How we handle
your data.

Account information. Your email address, full name, and timezone. Provided by you when you sign up.

Body composition data. Weight, body-fat percentage, lean mass, and any other measurements you log manually or via a connected scale.

Biometric data via Whoop. If you connect Whoop, we read HRV, recovery score, sleep duration, sleep performance, and daily strain. You authorize this read access; we never write to your Whoop account.

Training and nutrition logs. Workouts, sets, reps, loads, meals, macros, and supplements that you log into the app.

AI conversations. Messages exchanged with the Recomp coach are stored against your account so the assistant can recall context across sessions.

The data above powers the service: rendering your dashboard, generating coaching responses tailored to your history, calibrating your macro targets against your weight trend, and showing weekly performance scores. We use aggregated, anonymized metrics to improve the product (e.g. average response latency, feature adoption).

We do not sell your data to third parties. We do not run behavioral advertising. Your training history will not be used to market unrelated products to you.

We rely on a small set of vendors to operate Recomp. Each one processes only the data needed for its role:

• Supabase — Database, authentication, and file storage. Hosted in the US.
• Anthropic (Claude) — AI coaching responses. Conversations and the surrounding context (training, nutrition, recovery) are sent to Anthropic for inference.
• Whoop — Source of biometric data (HRV, sleep, recovery, strain) when you connect your Whoop account. We read; we never write back.
• Vercel — Application hosting, serverless functions, edge delivery.
• Resend — Transactional email (sign-up confirmation, password reset, beta invitations).

We may also disclose data when required by law (subpoena, court order) or to protect the safety of our users.

If you are in the EU/EEA or UK (GDPR): You have the right to access your data, correct inaccuracies, request deletion, port your data to another service, restrict certain processing, and object to processing based on legitimate interest. We respond within 30 days.

If you are a California resident (CCPA): You have the right to know what personal information we collect, request deletion, opt out of any sale of personal information (we do not sell), and not be discriminated against for exercising these rights.

To exercise any of these rights, write to legal@recomp.placeholder from the email address on your account.

We keep your data for as long as your account is active. If you delete your account, your personal data is removed from our production database within 30 days. Anonymized backups may persist for up to 90 days before being purged on rotation.

You can delete your account anytime from Settings → Account, or by writing to legal@recomp.placeholder.

Recomp uses essential session cookies only — strictly necessary to keep you signed in and to remember your theme preference. We do not use tracking cookies, analytics cookies, or advertising cookies. There is nothing to opt out of because nothing is tracking you.

Questions about this policy or about your data go to legal@recomp.placeholder.

We may update this policy as the product evolves or as new regulations apply. Any change is posted on this page with a new effective date. If a change materially affects how we use your data, we will notify account holders by email.