Privacy Policy

Last updated: August 2026

What this app does

After Everything is a personal fitness tracker. You log daily weight, calories, steps, sleep, mood, and custom activities. The app tracks your progress against a goal you define.

Data collected

• Health data — weight, calories, steps, sleep duration, mood, training sessions, and custom activity metrics you enter manually.
• Account data — your email address, used only to sign you in via Supabase Auth (magic link or Google OAuth).
• No inferred data — we do not track location, contacts, browsing history, or anything outside what you explicitly log.
• AI-generated content — if you use an optional AI feature, the text it produces about your own data is stored alongside it so you can look back at it. See "AI features" below for what is sent where.

Where data is stored

• On your device — all data is kept in your browser's localStorage first. The app works fully offline from this local copy.
• Supabase cloud — when you are signed in and online, your data is synced to a Supabase database so it is available across your devices. The database is hosted by Supabase (EU/US infrastructure). Only you can read your data — access is enforced by Row Level Security policies that reject any query not matching your authenticated user ID.

Who can see your data

No one except you, with one narrow exception: if you choose to use an optional AI feature (see below), the specific text relevant to that feature is sent to our AI provider to generate a response. Outside of that, your health data (weight, calories, steps, sleep, mood, activities) is never shared with, sold to, or accessible by any third party. There are no ad networks and no cross-site trackers in this app. We do use two lightweight, privacy-conscious tools described below to catch bugs and understand whether the app is actually helping people — neither one records what you type or see on screen.

AI features

Some parts of the app (explaining an insight, an onboarding reflection, a chapter retrospective) are optional and off by default. You choose to turn them on, and each one only sends what it needs to answer that specific request — your own logged notes, answers, or computed insight text, never your full history in one go, and never used to train any AI model. These features currently run through a limited early-access allowlist while we test them: they are not yet open to every user, on purpose, to keep spend and quality controlled during the trial. We never use pressure or urgency in what these features say back to you — this is not a marketing tool, it is a mirror for your own data. Requests are processed by Anthropic (the maker of the Claude models we use); see Anthropic's privacy policy for how they handle requests they process on our behalf.

Third-party services

• Supabase — authentication and database. Supabase privacy policy.
• Google Fonts (Inter) — font stylesheet loaded from Google's CDN. Google may log the request. No personal data is included in the request.
• jsDelivr CDN — Supabase and Chart.js libraries are loaded from jsDelivr. No personal data is sent.
• Cloudflare Pages — the app is hosted on Cloudflare Pages. Cloudflare may log IP addresses for security and performance purposes. Cloudflare privacy policy.
• Cloudflare Web Analytics — aggregate, privacy-friendly pageview and performance stats. No cookies, no cross-site tracking, no personal data. Cloudflare privacy policy.
• Sentry — error monitoring. If the app crashes or hits a bug, technical details (what broke, browser/device type) are sent to Sentry so it can be fixed. No health data, no screen recordings. Sentry privacy policy.
• PostHog — product usage analytics. We record a small set of named milestones (e.g. finished onboarding, saved first log, opened a particular tab, returned after some days) so we can see whether the app is genuinely working for people, not to build an engagement or ad profile. Session recording and click/keystroke tracking are explicitly turned off. PostHog privacy policy.

Exporting your data

You can download all your data at any time from the Plan tab → Profile Settings → Export. Two formats are available: CSV (active plan entries) and JSON (full backup of all profiles and plans).

Deleting your data

• Local data — clearing your browser's site data for this domain removes everything stored locally.
• Your logged data (cloud) — if you're signed in, use Delete account in the app menu (You tab). This immediately and permanently erases all your logged entries, plans and profiles from our database. This cannot be undone.
• Your account record — Delete account also signs you out and clears the local copy of your data. The bare account identifier (your email address, holding no logged data) may take a little longer to be fully removed; contact the app owner at the email below if you'd like this expedited.

Data retention for inactive accounts

We do not automatically delete or purge your data for inactivity. If you stop using the app for months and come back, your history is still there. Deletion only happens if you choose Delete account yourself (see "Deleting your data" above) — there is no separate, quieter path that removes a dormant account's data without you asking for it.

Children

This app is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If this policy changes materially, the "Last updated" date above will change. Continued use of the app after a change constitutes acceptance.

Contact

Questions about your data: [email protected]