Privacy Policy

What we collect

• Account details. Your email address, your name, and your password (stored only in scrambled, hashed form by our sign-in provider).
• Health and wellness information you enter. Medications, peptides and supplements, and the doses you log; lab results; body measurements and weight; progress photos; period dates; food and meal logs, recipes and meal plans; workouts and training programs; how you feel; and notes you write.
• Apple Health or Health Connect data, if you turn it on. See the next section.
• Messages to hAIdi. What you type or say to our in-app assistant, and any photos or files you add.
• Photos, files and voice memos you upload. Lab reports, prescriptions and mixing instructions, meal and recipe photos, progress photos, and voice memos.
• Purchases. If you buy a plan on our website, whether you have an active subscription, its plan and status, and the customer and subscription IDs our payment processor gives us. We never see or store your card number.
• Where you came from. If you sign up through one of our ads or our website quiz, the campaign tags on that link (such as utm codes and Google or Facebook click IDs). These are marketing tags only. They contain nothing about your health.
• Device and technical information. Your time zone, so reminders arrive at the right time; a push notification token, if you allow notifications; and, when you send a bug report, your app version, device model and system version, and any screenshot you choose to attach.

Apple Health and Health Connect

If you connect them, MyLane reads from Apple Health (on iPhone) or Health Connect (on Android). It reads only the kinds of data you approve:

• Apple Health: weight, body fat percentage, waist size, height, steps, exercise minutes, sleep, daily nutrition totals (calories, protein, carbs, fat, fiber and sugar), and your date of birth.
• Health Connect: weight, steps, exercise sessions, sleep, and nutrition.

MyLane never writes anything to Apple Health or Health Connect.

What we read is saved to your MyLane account so it can show up in your measurements, activity, and food log. If you have allowed AI features (see below), it may also be used as context when hAIdi answers you. For example, meals that come in from Health are part of the recent food log hAIdi can see.

Data from Apple Health and Health Connect is never used for advertising or marketing, never sold, and never shared with advertisers, data brokers or information resellers. It is used only to provide MyLane’s health and fitness features to you. You can turn access off at any time in the Health app (iPhone) or in Health Connect (Android).

AI features and your consent

hAIdi, our assistant, the photo scans (lab reports, prescriptions, mixing cards, meal photos), recipe imports and recipe pictures use AI services outside MyLane. We ask for your OK before any of your information is sent to them. When you allow it, we record the date you agreed.

What we send, only to answer you:

• What you type or say to hAIdi, and any photos or files you add.
• The health details hAIdi needs to answer you, like your medications and doses, lab results, period dates, and the last week of food you logged.
• Photos and files you scan.
• Recipes you import or ask us to make a picture of: the title, ingredients and steps.
• If you have an accountability coach, your first name and what you have shared with her, so her check-ins fit you.

Who gets it:

• OpenRouter, which passes it to an AI model provider, such as Google (Gemini) or Anthropic (Claude), to write the answer. Voice memos you record for hAIdi are turned into text the same way. For a recipe picture, OpenAI (GPT Image) draws it from a short description of the dish.
• ElevenLabs, only when hAIdi answers you out loud. It gets the words of hAIdi’s answer, not your recording.

On every request that carries your information, we instruct OpenRouter to use only AI providers that do not train on your data. A provider may keep a request for up to 30 days to monitor for abuse and keep its service safe, and then deletes it. Your information is never used for ads, and never sold.

You can change your mind at any time: in the app, go to More → Settings → AI and your data; on the website, go to Settings → AI and your data. If you say no, hAIdi and photo scans pause, and everything else in MyLane keeps working.

How we use your information

• To run the features you use: your schedule and reminders, dose and lab tracking, meal and workout logs, summaries you can take to your provider, and hAIdi.
• To send you reminders and notifications you have turned on.
• To manage your account, your plan, and your access to programs you joined.
• To answer you when you contact us, and to fix bugs you report.
• To understand which of our ads and campaigns bring people to MyLane, and to show our ads to the right people, as described under “Advertising and tracking” below, never using your health information.

We do not sell your personal information, and we do not use your health data for advertising.

Advertising and tracking

We advertise MyLane on Facebook and Google. When you sign up from one of our ads, we keep the ad’s campaign tags and click ID with your new account so we can measure which ads work. Our customer and email system, GoHighLevel, reports sign-ups and purchases to Facebook and Google as ad conversions, and uses contact details such as your name and email to build advertising audiences, so we can measure our ads and show them to the right people. We never send them your health information.

