Privacy at Gainsville
Your diary is yours. We keep what the app needs to work, we never sell it, and you can take it with you or have it deleted.
Updated
What we keep
- Your account: your email address and the name you give. If you sign in with Google, Facebook, Microsoft or Discord, we get your name, email and profile picture from them, nothing else, and we don't keep their sign-in tokens. A cookie keeps you signed in on that device for up to a year; we note the kind of browser for each sign-in, not your address.
- Your household's diary: foods, meals, workouts, weight and the plans you save. Each household's diary is stored on its own and only its members can open it.
- Food likes, dislikes and allergies, if you add them in Build my plan: picked from a list, saved on your own profile inside your household, and used only to choose which recipes we suggest you. Allergies are health information: they are never sent to anyone, never used for ads, and the action record says only how many you picked, not which. The household owner can see them, as with the rest of the diary.
- Progress photos are not kept by us at all: they stay on your phone, inside the browser. We only count that one was added.
- A record of actions (for example "a meal was logged"), so we can count what gets used and fix what breaks. It names the action, not what you ate or asked.
What we never do
- We never sell your data or share your diary with advertisers.
- Signed-in screens carry no ads.
- We never send Google (or anyone) your foods, weights, workouts, body numbers, allergies or food likes, name, email or account.
- Questions you type into Ask are answered and then thrown away; we keep only a count.
Who helps run it
- Cloudflare hosts the app and stores the data, in the United States.
- Resend sends sign-in emails.
- Cloudflare Workers AI writes Ask's short answers from the question alone.
- Open Food Facts looks up a barcode you scan (only the barcode is sent).
- PubMed (US National Library of Medicine) is searched for studies on a question's topic.
- Google Analytics counts anonymous page visits: which pages and app screens are viewed (by a fixed screen name such as "Diary", never what is on it), the device type, and a rough region Google works out itself. Ad personalization and Google signals are off, and no personal information is sent: no name, email, account or member id, and no web address details beyond the page.
Children
A parent can add a child's diary to their household. The child has no login or email address with us; the parent logs for them, and the diary stays inside that household. Teens get their own login only when an adult in the household invites them.
Take your data, or delete it
- Download everything: in the app, open Settings and tap Download my data.
- Delete everything: email help@getgainsville.app from the address you sign in with and say "delete my Gainsville data". We delete your account and your household's diary within 30 days and reply when it's done. If you signed in with Facebook, this is also how you remove the data Gainsville got from Facebook.
Questions
Email help@getgainsville.app. If this page changes in a way that matters, we'll say so in the app first.
Draft wording, pending legal review.