Privacy Policy

1. The short version

• The Service is for adults 18 and over.
• Much of what you give us is health information — your weight and body measurements, injuries, what you eat, your workouts, progress photos, and what you tell the coach. We treat all of it as sensitive and ask for your consent before collecting it.
• An AI provider (Anthropic) processes some of it for us: to answer you in the coach and to estimate a meal from a photo. It may not use your data to train its models.
• Other members see only what you choose to share by joining a board or adding a friend — never your email, food logs, injuries, coach chats or photos.
• We do not sell your information, do not use it for advertising, and run no third-party trackers.
• You can delete your account yourself, at any time, from your account page. For a copy of your data, download it yourself from the same page (or email us — we answer within 45 days).

2. What we collect

Only what you give us, what you log, and what the Service needs to run. We do not buy personal information or receive it from data brokers.

2.1 Account

• Email address — sign-in, verification, password reset, and finding you if a friend types your exact email
• First name — addressing you in the app and in email
• Password — stored only as a one-way hash; we never see it
• Time zone and unit preference — so days, streaks and numbers are right for you
• Your agreement to the Terms and your health-data consent, with the date and the policy version
• Your answer on the AI-coach consent screen (shown before your first coach message or meal-photo estimate), with the date and the version of that screen
• If you tell the coach you are under 18: a note on your account that you may be a minor, with the date
• Reports you make about another member's picture or name, or that others make about yours (who reported what, and when), kept for the review

2.2 Health and fitness information (sensitive)

• Age, sex, height, current and goal weight, a body-composition self-assessment, activity level, goal and pace — to calculate your calorie and macro targets
• Injuries — the areas, whether you have seen a specialist, the rehab exercises you were given, and how long you expect to be out — to keep unsafe movements out of your plan
• Food allergies, diet, and the foods and exercises you like or dislike
• Your answer to the one health question we ask when you build your plan (whether you are pregnant or breastfeeding or have a medical condition that affects what you eat or how you train), with the date and the version of the question; and that you confirmed the training safety statement before your first training plan, with the date and the version
• What you log: check-ins, food logs and saved foods, water and caffeine, workouts (exercises, sets, weights, reps, how it felt, notes), weight and lift records, and goals
• Progress photos (optional) — shown only to you. Your progress photos leave the app only in our weekly encrypted backups, kept for up to 6 months, and in your own data download if you tick “Include my photos”.
• Coach chats — your messages, the coach’s replies, and a short “memory” of things you told it, which you can read and wipe in the coach
• Meal photos you send to the coach or the food log to estimate a meal — sent to our AI provider to read, not stored by us

2.3 Social and rewards

• Username, an optional board name, an optional profile picture, your friends and friend requests, and which boards you joined
• Referral links, the friends you brought in, and any reward or monthly prize you earned or claimed
• If you tap to talk to Charlie about coaching: your first name, email, goal, streak, whether you have a meal and training plan, and your signup date are saved and emailed to Charlie so he can reach out

2.4 Technical

• IP address — used for rate limiting and abuse prevention; where we keep it, we keep a salted hash, not the address
• Browser fingerprint hash — binds your session to your device so a stolen cookie is less useful
• Product events — which screens and steps you reach and which buttons you press, so we can tell whether the product works. A few safety moments are counted the same way, with no message content: the coach pointing someone to crisis help, a suspected minor, and the AI-coach consent.

3. Cookies and similar storage

We use first-party cookies only. No advertising cookies, and no third-party scripts, fonts or trackers load in your browser, with one exception: when it is switched on, Cloudflare's bot check (Turnstile) loads from Cloudflare on the sign-up and password-reset pages to check that the request comes from a person.

• nd_session — keeps you signed in. It stops working after 30 days without use, and 90 days after you sign in at most, or when you sign out. Strictly necessary.
• nd_vid — a random visitor ID (it contains nothing about you), kept for a year, used only for our own product analytics: it links the steps you took before signing up to your account. It is never sent to anyone else. If you visit from the European Union, the EEA or the United Kingdom, we don't set it.
• nd_ref — the referral code you arrived with, for 30 days, so the friend who invited you gets credit.
• nd_unit — your pounds/kilograms choice before you have an account.
• Your browser’s local storage holds small interface settings (for example, which tips you have already seen).

Do Not Track and Global Privacy Control: we do not sell or share personal information for advertising, so there is nothing to opt out of; if your browser sends a GPC signal we treat it as an opt-out anyway.

