Privacy Policy

MetaboPace provides adaptive, protein-first coaching. This Privacy Policy explains what we collect, why we collect it, and the choices available to you.

MetaboPace is an AI-powered tracking and educational tool and does NOT replace professional medical or nutritional advice. Always consult with qualified healthcare professionals for medical or dietary decisions.

Information we collect

• Account information: email address, account username or display name, authentication provider identifier, and profile details you provide.
• Health and coaching inputs: pathway selection, weight, goal weight, activity, check-ins, nutrition preferences, and notes you choose to save.
• Technical information: IP address, browser/device information, request timestamps, approximate location derived from IP where necessary for security, and diagnostic events. IP addresses may be used for abuse prevention and rate limiting.
• Billing information: Whop processes payment method, credit-card, billing, subscription, and payment details. MetaboPace does not store full card numbers or security codes. We receive limited billing status, membership identifiers, payment dates, renewal dates, and amounts needed to provide the service.

How we use information

We use information to authenticate accounts, provide plans, process subscriptions through Whop, prevent fraud and abuse, maintain security, respond to support requests, and improve reliability. If you separately opt in at signup, we also use your account email and Whop-confirmed trial dates to send up to seven trial onboarding and billing-reminder emails, approximately 24 hours apart. You can unsubscribe from that sequence at any time using the link in any message; we store your consent and unsubscribe timestamps to honor that choice. Resend delivers these emails. We do not sell personal information. The 30-day planning engine is deterministic and rules-based. The optional AI Coach generates conversational wellness guidance; it does not make clinical decisions or claim to be a healthcare professional.

AI Support and coaching

Visitor Support processes the message you enter to answer general product questions; it has no account or saved profile access. A safety filter intercepts messages it identifies as personal health details or symptom, medication, or surgical questions before forwarding them to the model; do not share health details in Visitor Support, and do not rely on the filter to identify every sensitive detail. For the signed-in AI Coach, the selected track receives the relevant saved account/pathway/track preferences (including height, weight, age, allergies, and dietary restrictions), the current deterministic plan snapshot when opened from a track, and the conversation messages needed to generate a reply. Nutrition and Fitness preference scopes are kept distinct; the Pathway coach may receive both scopes separately. Coach messages and snapshots are sent to the configured Manus AI service for processing. MetaboPace does not save chat transcripts to the account database, browser storage, analytics, or advertising systems; the open conversation exists in page memory and is lost when the page is refreshed or the component is unmounted. Avoid sharing information that is not needed. AI responses are general wellness information only; contact a qualified healthcare professional for symptoms, medication, or surgical concerns.

Communications and tracking

MetaboPace does not send SMS/text messages, push notifications, or general marketing campaigns. The only optional promotional communications are the seven-day trial email sequence described above, sent only with your explicit opt-in and stopped after you unsubscribe, cancel, or convert to a paid subscription. We use only essential first-party session cookies and a short-lived Google sign-in nonce cookie for authentication and security. Session cookies are HttpOnly; HTTPS sessions use Secure and SameSite controls. We do not use advertising cookies, advertising pixels, behavioral analytics, or third-party tracking scripts. Health inputs, weights, goals, check-ins, and meal selections are not sent to analytics or advertising endpoints.

Biometric data

MetaboPace does not use facial recognition, face scans, voiceprints, or other biometric collection. No biometric consent or retention process is required because no biometric feature is offered.

Children and age eligibility

MetaboPace is an adults-only wellness service and is not directed to children under 18. New accounts must confirm that the user is at least 18, and the server records the confirmation time. We do not knowingly collect or use children’s personal information; if you believe a child created an account, contact support so it can be investigated and deleted.

Service providers and retention

Google provides authentication, Whop provides checkout and billing, and Resend delivers account-verification and opted-in trial-sequence emails. Account data—including email, name, authentication identifiers, pathway, current and goal weight, activity, trial-email consent, and unsubscribe state—is stored in MetaboPace’s managed MySQL database; this application does not use Firebase. Session tokens are stored as SHA-256 hashes, and server-side access controls protect account records. Plan and progress details—including plans, check-ins, completed days, protein settings, dietary preferences, and meal-scan summaries—are stored in browser local storage on the device where you use MetaboPace; pathway and core profile metrics are also saved to the server. You may request account deletion at any time through the support channel provided with your account. For self-service deletion in Account Settings, any active Whop subscription must be canceled first. Deletion removes the MetaboPace account and its linked server-side sessions, and removes the plan snapshot from the browser where deletion is completed; Whop-held billing records and records retained for legal, accounting, or dispute-resolution purposes may remain.

International privacy rights

GDPR: where applicable, you may request access, correction, deletion, portability, restriction, or objection to processing, and may withdraw consent. Our processing purposes include contract performance, legitimate interests in security, and consent where requested. You may contact us about a concern or complain to your local supervisory authority.

CCPA/CPRA: California residents may request to know, access, correct, or delete personal information and may opt out of sale or sharing. MetaboPace does not sell personal information. We will not discriminate against you for exercising these rights.

Security and contact

We use server-side sessions, access controls, password hashing, signed webhook verification, and rate limiting. No online service is completely risk-free. For privacy requests, contact the service operator through the support channel provided with your MetaboPace account.