Last Updated: July 25, 2026
HealthMaxxing ("we", "our", or "us") operates the HealthMaxxing mobile application (the "App") and the public website at maxxing.health (the "Website"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App or Website.
This Privacy Policy is a notice of our practices. It does not replace any separate consent we request when consent is required by law.
We collect several types of information to provide and improve our services:
Account Information: When you create an account, we collect your name, email address, and authentication credentials. You may also sign in using third-party services such as Google or Apple, in which case we receive basic profile information from those providers.
Health and Wellness Data: To provide personalized tracking and insights, we collect data you voluntarily enter, including your height, weight, desired weight, activity level, dietary preferences, food logs, nutrition data, and progress photos. If you use the corresponding features, we also collect your mind and mood check-ins, journal and reflection entries, voice memos, and optional menstrual-cycle logs (period and symptom entries). Like your other health data, these are stored on your device and, when you are signed in, backed up to your private cloud profile — except voice memo recordings, whose audio stays only on your device (their titles, notes, and attached photos are backed up). We do not send raw or reasonably linkable health and wellness data to analytics or advertising services.
Optional Health Details: You may optionally provide allergies, current medications, and relevant medical history to personalize certain features — for example, flagging foods in AI analysis results that conflict with an allergy you have listed. On your device, these fields are kept in encrypted secure storage. If you are signed in, they are also backed up to your private cloud profile (Google Firebase, encrypted in transit and at rest) so they can be restored if you reinstall the App or change devices. These fields are never shared with analytics or advertising services, and you can edit or remove them at any time in your profile.
Purchase Information: If you subscribe to HealthMaxxing Pro, our subscription partner RevenueCat processes the purchase receipt issued by Apple or Google together with an app user identifier so we can activate and restore your subscription across your devices. We never receive or store your payment card details.
Usage Data: We automatically collect information about how you interact with the App, including features used, screens visited, and session duration. This helps us improve the App experience.
Device Information: We may collect device type, operating system, and an opaque app or device identifier to operate the App, diagnose problems, and understand product use.
Mixpanel receives product-use events and an opaque user identifier. We do not send raw health values, wearable measurements, journal text, voice recordings, or photos.
First-Party Aggregate Website Statistics: We count broad page categories, reading-depth milestones, and selected link actions so we can improve the Website. The Website sends only short, predefined categories to a HealthMaxxing-owned endpoint. It does not send exact page paths, page titles, raw referrer URLs, names, email addresses, App account identifiers, health logs, journal text, or other personal content to Google Analytics or another analytics provider. The endpoint immediately adds each event to a daily total and does not create a visitor-level record or store an IP address, user-agent string, cookie identifier, device identifier, or session identifier in the analytics data. Netlify and Google Firebase may process standard network metadata transiently to deliver and protect the request, as they do for other Website traffic.
We do not set analytics cookies. We honor enabled Global Privacy Control and Do Not Track browser signals. You can also object to these aggregate statistics below; that choice is stored locally in your browser and can be changed at any time.
Website statistics preference
Checking your browser preference…
Website Waitlist: If you submit the waitlist form on the Website, we collect your email address, a short label identifying which page or language version the form appeared on, and the time of submission. We do not ask for or collect your name, and the form collects no health information of any kind. Your email address is stored in our Google Firebase database; the record is filed under a one-way hash of the address so that a repeat submission is recognised as a duplicate rather than stored twice. The address itself is not written to our server logs. We use this address only to email you about the HealthMaxxing launch and occasional pre-launch progress updates, and to manage that mailing through our email delivery provider (Kit). We do not use it for advertising, we do not sell or rent it, and we do not add it to your App account or link it to App or health data. Every email includes a one-click unsubscribe link, and you can ask us to remove you at any time by writing to privacy@maxxing.health. If you unsubscribe or ask to be removed, we delete the address.
Aggregated and Deidentified Information: We may create statistical information that is aggregated or deidentified so that it cannot reasonably identify or be linked to you, your household, or your device. We may use, disclose, license, or commercialize this information for analytics, benchmarking, research, product development, industry reports, and other lawful business purposes. We do not currently sell personal information or identifiable health data. We take reasonable measures to prevent reidentification, publicly commit not to reidentify this information, and contractually require recipients not to attempt reidentification.