4. How we use it

• To build, show and adapt your calorie targets, meal plan and training plan, and to keep your streaks and schedule right
• To run the coach, the boards, friends, referrals and the monthly prize
• To let the coach mention Charlie’s paid 1:1 coaching inside the app: when you ask about it, or rarely when you use the coach a lot. When it brings it up itself, its first question is only whether you want to hear how it works, and never uses your health information. If you ask, or say yes, the coach uses what you've told it about your goals to explain how it would fit you. We record your yes or no (never your message) and never share it with anyone. It never emails or texts you about it, and after you say no twice it stops asking.
• To keep logs safe: the app won't log more than 256 oz of water or 2,000 mg of caffeine in a day.
• To send service email (verification codes, password resets, and confirmations you asked for)
• To keep the Service secure and to fix it
• To see, in aggregate, how the product is used

We do not use your information for advertising, sell it, or make automated decisions about you that have legal or similarly significant effects. We do not use your data to train AI models, and neither may our AI provider.

5. Artificial intelligence

The coach and meal estimates from photos are produced by AI, not written by a human, and not checked by one before you see them. AI output can be wrong. It is general fitness information, not medical advice. The AI is provided by Anthropic, PBC, acting as our service provider. What it receives:

• The coach: your message, recent messages in the conversation, and a summary of your account so it can help you — your first name, goal and pace, current weight, targets, this week’s training, today’s food and the last few days’ calories, water and caffeine, your goals, injuries and rehab, diet, dislikes and allergies, and the coach’s memory. Never your email or password.
• Meal photos: the photo you send, to estimate the meal.
• Your meal plan and training plan are built by our own engine with no AI call.

Before you first use the coach or a meal-photo estimate, we ask you on a separate screen to agree to send what you type and the photos you send, with the parts of your plan, logs and goals the coach needs, to Anthropic. We record the date and the version of that screen, and nothing is sent to Anthropic before you agree. Anthropic says it does not train its models on data sent through its API and deletes it within 30 days, unless it is flagged for breaking Anthropic's usage policy (kept for up to 2 years) or the law requires it to be kept longer.

If a message suggests a crisis, self-harm or disordered eating, the coach points you to the 988 Suicide & Crisis Lifeline and to a doctor or a trusted adult, and shows no coaching offer for three days. We count how often this happens, without any message content. How the coach handles these moments: Coach safety.

6. What other members can see

Nothing about you is shown to other members until you join a board or add a friend. Those are separate choices, each with its own screen that says what it shares, and you can leave either one at any time in Settings.

• Anyone signed in who searches your username or name, or types your exact email address, sees your name, @username and — if your picture switch is on — your picture. Never your email.
• The global leaderboard (if you join it) shows your board name, @username, streak and points to every member. Joining also puts you on the category boards (weight change, bench, squat and deadlift), which show your gain in that category (the change, never the numbers you logged); you can leave any one of them from its tab.
• Your friends (once you add or accept each other, which puts you on the friends board) see your streak and points, your weight, bench, squat and deadlift logs, and how many of your planned meals you checked off in the last 7 days.
• Never shown to another member: your email, food logs, injuries, coach chats, progress photos, custom PRs, water and caffeine, and your plans.

The boards also include a small number of house demo profiles: accounts we create, whose check-ins and logs are generated by the Service rather than by a person. They are not real members, and they can never win a prize, a challenge or a referral reward (see the Prize Rules).

7. Who we disclose it to

We do not sell personal information, have never sold it, and do not “share” it for cross-context behavioural advertising (as the CCPA defines those words). We disclose it only to service providers that process it on our instructions, under contract, and may not use it for themselves:

• Railway Corp. (USA) — hosting and database: everything the Service stores
• Anthropic, PBC (USA) — AI, as described in section 5
• Resend (USA) — your email address and the message, to send service email
• Cloudflare, Inc. — network request data, for security and delivery, and, when it is switched on, the bot check on the sign-up and password-reset pages (Turnstile), which receives your IP address and signals from your browser for that check only
• Apple Inc. (iCloud) and Google LLC (Google Drive) — storage for our encrypted database backups. Each copy is encrypted on our own computer before it is uploaded, and neither company holds the key.
• GitHub, Inc. (USA) — a nightly backup job runs on GitHub's servers: it downloads the database export, encrypts it within seconds and stores only the encrypted file in a private repository. The most sensitive fields are already encrypted inside that export.

