Privacy notice

Who we are

Harry the Health Nut ("Harry", "we", "the app") is the seller of this service and the data controller for the personal data described below. That means we decide why and how your personal data is used, and we are responsible for looking after it.

What we store

Harry the Health Nut stores the information you enter or sync so it can coach you:

• Account details: your email address and display name.
• Health and fitness logs you record: meals, water intake, workouts, steps, weigh-ins and daily goals.
• Your coaching conversations with Harry, used to personalize future guidance.
• If you connect a WHOOP account: recovery scores, strain, sleep duration, heart rate variability and resting heart rate, synced from the WHOOP API with your permission.
• Subscription status, if you become a member (payment details are handled by our payment provider and never touch our servers).

How we use it

• To show your progress, daily score, streaks and trends.
• To personalize Harry's coaching, meal ideas and workout plans.
• To manage your free trial and membership.

We do not sell your data, share it with advertisers, or use it for anything other than running the app.

WHOOP data

Connecting WHOOP is optional and done by you through WHOOP's own sign-in screen. We request read-only access to your recovery, cycle (strain), sleep and profile data, plus offline access so your numbers stay current. WHOOP access tokens are stored securely and are never visible to other members. You can disconnect at any time from the Goals page, which stops future syncing, and you can revoke access entirely from your WHOOP account settings.

AI coaching

Your logs and recent WHOOP metrics are sent to an AI model to generate Harry's replies, daily plans and weekly reviews. This data is used only to produce your coaching and is not used to train models.

Your controls

• Edit or delete any logged entry (meals, water, workouts, weigh-ins) at any time in the app.
• Disconnect WHOOP from the Goals page whenever you like.
• Cancel your membership at any time; you keep access until the end of the paid period.
• To delete your account and all associated data, contact us and we will remove everything.

Data security

Your data is stored in an encrypted, access-controlled database. Each member can only ever read their own records, enforced at the database level. Connections are encrypted in transit.

Why we are allowed to use it

• Performing our contract with you: creating your account, running the app, delivering coaching and managing your trial and membership.
• Our legitimate interests: keeping the service secure, preventing fraud and abuse, and improving the product.
• Your consent: connecting WHOOP, and any optional marketing messages.
• Legal obligations: tax, accounting and responding to lawful requests.

Who we share it with

• Service providers who help us run the app: hosting and database, and the AI provider that generates Harry's replies.
• Paddle.com, our Merchant of Record, for the sale of membership, subscription management, payments, invoicing and tax compliance. Paddle collects and handles your billing details directly under its own privacy policy; card numbers never reach our servers.
• Professional advisers such as accountants and lawyers, where needed.
• Authorities, where we are required to by law.

Some of these providers are based outside your country; where data leaves the UK or EEA we rely on adequacy decisions or standard contractual clauses.

How long we keep it

We keep your account and health logs for as long as your account is open, and delete or anonymise them when you close it, apart from records we must keep for tax and accounting. Meal photos are used only to produce an estimate and are not stored.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a portable copy, and to withdraw consent at any time. Contact us through the app and we will respond within one month. You can also complain to your local data protection authority.

Cookies

We use essential cookies and similar storage to keep you signed in and to keep the app secure. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will stop working.

Contact

Questions about this notice or your data? Reach out through the app and we'll help.