Privacy

What it stores

• Your account — the email address, name and profile picture from the Google account you sign in with.
• Whatever you log — food, workouts, weight and body measurements, sleep, todos, lists, reminders and similar.
• Google Health data, if you connect it — activity and steps, heart rate, sleep, and body measurements.
• Google Calendar events, if you connect it — so your assistant can read your day and add events you ask for.
• Messages with your assistant — chats over Telegram or the web, retained so it has context across conversations.
• Optional extras you switch on — location (only if you set up OwnTracks on your phone) and CPAP therapy data (only if you connect ResMed myAir).

What it does with it

Only one thing: run the dashboard and the assistant for you. Your data is not sold, not rented, not used for advertising, and not used to build any profile of you for anyone else. There is no analytics or ad tracking on the site.

Who else sees it

• Anthropic — your assistant is powered by Claude. The message you send and the relevant slice of your data are sent to Anthropic to generate each reply.
• Google — for sign-in, and for the Health and Calendar data you chose to connect.
• Telegram — if you use your assistant over Telegram, those messages pass through Telegram.
• Fly.io — hosts the app and its database, in the United States.

Other users of marty.fit cannot see your data. Each account is separate. The one exception is anything you deliberately share, such as generating a read-only link for a trainer — which you can revoke at any time.

Google user data

marty.fit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Health and Google Calendar data are used only to provide features you can see in the app, are never sold or used for advertising, and are never transferred to anyone except as described above or as required by law.

You can disconnect Google Health or Google Calendar at any time in Settings, or revoke access entirely from your Google account permissions.

Keeping and deleting it

Data is kept while your account exists. Ask and your account and everything in it will be deleted — there is no retention period and no backups kept for longer than a few days of rolling database snapshots.

Security

Traffic is HTTPS-only and accounts are isolated from each other. Being straight with you: this is a personal project, not an audited product. Do not put anything in it you could not stand to lose or have exposed.

Contact

Questions, or want your data deleted? Email mattymc99@gmail.com.