一句话说清楚：我们只收你自己填进来的东西（邮箱、面谈答复、体重围度、吃了什么练了什么、和 AI 的对话），只用来给你生成和调整方案。不卖、不用来训练模型、不投广告、没有第三方追踪代码。你随时可以发邮件到 henry.guo@reknausa.com 要一份导出，或者要求全部删掉。
我们不是 HIPAA 意义上的「受保护实体」（covered entity），也不是它的业务伙伴 —— 你在这里填的健康信息不受 HIPAA 保护。它受这份隐私政策、以及适用的州消费者健康数据法保护。这点我们说在前面，你自己判断要不要填。
| 类别 | 具体内容 |
|---|---|
| 账号 | 你的邮箱地址。登录用魔法链接，我们不存密码。 |
| 同意记录 | 你勾选同意的时间、条款版本号、界面语言、浏览器 User-Agent 字符串。 |
| 面谈档案 | 性别、年龄、身高、体重、训练史、目标、每周怎么练、器械、忌口、饮酒和含糖饮料、记录方式；以及伤病、慢性病、用药、怀孕或哺乳状态。还包括面谈全过程的对话原文。 |
| 身体记录 | 体重、腰围等围度、体脂率（你自己填或设备读数）。 |
| 饮食与训练记录 | 你记的每一餐、每次训练的动作重量次数。 |
| 对话 | 你在「你的团队」页面问的每一句，以及 AI 的回答。 |
| 照片 | 你为了记一餐拍的食物照片，以及你上传的体成分扫描单照片（Evolt 360 / InBody 这类机器打出来的单子）。两种照片都会发给第 4 节列的模型提供方，用来读出食物内容或单子上的读数；同时以 base64 的形式和那条记录存在同一行里。删掉那条记录，照片跟着删。 |
| 运行日志 | Vercel 和 Supabase 自动产生的技术日志（时间、请求路径、错误信息、IP 地址），用于排障和防滥用。 |
我们不收集：精确地理位置、通讯录、你相册里的其它照片（只有你自己选中上传的那一张会进来）、健康 App 的后台数据；也没有接入任何广告 SDK、社交插件或跨站追踪像素。网站只在你自己的浏览器里存少量本地数据（登录会话、同意暂存），用于让你保持登录，不用于追踪你。
我们不把你的数据用于：出售或出租、定向广告、和其他用户共享、训练或微调任何 AI 模型、任何形式的画像分析用于商业目的。
这一节是专门给华盛顿州（My Health My Data Act）、内华达州（SB 370）以及其他有消费者健康数据法的州的居民写的，但它描述的做法对所有用户一样适用。
上面第 1 节里的「面谈档案」「身体记录」「饮食与训练记录」「对话」这四类，都属于消费者健康数据：身高体重体脂围度、饮食摄入、运动情况、伤病、诊断过的慢性病、正在服用的药物、怀孕或哺乳状态、饮食失调经历。
上传的体成分扫描单照片上通常印着体脂率、肌肉量、内脏脂肪等级这些读数，有时还带你的姓名，它和第 1 节的「照片」一并按消费者健康数据对待。
走到第 12 周的周期结算时，我们会问两道关于吃饭感受的问题，并根据你的回答推断要不要暂停你的热量目标（把方案改成吃维持）。这条推断是我们算出来的结论，不是诊断；它只存在你自己的记录里，不共享给任何第三方。
全部来自你自己在网站上填写或说出来的内容。我们不从数据经纪商、第三方 App、可穿戴设备或任何其他来源获取你的健康数据。
只有第 2 节列的那几项：生成方案、调整方案、安全提示、年龄门槛、服务运行。没有别的用途。
只共享给下面第 4 节列的三类服务商（云托管、数据库、AI 模型转发与模型提供方），它们只能按我们的指示处理数据。我们不把你的健康数据共享给关联公司、广告商、数据经纪商、保险公司或雇主。
我们不出售你的消费者健康数据，也不做任何构成「出售」的换取对价的转移。我们从来没有出售过，将来若要出售，需要事先另外拿到你签署的书面授权 —— 而这不在计划里。
发邮件到 henry.guo@reknausa.com，写清你要什么。你可以：
我们会在收到请求后 45 天内回复。确实需要更多时间的，会在 45 天内告诉你原因，最多再延 45 天。如果我们拒绝你的请求，会说明理由，你可以回信申诉，我们会重新审一次并书面答复。
我们不使用地理围栏（geofencing），也不采集你的位置。
