Privacy Policy

Effective 1 November 2026Applies to the TDEE Tracker app and website

TDEE Tracker is run by Champions Performance ("we", "us"). This policy explains what information TDEE Tracker handles, why, and the choices you have. It applies to the website and the web app, including when you add the app to your phone's home screen.

1. What we collect

Information you enter

• Food log: the foods, recipes, amounts, meals and times you record, plus water and exercise entries.
• Birth month and year: asked once, before you use the app or create an account, to check you're old enough to use TDEE Tracker. It's kept on your device and, if you have an account, in your profile. We never ask for the day.
• Body and goal details: sex, age, height, weight, optional body fat percentage, goal weight, pace, activity level and eating style, used to calculate your calorie and nutrient targets.
• Weight history and weekly check-in answers (how the week felt, energy, hunger, sleep, things like illness or your cycle that week, your weekly focus and notes).
• Workouts: exercises, sets, reps, weights, optional effort ratings, saved routines and personal bests.
• Health questions: yes/no answers about heart or blood pressure, chest pain or dizziness, diabetes or kidney or liver disease, pregnancy, eating disorder history and certain medications, plus any areas of pain you tap. We store the yes/no answers only, never a diagnosis, and the date you confirmed medical clearance or the exercise acknowledgement.
• Goals and motivation: optional performance goals, how important and how confident you feel about your goal, your reason in your own words, and what's made it hard before.
• Pro waitlist: whether you joined the waitlist and when.
• Profile: your name and, if you add one, a profile photo. The photo is stored as part of your profile.
• Custom foods, recipes and saved meals you create.
• Settings: units, theme, meal names and which diary sections you show.

Account information

If you create an account: your email address, a securely hashed password (we never see the password itself), and the time you signed up and last signed in. If you use an email sign-in link, we store the email address only.

Technical information

Our hosting providers keep standard server logs (IP address, browser type, pages requested, timestamps) for security and to keep the service running. We do not run advertising trackers, social media pixels or third-party analytics on the app.

What we don't collect

We don't access your contacts, location, camera or microphone. If photo logging is added later, photos will be used only to suggest foods and you'll be asked before the feature is turned on.

2. Health data and your consent

Your food log, weight, body measurements and goals are health-related information. Some laws, such as Washington State's My Health My Data Act, treat this as consumer health data with extra protections. We follow these principles everywhere, not just where the law requires it:

• You choose what to enter. Every field is optional except what's needed to calculate your targets. Entering it is your consent for us to store it and use it for the purposes in section 3.
• We don't share it for anything else. Your health data is never sold, shared with advertisers, or used to build profiles for other companies.
• You can withdraw consent at any time by deleting entries, deleting your account, or emailing us. See section 7.
• No geofencing. We don't collect location data and don't use location-based tracking of any kind.
• Health questions stay on your device by default. Your answers to the health questions are stored only on the device you answered them on, unless you tick the box to save them to your account. They're used only to tailor and gate features (for example pausing workouts or turning off weight-loss goals), never for advertising, and you can change or delete them any time from Profile.

3. How we use your information

All suggestions in the app (targets, pace zones, check-in tips) are calculated from your own entries using published formulas. They are general wellness guidance, not medical advice.

4. Who we share it with

We share data only with the service providers that run the app for us, and only to the extent they need it to do that job. They act on our instructions and are not allowed to use your data for their own purposes.

We will also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of the business, in which case this policy will continue to apply to your data.

We do not sell your personal information and have not done so in the past 12 months.

5. Where your data is stored

Without an account: your data is stored only in your browser on your device. We can't see it, and clearing your browser data removes it. The "Copy backup" button in Profile lets you save a copy as text.

With an account: your data is stored on servers in the United States operated by Supabase, encrypted in transit and at rest. A copy is also kept on each device you sign in on so the app works offline. If you use TDEE Tracker from outside the United States, you understand your data is transferred to and processed there.

6. How long we keep it

• Your log and profile: for as long as your account exists.
• After you delete your account: your data is removed from our live database immediately and from backups within 30 days.
• Server logs: up to 90 days.
• Support emails: up to 2 years, so we can follow up on earlier questions.

7. Your rights and choices

Whatever country or state you live in, you can:

• See and export your data. Profile → "Copy backup" gives you everything as a text file. You can also email us for a copy.
• Correct it. Every entry can be edited in the app.
• Delete it. Delete individual entries in the app, use "Erase all data" in Profile, or email us to delete your whole account. Deleting your account removes your data from our servers; you'll also want to clear the app's data on each device.
• Withdraw consent for us to hold your health data by deleting it or your account.
• Use the app without an account. All free tracking features work with data kept only on your device.
• Not be treated differently for exercising any of these rights.

To make a request, email support@championsperformance.net from the address on your account. We'll respond within 30 days. If we can't fulfil a request we'll tell you why, and you can ask us to review that decision.

If you're in the EU, UK, California or another place with a privacy law, you may also have the right to complain to your local regulator.

8. Security

Passwords are hashed and never stored in plain form. Data travels over HTTPS and is encrypted at rest. Each account can only read and change its own records, enforced at the database level. No system is perfectly secure; if we ever learn of a breach affecting your data, we'll notify you as the law requires.

9. Children

TDEE Tracker is for people 16 and older and isn't directed at children. Before anyone uses the app or creates an account, we ask for their month and year of birth. If the answer is under 16, the app stays closed on that device and anything saved on it is erased. If that person was signed in, their account and everything stored with it are deleted.

We don't knowingly collect personal information from anyone under 16. If you're a parent or guardian and think your child has given us information, email support@championsperformance.net and we'll delete it.

10. Changes to this policy

If we change how we handle your data in a meaningful way, we'll update the date at the top and tell you in the app or by email before the change takes effect.

11. Contact

Champions Performance
Email: support@championsperformance.net