We will not include names, email addresses, account or device identifiers, precise location, photos, voice recordings, journal or reflection content, mind or mood data, menstrual or cycle data, allergies, medications, medical history, information obtained from Apple Health or Health Connect, or information from accounts known to belong to users under 18 in commercial aggregate products.
We use the information we collect for the following purposes:
HealthMaxxing can connect to Apple Health (iOS) or Health Connect (Android) to read the following data types:
With your permission, HealthMaxxing can also write the following data back to Apple Health or Health Connect:
If you use HealthMaxxing as a guest (without an account), data imported from Apple Health or Health Connect stays on your device only. If you are signed in, some imported health data you log in HealthMaxxing (such as sleep, workout, and weight entries) may be backed up to our secure cloud (Google Firebase) so it survives reinstalls and syncs across your devices. You can turn this off with the "Back up imported health data" toggle under Connected Apps in Settings, in which case imported health data stays on your device only. Imported health data is never sold to third parties, used for advertising, or sent to analytics or advertising services.
You can connect or disconnect Apple Health / Health Connect at any time from your Profile settings. When disconnecting, you can choose whether to keep already imported entries or remove wearable-sourced sleep, workout, and weight entries from the app. Your data in Apple Health / Health Connect is never modified or deleted by HealthMaxxing unless you explicitly choose to sync data back.
You can manage which data types HealthMaxxing can access through your device Settings:
HealthMaxxing uses artificial intelligence (Claude by Anthropic) to power the following features:
To provide these features, the information needed for the feature you choose — which may include food photos, meal descriptions, journal text, health and wellness summaries, or connected-device summaries — is sent to our AI processing service through a secure proxy only after you enable AI features.
Under Anthropic’s standard commercial API terms, inputs and outputs may be retained for up to 30 days and are not used for model training by default.
If you manually correct an AI nutrition estimate, we store the correction — the food name and nutrition values before and after your edit, never your photo — linked to your account identifier. We use these corrections solely to measure and improve the accuracy of our AI estimates. They are deleted when you delete your account.
AI-generated estimates are not medical advice. Always consult a healthcare professional for medical decisions.
We do not sell, rent, or trade personal information or identifiable health data. This restriction does not prevent our use or commercialization of aggregated or deidentified information as described above. We may share your data in the following limited circumstances:
Service Providers: We use trusted third-party services to help us operate the App and Website, including Website hosting (Netlify), cloud services and first-party aggregate Website counters (Google Firebase), App analytics (Mixpanel), error monitoring (Sentry), subscription management (RevenueCat), AI processing (Anthropic), and email delivery for the Website waitlist (Kit). Kit receives only the email address you submitted to the waitlist and the fact that you subscribed to it; it receives no health data, no App account identifier, and no Website statistics. These providers only access data as needed to perform services on our instructions and are obligated to protect it. Mixpanel receives App product-use events and an opaque user identifier. The Website statistics described above are stored only as daily aggregate counters without a visitor-level record. We do not send raw health values, wearable measurements, journal text, voice recordings, or photos to analytics services. Sentry may receive an opaque App user identifier plus scrubbed crash and performance information; names, emails, request bodies, health values, and user content are removed before reports are sent. Health data from Apple Health or Health Connect is never sent to analytics or advertising services.
Legal Requirements: We may disclose your information if required to do so by law, or if we believe such action is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations.
With Your Consent: We may share your information for any other purpose with your explicit consent.
Your data is stored securely using Google Firebase infrastructure, which provides industry-standard encryption and security measures. We implement appropriate technical and organizational safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
You have the following rights regarding your personal information:
We retain personal information while your account is active or as needed to provide the service and meet legal, billing, security, and consent-record obligations. Deletion begins immediately in HealthMaxxing’s primary systems. Processor records, required records, and encrypted backups may take up to 30 days to expire. Aggregated or deidentified information that can no longer reasonably be linked to a person, household, or device may be retained for the purposes described in this Policy.
The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information promptly.
Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
The App and Website use the following third-party services to provide their functionality. Each service has its own privacy policy governing how it handles data:
We encourage you to review the privacy policies of these services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party services.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Significant changes will be communicated through the App or via email.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: privacy@maxxing.health
Website: maxxing.health