| Supabase（美国区） | 存放账号和全部记录。数据库开了行级安全策略（RLS），一个账号只能读写自己的行。 |
|---|---|
| Vercel（美国） | 托管网页和后端函数，产生访问日志。 |
| OpenRouter | 把你的面谈内容和提问转发给模型提供方。按 OpenRouter 的默认策略，它不留存提示词和回答内容（只留时间、模型、token 数等计费元数据），我们没有开启它的「提示词日志」选项。 |
| Anthropic、Google、MiniMax | 实际生成回答的模型提供方，当前配置就是这三家（换模型时这张表同步改）。你的食物照片和体成分扫描单照片也是发给它们读的。它们按各自的 API 条款处理请求，一般用于生成回答和滥用检测，不用于训练它们的模型。 |
| jsDelivr | 页面从这个公共 CDN 加载 Supabase 的浏览器客户端脚本，它因此能看到你的 IP 和浏览器标识。脚本带 SRI 校验（内容被改动浏览器会拒绝执行）。 |
| Rekna | 运营方本人在排查故障时可能看到你的数据。除此之外不会主动读。 |
界面字体（Barlow）自己托管在本站的 /fonts/ 下，不从 Google Fonts 或任何第三方字体 CDN 加载，所以打开页面不会因为字体把你的 IP 和浏览器标识送给第三方。
说清楚一件事：我们能约束的是自己的做法和自己的配置，不能代第三方作保证。上述服务商的政策可能变化，你可以直接去看它们各自的隐私政策。
另外，法律强制的情况（有效的法院命令、传票）下我们可能需要披露数据；发生这种情况时，只要法律不禁止，我们会通知你。
不管你住在哪个州，你都可以发邮件到 henry.guo@reknausa.com 要求：
导出和删除现在在产品里就能做：计划页底部「我的数据」→「导出 JSON」把全部记录下载成一个文件；「删除」二次确认之后清空你在这里的全部数据行并把你登出。登录用的邮箱账号本身还要我们在后台删一次，发封邮件说一声就行。
我们不会因为你行使这些权利而降低服务质量或收你钱。加州居民依 CCPA/CPRA 享有的知情、删除、更正、限制敏感个人信息使用、不受歧视等权利，我们按上面这套流程一并处理。
诚实地说：这是一个个人做的小项目，没有做过 SOC 2 或第三方安全审计，也没有专职安全人员。没有任何系统是绝对安全的。如果发生涉及你健康信息的数据泄露，我们会按 FTC 的 Health Breach Notification Rule 和适用的州法通知你和监管机构。
这个网站只面向 18 岁以上的人，不面向儿童。我们不会故意收集 13 岁以下儿童的个人信息。如果你是家长，发现孩子提交了信息，发邮件到 henry.guo@reknausa.com，我们会删除。
我们不做跨站行为追踪，所以浏览器的 Do Not Track（DNT）信号对我们没有实际影响 —— 无论你是否发送 DNT，我们的做法都一样：不追踪。也没有第三方在我们的页面上收集你的个人信息用于跨站追踪。
有实质性改动时，我们会更新本页顶部的生效日期，并在你下次登录时提示；涉及新的数据用途或新的共享对象时，会另发邮件，并在需要时重新征求你的同意。
隐私相关的任何问题、请求、申诉：henry.guo@reknausa.com。请在标题里写「隐私请求」，方便我们优先处理。
In one line: We collect only what you enter (email, intake answers, weight and measurements, meals and workouts, your conversations with the AI) and use it only to generate and adjust your plan. We do not sell it, do not train models on it, do not run ads, and use no third-party trackers. Email henry.guo@reknausa.com any time for an export or full deletion.
