Privacy
How Gainloop handles your data
Your account, your data only
Every page and data request checks who is signed in, and every record is tied to your account, so no other user can ever see your logs, photos or plans. Passwords are stored as one-way hashes. Two-factor sign-in is available in Settings.
What's stored
Meals and nutrition, water, weigh-ins, measurements, body-fat readings, workouts, Apple Health activity, supplements, daily check-ins, reviews and research notes — in a private Postgres database (Neon). Calculations (calories burned and left to eat, macros, averages, trends, e1RM, nutrient limits) are done by code, not by AI.
Photos
Progress photos are stored in a private storage bucket (or the private database) and are only ever served to you while signed in — there are no public or shareable links. Location and camera metadata (EXIF) are stripped in your browser before upload. Food photos are kept as small thumbnails on the meal they belong to.
AI
AI is used to read food photos and descriptions, scan supplement labels, answer questions about your own logs, word your reviews and summarize research. Requests go to models via OpenRouter, connected through OpenRouter's sign-in and stored encrypted. Progress photos are only sent when you've turned on photo analysis and tap Analyze, always through zero-data-retention endpoints, and the AI never estimates body-fat % from a photo. Private AI routing (Settings) extends zero retention to chat, reviews and research.
If the morning email is on, a summary of your numbers (no photos) is sent to your own inbox through Resend. Turn it off any time in Settings.
Apple Health
If you set up sync, your iPhone sends active and resting calories, steps, exercise minutes, distance, Apple Watch workouts, sleep, resting heart rate, weight and body fat using a token you create. The home-screen widget uses a separate read-only token that can only see today's totals. Only a fingerprint (hash) of each token is stored, and any token can be revoked.
The owner's notes
Today's food entries (name, time and macros), daily totals, targets and morning weight are mirrored to the owner's private Obsidian knowledge base for the owner's own account only — no other user's data is ever copied there (a private GitHub repository) so other personal tools stay in sync. Photos, body measurements and check-ins are never mirrored. The tracker's database stays the source of truth for logs.
Export & delete
Everything can be downloaded as JSON or CSV from Settings, and you can permanently erase all tracking data, or your whole account, there. Health data is collected only with your consent at sign-up, is never sold, and is never shared for advertising. If a breach ever affected your data, you'd be told within 60 days as the FTC Health Breach Notification Rule requires.
Last updated October 11, 2026