Working draft. Final policy will be reviewed by counsel before public launch. Substance will stay; specific wording may change.
me. needs some health information to do its job. This page says what we hold, where it goes, and how to see, export or delete all of it. We never sell your data, and nothing from the app is used for advertising.
Your email, and your name if your Apple or Google sign-in shares it. Your profile: date of birth, sex, height, weight, fitness level, focus, equipment, schedule, and any injuries you add. Your training: workouts, sets, weights, reps, how hard each set felt, stretching and cardio, and any history you import from another app. For a cardio session we keep how long it ran and, when your Apple Watch or iPhone measures them, how far you went and each hard round’s distance. Check-in answers, and anything you describe in words, like where something hurts. Meals you log, barcodes you scan and meal photos you take. What you write in the thread. Cycle dates, only if you turn cycle tracking on. The squads you join, and feedback you send us.
Only if you connect them. Apple Health: we read sleep, heart rate variability, resting heart rate, respiratory rate, body weight, body fat and lean mass, VO2 max, exercise minutes, your workouts with their heart rate, distance and active energy, and, only if you opt in, cycle dates. We write one thing back: each session you finish, saved as a workout. Oura and Whoop: the same kind of sleep and recovery data, read only. The Apple Watch app talks only to your phone. During a cardio session it reads your heart rate and distance. With no Apple Watch in reach, your iPhone can measure an outdoor walk, run or ride through Apple’s own workout recording. We also keep your time zone, how you use the app (which screens and features) in our own database, and crash reports with your identity removed. We do not collect your location, contacts or browsing, and there are no advertising or third-party analytics tools in the app.
me. asks for your location on your iPhone so iOS can measure how far you go on an outdoor walk, run or ride. me. receives a distance, never where you were, and keeps no route or map.
Some features use an AI model from Anthropic to handle words. The numbers in your plan are always worked out by the app, never by AI. We send Anthropic only what a feature needs. The thread: your message, the recent conversation, and the facts from your records the reply needs. Check-ins and injury notes you write in words: that text. Meal photos: the photo, to estimate its macros. We don’t keep the photo, only the estimate you save. The weekly summary: a summary of your week, including body-weight trend and any injuries. Coaching lines in a workout, food notes and some notification wording: the day’s plan, your food targets and intake, and how your week is going. Cycle data is never sent to an AI model. Anthropic uses this data to return a reply, not to train its models. Replies written by AI can be wrong.
To build and adjust your workouts, work out how hard each day should be and how you’re recovering, set food targets, write replies and summaries, keep your account secure, and fix and improve the app. Health data is used only to run the app’s fitness features. We do not sell your data, use anything from the app for advertising, or share it with data brokers.
Companies that run parts of the app, each for that job only and under contract: Fly.io (servers, United States), Neon (database, United States), Anthropic (the AI features above), Sentry (crash reports, identity removed), Resend (email, like sign-in links), Bunny.net (exercise videos), Open Food Facts (looks up a scanned barcode; only the barcode number is sent), and Apple and Google (sign-in; Apple handles payments, so we never see your card). We may also share data when the law requires it, or to protect someone’s safety.
People in your squads see your display name, cheers, and the activity you allow, like finished workouts and personal bests. Each kind can be hidden per squad, or you can leave the feed altogether.
Everything is kept while your account is open, including the thread and what was sent to AI features, so your history stays whole. When you delete your account it closes straight away, and it is erased 30 days later. Sign back in within those 30 days to undo it. Database backups roll off within days after that, and crash reports within 90 days. One thing is kept: a record that you accepted the Terms, Medical Disclaimer and Privacy Policy (which versions and when, tied to a scrambled form of your email), for six years, in case of a legal claim.
Export: Settings → Your data & account saves a file of everything we hold about you to your phone. Delete: the same page, Delete account. Correct: Edit profile, any time. Disconnect Apple Health, Oura or Whoop without losing anything else. Turn off notifications in Settings.
EU and UK: access, correct, erase, restrict, move and object, and withdraw consent at any time. You can also complain to your data protection authority. California: know, delete, correct and limit the use of sensitive information, with no penalty for asking. Washington, Nevada, Connecticut and other states with health-data laws: we collect health data only with your consent and only to run the app, and never sell it. Anywhere else, or for any of these: info@itsyou.me.
me. is for people 18 and older. We don’t knowingly hold data about anyone younger. If we learn we do, we delete the account and its data.
Data is encrypted in transit and at rest. You sign in with Apple, Google or a one-time email link, so we never hold a password. If a breach affects your data, we’ll tell you as the law requires.
This section is about this website only; the app has no advertising or analytics tools. The site can use Meta’s ad-measurement tools (the Meta Pixel and the Conversions API) to measure ads. When they are switched on, they record visits to these pages, and joining the waitlist sends Meta a scrambled (hashed) copy of your email with technical details (your IP address and browser). We never share anything from the app with Meta.
Data is stored and processed in the United States. We’ll tell you in the app before a material change takes effect, and ask again where the law needs your consent. me. is run by [Company legal name], [Address], which is responsible for your data. Questions or requests: info@itsyou.me.