescore.app. We answer within 30 days.

We keep your data while your account exists. When you delete your account, associated rows are deleted. Payment records may be retained by Stripe and by us as required for tax and accounting law. Backups roll off on our infrastructure providers' schedules.

The Service is not for children under 13 and we do not knowingly collect their data. Users under 18 receive no diet or nutrition features. If you believe a child under 13 has an account, email us and we will delete it.

If this policy changes materially we will update the version above and surface the change in the app. Continued use after the change takes effect means you accept the updated policy.

Privacy questions and requests: support@enginescore.app