What we store, and what we do not

If you never sign in, your information never leaves your device. The profile you set up, the week you plan, the meals you rate and the ones you exclude are all written to your browser’s own storage under keys beginning fma:. We cannot read them, because they are never sent anywhere. Clearing your browser data, or the app’s data in Android settings, deletes them permanently and we have no copy to restore.

An account exists so a plan follows you between a phone and a laptop, and so a second parent can see the same week. Signing in is by email and password, or through Google if you choose that. Accounts are for the adult. A child is never asked to make one.

Stored on our behalf, we hold:

• Your email address, to identify the account and let you sign back in.
• Your athlete’s first name, age, weight, height, sex, sport and position. Every number the planner produces scales off these, which is the whole reason it asks. A nickname works as well as a real name.
• What you planned and what they thought of it: the week’s meals, star ratings, foods you have excluded, hydration entries, and any recipe you imported.
• Anyone you invite to share the household, by the email address you send the invitation to.

This sits in a Postgres database hosted by Supabase, protected by row level security, which means the database itself refuses to return another household’s rows rather than relying on the app to remember to filter them. Email delivery for sign-in and invitations runs through the same provider.

• The account holder is a parent or guardian. By entering a child’s details you are giving consent, as their parent, for us to store them for the purpose described above and nothing else.
• A child’s information is never used for advertising, never used to build a profile, and never sold or shared with anyone outside the providers listed here that are needed to run the service.
• Calorie figures are deliberately hidden from athletes under 13, following American Academy of Pediatrics guidance. That is a product decision rather than a privacy one, but it comes from the same place.
• To see, correct, or delete everything held about your child, email hi@fuelmyathlete.com and it will be done. Deleting the account removes the household and every row attached to it. The steps, and the full list of what goes and what stays, are on the account deletion page.

• Google Analytics counts page views so we know which guides get read. Its advertising features are explicitly disabled: no Google Signals, no ad personalization. It is measurement, and it is not allowed to become anything else.
• Notifications are opt-in through the Android permission prompt, and the app only asks once you have an account and an athlete set up. Declining is remembered and you will not be asked again. If you allow them, a device token is stored so a reminder can reach that phone.
• Importing a recipe by link sends that URL to our server so the page can be fetched and read. The link is used for that and not kept as a browsing record.
• Hosting. The site runs on Vercel, which keeps standard server logs including IP addresses for a limited period, as any web host does.

Asking us anything

Questions, corrections, or a request to delete an account go to hi@fuelmyathlete.com. If this policy changes in a way that affects what we hold, the date at the top moves and the change is described here rather than applied quietly.