Privacy Policy

This policy explains what Wolcott (“we”) collects, why, who we share it with, and the choices you have. Wolcott is a subscription service that builds nutrition plans around the training you upload. We aim to collect only what the product actually needs.

Information we collect

• Account data: your email address and a display name, and authentication data managed by our auth provider. We never see or store your password in plain text.
• Athlete profile: the details you enter during onboarding — such as age, height, weight, training style, goals, and food preferences or restrictions.
• Training uploads: the workout screenshots, files, or pasted text you submit so we can read your schedule, plus the structured schedule we extract from them.
• Plans & feedback: the meal plans, grocery lists, and weekly check-in responses generated for and by you.
• Location for grocery lookup: if you use store finding, the ZIP code or approximate coordinates you provide are used to look up nearby stores. We do not track your location in the background.
• Billing data: subscription status and the customer and subscription identifiers from our payment processor. Full card numbers are handled by the processor and never reach our servers.
• Limited technical data: basic request information and a salted, hashed identifier used to rate-limit abuse. We do not store raw IP addresses for anonymous usage counting.

How we use it

• To read your training schedule and generate meal plans, meal timing, and grocery lists.
• To adapt future plans based on your weekly check-ins.
• To operate your account, process your subscription, and provide support.
• To keep the service secure and prevent abuse.

How training uploads are processed

To turn a workout screenshot or pasted schedule into a plan, the content you upload is sent to our AI provider (Anthropic) for interpretation, and to generate the wording of your meal suggestions. The underlying nutrition targets are calculated by our own deterministic engine. We do not use your uploads to train third-party AI models.

What we don’t do

We do not sell your personal information, and we do not share identifiable training or nutrition data with third parties for their own marketing.

Retention & deletion

We keep your account and athlete data for as long as your account is active. You can delete your account at any time from Settings; doing so removes your profile and athlete data from our database. Some records required for legal, tax, or fraud-prevention purposes (for example, payment records held by our processor) may be retained as required.

Your rights & choices

• Access & export: you can export your data from Settings at any time.
• Correction: you can update your profile and preferences directly in the app.
• Deletion: you can delete your account and associated data from Settings.
• Depending on where you live (for example, the EU/UK or California), you may have additional rights to access, correct, delete, or restrict use of your data. Contact us to exercise them.

Security

Data is transmitted over encrypted connections, and database access is governed by row-level security so accounts can only reach their own records. No system is perfectly secure, but we work to protect your information and limit access to it.

Children

Wolcott is intended for adults (18+). It is not directed to children, and we do not knowingly collect data from them.

International users

We operate from the United States, and your data may be processed there and in the regions where our providers operate. By using Wolcott you understand your information may be transferred to and processed in those locations.

Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date, and we will provide notice where required.

Contact

Questions about privacy or your data? Email wolcottsupport@gmail.com (we’re at wolcottnutrition.com).