Privacy policy

What we keep

Your account: your email address and a password, or your Google account if you sign in with Google (then Google tells us your name, email address and profile photo). A password is handled by our sign-in provider and stored only as a secure hash; we never see it.

Your profile: name, username, bio, photo and app language.

What you enter: workouts and sets, your food diary, water and weigh-ins, your nutrition profile (age, sex, height, weight, goal, activity), injuries or limits you tell the plan about, foods you avoid and food allergies, checklists, and your conversations with the coach.

A random ID for each device you use, so your devices can stay in sync.

What you share with others: messages and photos you send in chats, the groups and channels you are in, shared checklists and your ticks in them, when you were last online, and for the leaderboards a daily count of your workouts, records, perfect checklist days and days with food logged, with your streak.

Error reports: when the app hits an error it didn't expect, it sends the error message, the page, your browser and the app version, with your account ID if you are signed in. Email addresses and sign-in links are removed first, and reports are deleted after 30 days.

Notifications, if you turn them on: your device's push address with your language and time zone, used only to send you new-message alerts and the evening reminder. In a browser, its push service (Google, Apple or Mozilla) delivers them; in the phone app, Expo's push service passes them to Google (Android) or Apple (iPhone). Turning notifications off deletes the address.

Messages you send us from Help & feedback, with the page, app version and browser they came from, so we can answer them by email.

Reports: when you report a member, a message, a group or channel, or a coach reply, we keep the report, who sent it and a copy of what was reported, so we can review it and act. Reports are deleted a year after they are closed.

How we use it

To run the app for you: show your plan and progress, keep one account the same on every device, and let the coach answer about your real day.

To keep the service safe and working: stopping abuse, fixing errors, and limiting how often the coach can be called.

The AI coach

When you message the coach, your message, the recent conversation and the areas you chose to share (nutrition, training, habits) are sent to an AI provider to write the reply. Today that is You.com; it may be Anthropic. You can switch any area off in the coach's settings.

If you add your own Anthropic API key, your messages go straight from your device to Anthropic, and the key stays on your device.

The coach can be wrong. It is not medical advice.

Who we share it with

Only the services that run MightClub: Supabase (sign-in, database and photo storage), Vercel (hosting and the coach's server), the AI provider above for coach replies, Brevo (sending account emails such as sign-up codes and password-reset links), Expo (delivering phone notifications), and Google if you sign in with Google. They process data for us under their own terms and security; their servers may be outside your country. When you scan a barcode, the phone reads it on the device with Google's ML Kit (Google may receive anonymous performance data about the reader) and only the barcode number goes to Open Food Facts (openfoodfacts.org) to find the product; the camera picture never leaves your phone.

Other MightClub members can see your name, username, bio and photo once they are signed in. Messages and photos you send in a chat are seen by that chat's members, and a shared checklist, its tasks and everyone's ticks by the people in it; people you chat with see when you were last online. On the leaderboards, people you share a chat or a list with see your XP, workout count and streak, and so does everyone signed in if you join the global board; challenges show your count to the chat they are in. Everything else you enter is visible only to you.

We share data with authorities only when the law requires it.

On your device

The app keeps a copy of your data in your browser or on your phone so it opens fast and works offline. Signing out removes it from that device.

Keeping and deleting

Your data is kept while your account exists. You can delete entries, lists, coach conversations, the messages and photos you sent, and the chats and lists you own in the app at any time.

To delete your account, open Profile, then Delete account. Everything MightClub keeps about you goes at once, on every device: your profile, photos and synced data, your activity and scores, your notification addresses, feedback and error reports. The messages you sent are emptied and show as deleted, your private chats are deleted for both sides, and groups, channels and shared lists you own pass to their longest-standing admin or member.

Your email sign-in stays, so you can start again with an empty account; we keep only a note of when the account was deleted, so a device still signed in from before can't bring its data back. To have the sign-in removed too, or if you can't use the app, write to support@mightclub.net. We delete it within 30 days.

Security

Connections are encrypted (HTTPS). The database only lets each account read its own data and what others shared with it, and provider keys stay on the server.

Children

MightClub is for adults: you need to be 18 or older to use it.

Changes and contact

When this policy changes, the date above changes too, and we tell you in the app about anything important.

Questions or requests: support@mightclub.net.