Privacy Policy
Last updated August 2026
Who we are
FastingPilot is an educational fasting tracker operated from Canada. Contact: privacy@fastingpilot.com.
Account data
Email address, and — if you sign in with Apple or Google — the identifier and email that provider returns. Password sign-in stores only a salted hash, held by our authentication provider, never by us in readable form.
Health and fitness data you enter
Your onboarding answers (age band, sex, height, weight, activity level, goals, and any risk flags you tick), your fasting sessions and their start/end times, hydration entries, moods, notes, and the derived stage, streak, and trophy records built from them. This data is used to run your plan and your dashboard. It is not sold, not used for advertising, and not shared with data brokers.
Community data
Display name, avatar, challenge participation, leaderboard position, crew connections, messages you send, and any share links you create. Share links are unlisted until you distribute them, and you can revoke them from your profile.
Device and security data
A device-session record (opaque identifier, timestamps, coarse user-agent) used to keep you signed in for 30 days and to let you sign out everywhere. We do not use advertising identifiers and we do not track you across other apps or websites.
Processors
Supabase (database, authentication, and file storage) and our transactional email provider. They process data on our instructions only. There is no payment processor: the app is free and collects no payment information.
Storage and retention
Data is retained while your account exists. Deleting your account removes it (see below). Backups roll off within 30 days.
Your rights
Access, export, correct, or delete your data at any time. Deletion is self-serve at /delete-account and inside Profile; it is immediate and permanent.
What deletion keeps
Challenges you created that other pilots already joined stay live with the owner shown as “Deleted pilot”, so their progress survives. We also keep a one-way hashed reference and a timestamp proving the deletion happened. Neither contains your email, name, or health data.
Children
FastingPilot is not intended for anyone under 18 and we do not knowingly collect data from minors.
Changes
Material changes are announced in the app before they take effect.
Contact
privacy@fastingpilot.com
Questions about this document? Email privacy@fastingpilot.com.