simplefast. Back to your day
YOUR INFORMATION, YOUR CHOICES

Privacy policy

Simple Fast is a private space for your fasting and meal journal. This policy explains what information the service handles and the choices you have.

Effective and last updated:

Your journal is yours.

We do not sell your personal information or share it for advertising. We use service providers to run Simple Fast. Optional AI and Connections features process or share information when you choose to use them.

Information we handle

Account information. If you register, we handle your email or username, account identifier, sign-in information, and any name you provide. Our authentication services process passwords or social sign-in credentials.

Shared Simple membership. Simple Fast and Simple Lift use one account and subscription. Membership status and AI usage are shared to provide access and enforce the common allowance. Each app keeps its own records; sharing an account does not publish your journal or workouts to other users.

Information you record. Your journal may contain meals, photos, notes, nutrition, fasting times and targets, weight, water entries, optional body measurements (waist, hips, chest, upper arm, thigh, and body-fat percentage), and preferences. These records may reveal information about your health. Optional details are your choice.

Features you use. Connections stores invitations, relationships, sharing preferences, messages, and notifications. AI features store your requests, responses, analyses, and related usage information. If you contact us, we receive your message and contact details.

Technical information. The service and its providers handle information needed to deliver and protect the app, such as IP addresses, browser and device details, request logs, authentication events, and error information.

Google and Microsoft sign-in

Social sign-in uses Auth0 and Supabase. Google or Microsoft provides a stable account identifier, email address, verification information, and available name details. We use this information to create and authenticate your account. Auth0 stores the social identity profile; Supabase stores your app account and manages sessions. Verified email matching may connect both sign-in methods to the same account.

We request only basic sign-in permissions: openid, profile, and email. We do not request your email messages, contacts, calendars, or cloud-drive files. Google and Microsoft handle their own password screens. Signing in does not itself send your journal to an AI provider.

How information is used

We use information to provide your journal, authenticate you, synchronize your records, deliver features you request, respond to support requests, troubleshoot problems, prevent abuse, and meet applicable legal obligations. We do not use your journal or social sign-in data for advertising.

Services and sharing

Operating the app. Vercel hosts Simple Fast. Supabase provides authentication, database, and private photo storage. Auth0 connects social sign-in, with Google or Microsoft involved when you select that provider. These services process information needed for their functions.

Optional AI. AI assistance is off by default. If you enable it and request help, relevant journal entries, your question and conversation context, or meal descriptions and photos you select for analysis are sent from our server to Google Cloud Vertex AI for processing by Gemini. The coach does not automatically receive your recorded body measurements (waist, hips, chest, upper arm, thigh, or body-fat percentage). Anything you include in your question or conversation is still sent when you request AI help. AI processing is also subject to the provider’s applicable terms and data practices. If the optional USDA FoodData Central lookup is enabled, food-name search terms are sent to that service. Turning AI off stops future requests through these features; it does not erase earlier results.

People you connect with. Someone who knows your username or email can send you an invitation. An accepted connection lets you exchange messages. Activity sharing is off by default and can be enabled separately for each connection. Shared activity notices identify an event and its time; they do not include meal photos, meal contents, or weight values. Body measurements do not create shared activity notices. Recipients may retain information they have already seen.

Other disclosures. We may disclose information when required by law or reasonably necessary to address fraud, abuse, security incidents, or threats to people’s safety. We do not sell personal information or share it with advertisers.

Storage and security

A guest journal stays in your browser. Signed-in records synchronize to our backend, with a browser copy for offline use. We use cookies and browser storage for authentication, preferences, journal records, fasting check-in acknowledgements, and offline functionality.

We use HTTPS, authenticated access controls, and private photo storage to protect information. No system can guarantee absolute security. Information may be processed in countries where our service providers operate.

Account records do not have an automatic expiration. You can delete records or request deletion as described below. Backups, security logs, authentication records, and information needed for legal obligations may remain after active records are removed. Retention varies by the record and provider; contact us for help with a specific request.

Your choices and deletion

You can edit or delete journal entries, turn AI off, control activity sharing, and disconnect or block connections. Settings offers a journal export; it does not include image files, separate messages, or separately stored coach conversations.

Delete whole Simple account in Settings or the membership page cancels your shared subscription and removes the account and linked Fast and Lift cloud records, with cleanup of referenced Fast photos. It also clears that account’s Fast journal and photos from the browser you use to delete it. To remove only Lift workouts while keeping your account and membership, choose Delete Lift data in Lift. App data deletion does not reset the shared AI allowance. Signing out does not delete your cloud account.

Deletion does not erase your Google or Microsoft account, previously exported copies, information another person retained, or browser copies on other devices. Separate Auth0 identity records and provider logs may remain. Contact us to request help with those records. You can also remove Simple Fast’s access in your Google or Microsoft account settings.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. Contact us to exercise applicable rights. We may need to verify your identity to protect your information. If you believe a child has provided personal information without appropriate permission, please contact us.

Changes to this policy

We may update this policy as the service changes. We will update the date above and provide a prominent notice in the app or another appropriate notice before material changes take effect. Where required, we will ask for consent before using previously collected information in a materially different way. A policy update alone does not remove choices or permissions required by law.

Contact us

For Simple Fast privacy questions or requests, email jbcupps@gmail.com. Please avoid including sensitive journal details in your first message.