Privacy Policy

1. Who we are

SlimTrack™ is operated by Nadia Blanco, trading as SlimTrack™, a sole trader registered in England and Wales. References to "we", "us", or "our" in this policy mean Nadia Blanco.

Contact: hello@slimtrack.app

2. What data we collect

We collect only what is necessary to provide the SlimTrack™ service:

• Account data — your email address and password (stored as a secure hash) when you register
• Health & tracking data — weight entries, medication doses, injection site logs, mood and energy scores, progress notes, and goal data you choose to enter
• Usage data — pages visited, features used, and session length, collected anonymously to improve the app
• Payment data — processed by Stripe; we never see or store your full card details

3. How we use your data

• To provide, operate, and improve SlimTrack™
• To send account-related emails (confirmation, password reset, billing)
• To display your personal progress history within the app
• To process subscription payments via Stripe

We do not use your health data for advertising, and we do not sell your data to third parties under any circumstances.

4. Legal basis for processing (UK GDPR)

We process your data under the following lawful bases:

• Contract — processing necessary to provide the service you've signed up for
• Legitimate interests — improving app performance and preventing fraud
• Consent — for any optional communications or features you explicitly opt into

Health-related data (weight, medication logs) is classified as special category data under UK GDPR Article 9. We process this data solely on the basis of your explicit consent, which you provide when you enter data into SlimTrack™.

5. Data storage & security

Your data is stored in a secure cloud database hosted in the United Kingdom (London region). We use industry-standard encryption in transit (TLS) and at rest.

Access to your data is restricted to you via your authenticated account. We do not share access with any third party except as described in Section 6.

6. Third-party services

SlimTrack™ uses the following trusted third-party services:

• Supabase — database and authentication infrastructure (UK-hosted)
• Netlify — website hosting and deployment
• Stripe — payment processing (PCI-DSS compliant)

Each provider is bound by their own privacy policies and appropriate data processing agreements.

7. Data retention

We retain your account and health data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.

Anonymised, aggregated usage statistics (containing no personal identifiers) may be retained indefinitely for product improvement purposes.

8. Your rights

Under UK GDPR, you have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, contact us at hello@slimtrack.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

SlimTrack™ uses essential session cookies only — required to keep you logged in. We do not use advertising or tracking cookies.

10. Children

SlimTrack™ is not intended for users under the age of 18. We do not knowingly collect data from children. If you believe a child has registered, please contact us immediately.

11. Changes to this policy

We may update this policy from time to time. Where changes are material, we will notify you by email or via an in-app notice. The "last updated" date at the top of this page reflects the current version.

12. Contact