Privacy Policy

Que ("the app", "we", "us") is a personal training and calorie-tracking app. This policy explains what we collect, why, and the choices you have.Que is offline-first: most of your data lives on your own device and is only synced to our servers when you sign in.

Information we collect

• Account information — when you sign in with Google or GitHub, we receive your name, email address, profile image, and a provider account ID. You also choose a username.
• Fitness & nutrition data you enter — workouts (exercises, sets, reps, weights), cardio, body weight, calories and macros, food logs, plans, and related notes.
• Profile photo — if you upload one, it's stored in our image storage.
• Step count — if you enter your daily steps (manually, or by pushing them from a phone shortcut), we store that number with your day's data.
• Push subscriptions — if you enable notifications, we store the browser push subscription needed to deliver them.
• Technical data — error diagnostics (to fix crashes), anonymous usage analytics, your timezone, and your IP address (used transiently for rate-limiting and abuse prevention).

How we use your information

• To provide the app and sync your data across your devices.
• To power social features you opt into — friends, challenges, and your public profile.
• To send notifications you enable (reminders, weekly recaps, challenge results).
• To keep the app reliable and secure (diagnostics, rate-limiting, abuse prevention).

We do not sell your data, and we do not use it for advertising.

What's public

If you create a public profile, your username, display name, profile photo, status, earned badges, and coin balance are visible to anyone at your profile URL. Friends you add can see stats relevant to challenges you enter together. Everything else (your logs, food, weight, plans) is private to your account.

Service providers

We rely on a small set of trusted providers to run the app. They process data only to provide their service to us:

• Vercel — hosting, image storage, and anonymous analytics.
• PostHog — product analytics (which features get used, and where new users drop off) so we can improve the app. We do not record your screen. No data is sold or used for advertising.
• Neon — our PostgreSQL database.
• Upstash — rate-limiting and caching.
• Google & GitHub — sign-in (OAuth).
• USDA FoodData Central & Open Food Facts — food lookups (your search terms / scanned barcodes are sent to find nutrition info).
• Sentry — error monitoring.
• Browser push services (e.g. Apple, Google) — to deliver notifications you enable.

Google sign-in

When you sign in with Google we receive only your basic profile (name, email address, and profile image) to create and identify your account. Que does not request or access any other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy. We never sell this data or use it for advertising.

Your choices & rights

• Export — download a full copy of your data anytime via Export Data in the app.
• Delete — request deletion of your account and associated data by emailing us.
• Notifications — turn off anytime in the app or your browser settings.

Data retention & security

We keep your data while your account is active and delete it on request. Data is transmitted over HTTPS and access is protected by authenticated sessions. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Que is not directed to children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy; we'll revise the "last updated" date above when we do.

Contact

Questions or data requests: que.fitnees@gmail.com.