Outgrit Privacy Policy

Version 1.2 — 3 October 2026. Outgrit was called Silver until October 2026. The name, this site’s address and the contact address changed; nothing else did.

1. Who we are

Outgrit is operated by an independent developer based in Budapest, Hungary ("Outgrit", "we"). We decide how the personal data described here is used (in GDPR terms, we are the data controller; under US state laws, the business or regulated entity).

Contact for anything in this policy: official@outgrit.app. Requests are answered by the operator personally.

2. What Outgrit is — and is not

Outgrit is a wellness app. It records what you eat, take and say, mirrors the metrics your devices already record (through Apple Health), and shows you statistical observations in your own data — for example, "on days you ate later, your deep sleep the next night was shorter."

Outgrit is not a medical device and does not provide medical advice, diagnosis, or treatment. Nothing in the app is a recommendation to eat, take, start, or stop anything. See our Terms of Service, section 4, and the health disclaimer at outgrit.app/disclaimer.

3. The data we collect

3.1 Data you give us

• Account: your email address and password (stored only as a secure hash), and a display name if you set one.
• Profile: date of birth, sex, height, weight, activity level, timezone, your goals, and your race (name and date) if you add one.
• Food and supplement logs: what you say or type when you log, the transcript of what you said, and the foods, portions and supplements you confirm.
• Check-ins and notes: self-reported energy, mood, soreness, focus, stress, digestion and motivation, your words as you said them, and questions you ask.
• Fuel and Restore (members): your fuelling plan, the products you test, how your stomach felt after a session, and your wind-down entries.
• Crews (if you use them): the name your crew sees, the crews you start, join or ask to join, the cheers you send, and only what you choose to share with them (section 4).

3.2 Data from Apple Health (only what you allow)

Sleep (duration and stages), heart rate, resting heart rate, heart-rate variability, respiratory rate, workouts and similar metrics you authorise. Outgrit reads Apple Health on your device and copies these values to your private records on our servers. Outgrit never writes to Apple Health.

3.3 Data we create from it

• Summaries and findings: daily summaries and statistical observations computed from your confirmed logs and synced metrics (effect size, number of days, confidence). These are health data too and are protected the same way.
• Membership status: whether you are a member, through which store, and when the period ends. Payment is handled entirely by Apple; we never see your card or payment details. To confirm a purchase we ask Apple's server about the transaction.
• Technical data: app version, device model and error details needed to keep the service working — never your health values.

3.4 On our website

If you leave your email at outgrit.app to hear when a place opens, we store the address, the date and which page it came from, and send one confirmation email. It is used only to invite you, never for marketing, and deleted when you ask or when the early-access list closes. The site sets no advertising or tracking cookies. Its fonts load from Google Fonts, which receives your IP address as part of that request.

4. How we use it

• To run your account and the app's features: logging, mirroring your metrics, daily summaries, your weekly report, Fuel and Restore.
• To turn what you say into a draft you confirm (section 5).
• To keep the service secure, fix errors and prevent abuse — never using health values.
• To answer you when you write to us, and to meet legal obligations.

Sharing with your crew: only what you turn on

Crews are small groups (at most 12) you start or are let into by the person who started them. Nothing is shared with a crew until you turn it on, and each kind has its own switch:

• Presence: your race's name and date, how many weeks out you are, and which days of this week you trained, as a letter for the kind of session (run, sim, lift).
• Routine cards: the sessions and minutes of a week you choose to share, and a note you write.
• Fuel plan on cards (members): your planned carbohydrate per hour. Never what you ate.

Never shared with anyone: food, sleep, heart rate, heart-rate variability, weight, supplements, your check-in words, or where you train. Only members of your crews see what you share; people who have only asked to join see nothing. Go quiet pauses all of it at once, and turning a switch off removes it from what your crew can see. Each change is kept in your consent history.

Race twins: if you share presence, you may be counted among members racing the same race near the same start. Others see only a number, and only once it reaches three; never your name, unless you join a crew together.

Crowd evidence (optional, off by default)

You can agree now that, later, your confirmed data may be included in anonymous findings across members. Nothing is pooled today. Before anything is, this policy will say exactly how, and you can turn it off at any time in You → Privacy.

We do not use your data for advertising. We do not sell it or share it for cross-context behavioural advertising. We do not use your health data to train AI models. We make no automated decisions with legal or similarly significant effects about you.

5. AI processing — what actually happens

• When you log by voice or text, the transcript is sent to an AI model, which picks the foods and portions from our nutrition database. Every nutrition number comes from that database, never from the AI. Each result is a draft until you confirm it.
• Check-ins work the same way: the AI drafts scores from your words; you correct and confirm them.
• Weekly reports are written from statistically tested findings only. Today a fixed template writes them; if a model ever phrases them, it can only phrase a finding, never add one.
• Text written by an AI is labelled "AI" in the app (as the European AI Act, Article 50, requires).

