Legal · v1.1

Privacy Policy

Effective date: November 2, 2026

Information collected

We may collect account and contact information; cycle and reproductive-status inputs; symptoms; nutrition and hydration logs; workouts and recovery; assessments; measurements; progress, posture, and assessment photos; communications; technical and consent records; and wearable information if integrations are added and separately authorized.

Why we collect it

Data supports account access, program delivery, personalization, progress tracking, safety screening, customer support, billing, fraud prevention, service improvement, and legal compliance.

How information is used

We use information to provide requested features, calculate program targets, adapt recommendations, identify safety concerns, maintain records, communicate with you, and operate and secure Anastasis. We do not promise that automated analysis is clinically accurate.

Posture photos and landmarks

If you use posture tools, your assessment photos and the landmarks you place, review, and confirm may be saved with your assessment. Photo quality and point placement can affect the usefulness of those records; they are not medical diagnoses. This processing remains limited to intended service purposes and subject to access controls and vendor terms.

Vendors and subprocessors

Current service providers reflected in the application include Supabase for authentication, database, and storage-related backend services; Vercel for hosting and deployment; Stripe for checkout and billing; Resend for transactional email; and PostHog for privacy-limited product analytics. Administrative social-content tooling may connect to TikTok or Instagram only when configured for internal operations. We may update providers as the service changes and will not use analytics to intentionally collect raw reproductive, symptom, medication, clinician, laboratory, or medical-history details.

Retention and deletion

We retain data only as long as reasonably required for service delivery, safety, financial records, dispute handling, security, and legal obligations. You may request access, correction, export, or deletion. Some records may be retained where law, fraud prevention, contract enforcement, or safety requires it.

Your rights and choices

Rights vary by location and may include notice, access, correction, deletion, portability, restriction, consent withdrawal, and marketing opt-out. Withdrawing optional research consent does not terminate program access.

Security

We use access controls, encrypted transport, row-level database controls, restricted server credentials, audit records, and vendor safeguards. No system is perfectly secure. Sensitive information should not be sent through unapproved channels.

Incidents and breach notification

We maintain detection, containment, investigation, documentation, and notification procedures. If a reportable breach occurs, we will provide notices required by applicable law, which may include consumer and regulator notification.

Version and contact

Version v1.1; revised and effective November 2, 2026. Contact Anastasis.elite@gmail.com for privacy or deletion requests.