Not disclosed: we do not send your information to our customer database. To see how many free members book a coaching call, we read our own booking records and compare email addresses on our side; nothing about you is sent there.

We may also disclose information if the law requires it, to protect the safety of a person, or as part of a merger or sale of the business (the buyer would be bound by this policy).

8. How long we keep it

• Your account and everything in it — until you delete your account. Accounts are not deleted for inactivity.
• When you delete your account — erased from the live database immediately, including your pre-signup visit events and the email log addressed to you.
• Backups — encrypted copies of the database are kept for up to 6 months, then destroyed. They live on our own computer, in iCloud, in Google Drive and in a private GitHub repository, always encrypted. A deleted account’s data stays in those encrypted copies until they expire, and we do not use them to bring a deleted account back.
• Email log — 30 days
• Rate-limit records — 24 hours or less; the daily plan-build counter (with a salted network hash) stays with your account until you delete it
• Our AI provider — up to 30 days (section 5)
• Anonymous visit events that never became an account — kept to measure the product, with no name or email attached

9. Your rights and how to use them

Wherever you live, you can ask us to: confirm what we hold; give you access to it and a copy in a machine-readable file; correct it; delete it; and withdraw your consent to health data. You can also ask for the list of everyone we disclosed it to (section 7). We will not treat you differently for using these rights.

Delete it yourself: sign in, open your account page, and use Delete account. It is immediate and cannot be undone.

Get a copy yourself: sign in, open your account page, and use Your data → Download my data. You get a machine-readable (JSON) file of what your account holds — your profile, answers, plans, logs, goals, coach chats, consents, board entries and rewards, and your friends’ usernames (not their data). Progress photos and your picture are included if you tick the box. It leaves out your password, sign-in and calendar tokens. You can download it up to three times a day.

Everything else, or a copy by email: email charlieplourde.va@gmail.com from the address on your account (that is how we confirm it is you). We respond within 45 days; if we need longer we will tell you within that time, and we will not take more than 45 days more. You may use an authorized agent; we will ask for proof that you authorized them.

If we say no, we will explain why. You can appeal by replying with the subject line “Appeal”; we answer appeals within 45 days, and if we still say no you may complain to your state Attorney General.

10. Security

• Passwords are stored only as one-way hashes; all traffic is encrypted (HTTPS).
• Coach chats, the coach’s memory, injuries and food preferences are encrypted in the database.
• Progress photos have no public address and are served only to you, behind your session.
• Backups are encrypted before they are stored.
• Admin access is separately authenticated and limited to approved devices, and the admin view does not display your health data, photos, food logs or coach chats.

No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as US state breach laws and the FTC Health Breach Notification Rule require — for health information, without unreasonable delay and within 60 days of discovery.

11. Age

The Service is for adults 18 and over. Signup requires you to confirm you are 18 or older, and the age you enter cannot be below 18. We do not knowingly collect information from anyone under 18; if you think we have, email charlieplourde.va@gmail.com and we will delete it.

If you tell the coach you are under 18, we record that on your account, stop showing you any coaching offer, take you off every leaderboard and out of every prize, and email our owner a one-line notice with a link to your account (never what you wrote). If you tell the coach you are under 13, we delete your account and its data.

12. State-specific notes

Washington, Nevada and Connecticut (and anyone with consumer-health-data rights): see our separate Consumer Health Data Privacy Policy, which applies on top of this one.

California: the categories we collect are identifiers (email, name, username), sensitive personal information (health information, account log-in), internet activity (product events), and the inferences in your calorie and macro targets — collected from you, for the purposes in section 4, kept as in section 8, and disclosed only to the service providers in section 7. We do not sell or share them, and we use sensitive information only to provide the Service you asked for. We do not disclose personal information to third parties for their direct marketing.

EEA / UK: New Debut isn't open for new sign-ups from the European Union, the EEA or the United Kingdom yet, and we don't set our visitor cookie (nd_vid) for visitors from there; existing accounts keep working. The Service is run from the United States and is not aimed at the EEA or UK. If you use it from there, we process your account on the basis of our contract with you and your health data on the basis of your explicit consent, and you may complain to your data protection authority.

13. Changes

When we change this policy we update the version and date above. If a change is material — especially to how we use or disclose health data — we tell you in the app or by email before it takes effect and ask for your consent again where the law requires it. We record which version you agreed to.