[Business name required — lawyer review] operates Protein Hacks, featuring Protein Hacks. This draft describes how member information is handled.
We store your email, profile and preferences, meal plans, grocery lists, favorites, prep history and saved timers. If you have access grants, we store the email and access details used to enable your membership. Avoid entering sensitive health information.
Your member information is shared with the creator whose app you use and the business operating their app to provide your membership, support and meal planning. Authorized service providers process information to host the app, store data and send sign-in emails. We do not sell your personal information.
Lovable Cloud Auth handles email-code sign-in. Its configured sign-in email delivery provider processes your email address and delivery information to send codes. Provider identity must be confirmed and named here before launch; we have not verified the configured delivery provider.
Access controls restrict member data. Your browser stores your sign-in session and a device backup of prep progress. An internet connection is required. No system can guarantee absolute security.
From Account, you can download your profile, plans, groceries, favorites and prep sessions. Account deletion permanently removes your sign-in account, profile, preferences, plans, groceries, favorites and prep history, including saved timers. We keep access grants and any future purchase records linked to your email so eligible paid access is restored if you sign up again and verify the same email. Existing expiry dates and access conditions still apply; your deleted profile and meal data do not return. Shared creator content stays. Copies already exported, sent in emails or held in provider backups may persist under their retention policies. Contact [Support contact required before launch] about privacy rights or deletion of retained records. A lawyer must review the legal basis and retention periods for email-linked access and purchase records, provider logs and backups before launch.
Confirm legal bases, controller and processor identities, any international transfers and safeguards, exact retention periods, rights and complaint channels, age restrictions, and the actual email provider before publishing this policy. Contact: [Support contact required before launch].