We are not a HIPAA covered entity or business associate — the health information you enter here is not protected by HIPAA. It is protected by this policy and by applicable state consumer health data laws. We state this up front so you can decide what to enter.
We do not collect precise location, contacts, the rest of your photo library (only the image you pick reaches us), or background health-app data, and we include no advertising SDKs, social plugins, or cross-site tracking pixels. The site stores a small amount of local data in your own browser (session, pending consent) to keep you signed in — not to track you.
We do not use your data to sell or rent, to target advertising, to share with other users, to train or fine-tune any AI model, or to profile you for commercial purposes.
This section is written for residents of Washington (My Health My Data Act), Nevada (SB 370), and other states with consumer health data laws. The practices it describes apply to all users.
Categories collected: the intake profile, body records, food and workout logs, and conversations described in Section 1 — including height, weight, body fat, measurements, dietary intake, exercise, injuries, diagnosed chronic conditions, current medications, pregnancy or nursing status, and eating-disorder history.
Body-composition scan printouts usually carry body-fat percentage, muscle mass, and visceral-fat level, sometimes your name as well; those photos are treated as consumer health data along with everything above.
Inferences: at the week-12 cycle review we ask two questions about how eating has been going and infer from your answers whether to pause your calorie target and switch the plan to maintenance. That inference is a conclusion we compute, not a diagnosis; it stays in your own record and is not shared with any third party.
Sources: only what you type or state in the app. We obtain no health data from data brokers, third-party apps, wearables, or any other source.
Purposes: only those listed in Section 2.
Categories of third parties we share with: only the service providers listed in Section 4 (cloud hosting, database, AI gateway and model providers), acting on our instructions. We do not share health data with affiliates, advertisers, data brokers, insurers, or employers.
Sale: we do not sell your consumer health data and have never done so. Any future sale would require your separate signed written authorization — and none is planned.
Exercising your rights: email henry.guo@reknausa.com to (a) access the consumer health data we hold about you and the list of third parties we have shared it with, (b) delete your consumer health data, including requesting deletion by our processors, or (c) withdraw your consent to collection and sharing. We respond within 45 days; if we need longer we will tell you why within those 45 days and may extend once by 45 days. If we deny a request, we explain why and you may appeal by reply email, which we review and answer in writing.
Geofencing: we use none and collect no location data.
The interface font (Barlow) is served from this site under /fonts/, not from Google Fonts or any third-party font CDN, so loading a page does not hand your IP address and user agent to a font provider.
To be clear: we can commit to our own practices and configuration, but we cannot make guarantees on behalf of third parties. Their policies may change; review their privacy policies directly. We may also have to disclose data when legally compelled (valid court order or subpoena); we will notify you unless prohibited from doing so.
Export and deletion are built into the app: "My data" at the bottom of the plan page downloads every record as one JSON file, and the delete button — after a second confirmation — clears all of your data rows and signs you out. The email account itself is removed by us on request. Regardless of where you live, you can also email henry.guo@reknausa.com to access, export (machine-readable JSON), correct, or delete your data, or to withdraw consent and stop using the service. We will not degrade your service or charge you for exercising these rights. California residents' CCPA/CPRA rights — to know, delete, correct, limit use of sensitive personal information, and not be discriminated against — are handled through the same process.
HTTPS everywhere; passwordless one-time email links; row-level security between accounts; API keys held only in server-side environment variables and never sent to the browser.
Honestly: this is a small personal project with no SOC 2 report and no third-party security audit, and no dedicated security staff. No system is perfectly secure. If a breach involves your health information, we will notify you and regulators as required by the FTC Health Breach Notification Rule and applicable state law.
This site is for people 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. Parents who believe their child submitted information should email henry.guo@reknausa.com and we will delete it.
We do no cross-site behavioral tracking, so a browser Do Not Track signal changes nothing about our practices — we do not track either way. No third parties collect personal information on our pages for cross-site tracking.
For material changes we update the effective date at the top of this page and show a notice at your next sign-in. New purposes or new recipients are announced by email and, where required, we ask for consent again.
Privacy questions, requests, and appeals: henry.guo@reknausa.com. Please put "Privacy request" in the subject line.