Privacy Policy

1. What we collect

Three kinds of data. There is no fourth, and there is no hidden analytics layer.

Account identity

• Your email address. This is your account. It is how you sign in and the only way we can reach you.

Health and fitness data

This is the category Apple calls sensitive, and Protn genuinely collects it, because it cannot build you a menu without it:

• Height, weight, age and sex — used to estimate your energy needs.
• Activity level — how much you move, which changes that estimate.
• Your macro targets — daily calories, protein, carbohydrate and fat, whether you set them yourself or accepted the figures Protn worked out.
• The foods you tell us you eat — the list of proteins, carbohydrates, vegetables and fats you chose during setup, along with any restrictions or dislikes you entered.
• Your meal plan — the menu built for you, every meal in it, and the portions.
• Your daily check-offs — which meals you ticked, which day type you picked, and the water you logged, by date.
• Your edits — when you change a portion or swap a food, we record what was generated and what you accepted instead.

Usage data

• Which meals and water rows you checked off, and when.
• How many plans you have built, and when each was built.
• Crash and error reports, if the app fails.

We do not collect your name, your phone number, your contacts, your photos, your precise location, your advertising identifier, or anything from Apple Health. Protn does not read HealthKit. There is no third-party advertising or analytics SDK in the app.

2. Why we collect it

Each piece earns its place or it would not be there:

3. Everything is linked to you

We want to be plain about this rather than bury it. There is no anonymous mode in Protn. Every piece of data above — including the health and fitness data and the usage data — is stored against your user account and is therefore linked to your identity. Nothing is collected in an aggregated or de-identified form, and we do not claim otherwise.

This is also what our App Store privacy labels declare: email, health and fitness, and usage data, all linked to you, all used for app functionality only. None of it is used for tracking.

4. Who else processes it

Protn is a small app and it does not run its own servers or payment system. These are every third party involved, what each one receives, and why:

Each of these is a processor acting on our instructions, under its own terms and security commitments. We add processors only when the app needs one, and this list is updated when that happens.

5. How the AI part works

Building a plan sends a request to Anthropic’s Claude API. It is worth knowing exactly what is in that request, because “AI” is usually left vague:

• What is sent: your daily macro targets, the numbered list of foods you chose, which meals you want, and any preferences Protn has recorded from your past edits.
• What is not sent: your email address, your name, your height or weight, your account identifier, your check-off history, or anything that identifies you.
• What comes back: meal names and, for each item, a food number and a weight in grams. Nothing else.
• Training: your data is not used to train any model.

A plan takes around seventy seconds to build. That is the model working, not the app hanging.

6. What we never do

• We never sell your data. Not to anyone, in any form, for any price.
• We never share your health data with advertisers. There is no advertising in Protn and no advertising SDK in the app.
• We do not track you across other apps or websites, and we do not use your data for any kind of ad targeting or data brokerage.
• We do not sell or share personal information in the senses those terms carry under the California Consumer Privacy Act, so there is nothing for you to opt out of.
• We do not run profiling that has a legal effect on you.

7. How long we keep it

Your account data is kept for as long as your account exists, because the app would not work without it — your menu has to still be there tomorrow.

• Account, plan, check-offs and preferences: until you delete your account, at which point they are deleted (see section 9).
• Crash reports: retained by Sentry for up to 90 days, then discarded.
• Subscription and purchase records: retained as long as required for tax, accounting and refund-handling purposes, which may outlast your account. These records are held by Apple and RevenueCat.

8. Your rights and controls

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct it if it is wrong — most of it you can edit directly in the app.
• Delete it, which you can do yourself at any time (section 9).
• Export a copy of it in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where we relied on it.
• Complain to your local data protection authority.

Our legal bases, for those under UK or EU GDPR, are: contract, for the data needed to provide the app you signed up for; explicit consent, for the health and fitness data, which you give by entering it during setup and can withdraw by deleting your account; and legitimate interests, for crash reporting and keeping the service secure.

To exercise anything above, email hello@protnapp.com from the address on your account. We will respond within 30 days. We do not charge for this and we will not ask you to justify the request.

9. Deleting your account

You can delete your account from inside the app, and doing so deletes your data. You do not have to email anyone or wait for us to act.

1. Open Protn and go to Settings.
2. Tap Account, then Delete account.
3. Confirm twice. The second confirmation is deliberate, because this cannot be undone.

This removes your account and the data attached to it: your profile and email, your targets, your food list, your plan and all of its meals, your daily check-offs and water log, your recorded edits, and the preferences drawn from them. Backups that already contain the data are rotated out within 30 days.

Two things survive, and we would rather say so: anonymised crash reports that are no longer tied to a live account, and the purchase records Apple and RevenueCat keep for their own tax and refund obligations. Deleting your Protn account does not cancel an active subscription — cancel that through the App Store first, or you will keep being billed. See Support for how.

10. Security

• Everything travels over HTTPS.
• Data at rest is encrypted by Supabase.
• Every table carries row-level security scoped to its owner, so your rows are unreachable from another account even if a request is crafted by hand.
• Passwords are hashed by the authentication provider. We never see them.
• Subscription state is verified on the server, not trusted from the device.

No system is perfect. If you believe you have found a vulnerability, email hello@protnapp.com and we will take it seriously and credit you if you want that.

11. Children

Protn is not for people under 16. We do not knowingly collect data from anyone under 16, and the app is not designed or marketed for children. If you believe a child has created an account, email us and we will delete it. Protn also tells anyone under 18 to speak to a doctor or dietitian before changing how they eat.

12. International transfers

Our processors operate in the United States and the European Union, so your data may be processed outside the country you live in. Where data leaves the UK or the EEA, the transfer relies on the European Commission’s Standard Contractual Clauses or the UK Addendum to them, as set out in each processor’s data processing agreement.

13. Changes

If this policy changes we update the date at the top. If a change is significant — a new processor, a new category of data, a new purpose — we will tell you in the app before it takes effect rather than quietly editing this page.

14. Contact

Protn is operated by its developer as the data controller. For anything about this policy or your data, email hello@protnapp.com. We read every message and usually reply within a day.

Short version: your email, your body measurements, your food list, your menu and your daily ticks are stored against your account so the app can work. Supabase holds them, Anthropic sees your targets and foods to build the plan, Apple takes the payment, Sentry gets crashes with no email attached. Nothing is sold, nothing goes to advertisers, and you can delete all of it yourself from Settings.