Privacy Policy
Last updated: July 29, 2026
What we collect
- Account data: your email address and password (password is stored hashed by our auth provider, Supabase).
- Profile data you enter: height, weight, target weight, age, sex, activity level, dietary preferences.
- Logs you create: meals, workouts, weights, daily summaries, and your chat messages with the AI coach.
- Optional Garmin data, only if you connect Garmin: activities and daily calorie burn.
Food photos
Food photos you submit are sent to OpenAI for meal analysis. A resized copy of each photo — and of any progress photos you upload — is stored in your account (on Cloudflare R2 object storage) so you can browse them in the app. Stored photos are only accessible to you; you can delete them individually at any time, and all of them are permanently deleted when you delete your account.
Who processes your data
- Supabase (database and authentication, hosted in the EU/US).
- Vercel (application hosting).
- Cloudflare (R2 object storage for your meal photos).
- OpenAI (AI meal and chat analysis; inputs are not used to train their models per their API terms).
- Apple (subscription payments in the iOS app; we never see your payment details).
- Garmin (only if you connect your account).
What we do not do
- We do not sell your data.
- We do not show ads or share data with advertisers.
- We do not use your health data for anything except showing it back to you and powering your AI coach.
Deleting your data
You can delete your account and all associated data at any time from the Profile page (Danger Zone). Deletion is immediate and irreversible.
Contact
CutFast is operated by Mateusz Sawka. Questions: mateusz@sawka.pro.