The MyLane phone apps contain no advertising software and do not track you across other companies’ apps or websites. On iPhone, we ask your permission through Apple’s App Tracking Transparency prompt, and your sign-up and activity from the iPhone app are used for these Facebook and Google conversions and audiences only if you choose “Allow.” If you choose “Ask App Not to Track,” we don’t use them for ads. You can change your answer any time in iPhone Settings → Privacy & Security → Tracking, or from Settings → Ad tracking in the app.

Who we share it with

We share information only with the service providers that help us run MyLane, each handling it on our behalf and only for that job:

• Supabase: database, sign-in, and file storage. This is where your account, health records, photos and files live.
• Vercel: hosts the MyLane website, and checks the support form for bots.
• OpenRouter, Google, Anthropic and OpenAI: AI answers, scans, recipe pictures and voice-memo transcription, only with your consent (see above).
• ElevenLabs: spoken replies from hAIdi, only with your consent.
• Stripe: takes payment for plans bought on our website. Stripe handles your card details; we never see or store your card number.
• GoHighLevel: our customer and email system. It receives your name, your email, when your account was created, when you first signed in and when you last opened the app, so we can send you welcome and program emails and give you access to what you bought. It also reports sign-ups and purchases to Facebook and Google for our ads, as described above. When you delete your account, we tell it to remove your contact.
• Resend: sends some of our emails to you, such as replies about bug reports you sent.
• Cloudflare Stream: hosts and plays workout videos.
• Expo, Apple and Google: deliver push notifications to your phone, if you allow them. Apple and Google also distribute the apps.
• Food databases (USDA FoodData Central, Open Food Facts and Chomp): when you search for a food or scan a barcode, we send the search words or barcode, not who you are.
• Apify: when you import a recipe from a link or social video, it fetches that public page for us. It gets the link, not who you are.

We do not use separate analytics or crash-reporting companies.

We may also disclose information if the law requires it, or to protect the rights and safety of our members. If MyLane is ever sold or merged, your information would move with it under this policy.

How long we keep it

We keep your information for as long as you have an account. When you delete your account, your data is deleted right away, except for the few things listed on our account deletion page.

Technical records of AI requests are deleted automatically: the content of a request within 7 days, and the record that it happened (with no message content) within 30 days. Copies in our database backups are removed within 30 days.

Deleting your account

You can delete your account at any time, and you do not need to contact us:

• In the iPhone or Android app: More → Email & password → Delete my account → Yes, delete everything.
• On the website: sign in, open the menu at the top right, then Email & password → Delete my account.

This permanently erases your account and everything in it, and it cannot be undone. Deleting your account also cancels any subscription you have with us, removes your contact from our email and customer system (GoHighLevel), and removes your email address from our webhook logs. Our account deletion page explains exactly what is removed and what is kept, and lets you delete your account from any browser.

Security

Your information is encrypted in transit and at rest, and database security rules let only your own account read your records. You can lock the app with Face ID, Touch ID or a fingerprint in Settings. No system is perfect, so please use a strong, unique password.

Your rights and choices

• See and correct your information: almost everything can be viewed and edited in the app. For anything you cannot change yourself, such as your email address, email us.
• Delete your information or your whole account, as described above.
• Get a copy of your information: email us and we will send it.
• Say no to AI at any time in Settings → AI and your data.
• Turn off Apple Health or Health Connect access, notifications, and reminders at any time.

Depending on where you live, including California, Colorado, Connecticut, Virginia, Washington and other US states, you may have additional rights: to know what personal and health information we collect and why, to get a copy, to correct or delete it, to opt out of its sale or use for targeted advertising (we do neither with your health information), and to withdraw consent. We will not treat you differently for using these rights. To use any of them, email us from the address on your account. We may need to confirm it is really you before we act. If you ask for a copy of your data, we will email it to you within 30 days.

Children

MyLane is for adults 18 and older. You must be 18 or older to use it (see our Terms of Use), it is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, email us and we will delete it.

Changes

If this policy changes materially, we will update this page and the date above, and let you know in the app before the change affects you.

Contact

Questions about privacy or your data: support@mylanebyheidi.com.