When you sign up as a client, we store your name, email, and the contact details you choose to add (phone, emergency contact, date of birth). When you fill in your health history we store the answers you provide. When you log meals, water, mood, or send messages, we store those.
We never sell or share your data with advertisers. We never use your health data to train any AI model, and neither does the AI provider described below.
When you log a meal in your food diary, we send what you wrote — and the photo, if you added one — to Anthropic, an AI provider in the United States, which estimates the calories and macronutrients in that meal. The estimate comes back to us and is stored alongside your entry.
Only the meal itself is sent. Your name, email, date of birth, health history, messages, goals, and every other part of your record stay with us. Anthropic receives the words you typed and the picture you took, with nothing attached that identifies you.
Anthropic does not use what we send to train their models, and does not keep it beyond a short period for detecting misuse of their service. We do not use it to train anything either.
This happens for every meal you log, whether or not you or your coach can currently see the estimates — the numbers may be switched off for display while still being calculated. Estimates are approximate, typically within 20–30% of the true figure. They are a rough guide for you and your coach to spot patterns, not a measurement, and either of you can correct any value.
If you would rather your meals were not sent for estimation at all, tell your coach or email us at the address below and we will switch it off for your account.
Your health history, food diary, goals, and messages are visible to your coach and the platform operator (Karim Sahyoun, for technical support). They are not visible to other clients or to other coaches on the platform.
The audit log records every read of your health data so you can ask for a record at any time.
Data is stored on Cloudflare D1 (SQLite, encrypted at rest) and Cloudflare R2 (for diary photos, library files, and message attachments). Auth is handled by Better Auth with PBKDF2-hashed passwords; we never store your password in the clear.
Two companies process data on our behalf: Cloudflare, which hosts everything above, and Anthropic, which receives meal descriptions and meal photos only, for the calorie estimates described above. Nobody else.
You can ask for a copy of everything we hold on you (GDPR right to data portability), and you can ask us to delete your account. Deletion is a soft-delete that purges personal data within 90 days; the audit log keeps non-identifying tombstones.
To exercise either right, message your coach or email contact@precious-health.net.
We set a single first-party session cookie when you sign in (HttpOnly, Secure, SameSite=Lax). We do not use third-party tracking cookies, advertising pixels, or fingerprinting libraries.
If the policy changes materially, we'll notify clients via the in-app updates feed before the change takes effect.