Our AI provider acts on our instructions only and is contractually barred from using your data for its own purposes, including model training.

6. Who processes data for us

Each of these acts as our service provider (processor): it handles data only to provide its service to us. No analytics or crash-reporting service receives data today. If we add one, it will receive event names and counts only — never a health value — and only if you opt in, and this table will change first.

7. Where your data is stored

Your Outgrit records are stored on Supabase servers in Germany. If you are in the United States, this means your data is processed outside the US; the protections in this policy apply wherever it is stored. AI drafting (OpenAI) and the website (Vercel) run in the USA. For transfers out of the European Economic Area and the UK we rely on the Data Privacy Framework where the provider is certified and on Standard Contractual Clauses otherwise; ask us for details.

8. Your controls (everyone)

• Export: You → Privacy → Export everything gives you one machine-readable file of every record Outgrit holds about you.
• Delete: You → Delete account permanently deletes your account and every record, immediately from live systems and from backups within 30 days.
• Consent: you can withdraw any consent at any time in You → Privacy, as easily as you gave it. Withdrawing AI-processing consent stops all AI drafting.
• Apple Health: turning off access in iOS Settings → Health stops all further reading.
• Or email official@outgrit.app for any request below.

9. Your US state privacy rights

Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you have the right to:

• know and access the personal data we hold about you and how we use it;
• correct inaccurate data;
• delete your data;
• get a portable copy;
• opt out of the sale of personal data, targeted advertising and profiling — we do none of these, so there is nothing to opt out of;
• limit the use of sensitive data — we use it only to provide the service you asked for;
• not be discriminated against for using any of these rights.

California (CCPA/CPRA). In the last 12 months we collected these categories: identifiers (email address); personal characteristics (date of birth, sex); sensitive personal information (health data, account login); internet or device activity (app version, device model, errors); and inferences (your statistical findings). Sources: you, your device and Apple Health. Purposes: section 4. We have not sold or shared personal information, and we do not knowingly sell or share data of anyone under 16. What you turn on for your crew is a disclosure you direct, not a sale or sharing for advertising. Retention: section 11.

How to make a request. Use the in-app controls (section 8) or email official@outgrit.app. We verify a request by the email address on the account, answer within 45 days, and you may use an authorised agent. If we decline a request, you can appeal by replying to our answer with "appeal"; we respond within 45 days, and if you disagree you can contact your state attorney general.

10. Consumer health data (Washington, Nevada, Connecticut and similar laws)

Most of what Outgrit handles is consumer health data. Our Consumer Health Data Privacy Policy at outgrit.app/consumer-health-data says exactly which health data we collect, why, from where, with whom it is shared, and how to access, delete or withdraw consent. We collect it only with your consent and share it only with the service providers in section 6, only to run Outgrit, and with the people in your crew when you turn crew sharing on (section 4), with your separate consent for each kind. We never sell it.

11. How long we keep it

• Account, profile, logs, synced metrics and findings: while your account exists.
• Voice audio: never stored; Apple transcribes it and only the text is kept.
• After you delete your account: everything is erased; encrypted backup copies expire within 30 days.
• Early-access email: until you ask, or until the list closes.

12. If you are in the UK or the European Economic Area

GDPR gives you the rights to access, rectify, erase, restrict and port your data, to object to legitimate-interest processing, and to withdraw consent at any time. Our legal bases:

• Contract (Art. 6(1)(b)) for your account and the app's features.
• Explicit consent (Art. 9(2)(a)) for health data, AI processing and your findings.
• Legitimate interests (Art. 6(1)(f)) for security and error-fixing, never applied to health values.
• Consent (Art. 6(1)(a)) for the early-access email and optional analytics.

You can complain to the Hungarian supervisory authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, naih.hu) or to your local authority.

13. Security and breaches

Each person's records are isolated inside the database itself (row-level security on every table, checked by automated tests on every code change). Data is encrypted in transit and at rest. Secret keys stay on the server, and no health value goes to any analytics tool. If a breach affects your data, we will tell you and the authorities without undue delay, as the law where you live requires (including the US Federal Trade Commission's Health Breach Notification Rule and, for UK and European users, within 72 hours to the supervisory authority).

14. Children

Outgrit is for people 16 or older. We do not knowingly collect data from anyone younger. If you believe a child is using Outgrit, write to us and we will delete the account.

15. Apple Health

Apple Health data is used only for the features you see. It is never used for advertising or marketing, never sold, never shared with data brokers, and never stored in iCloud by us.

16. Changes

We post changes here with a new version number and date. For a material change to how we use your health data, we ask for your consent again rather than only telling you.