This page summarizes the privacy controls available to every Weight Commit user, and how to exercise each one. Most actions are self-serve from Settings then Privacy. None of these choices change the quality of service you receive.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not done either of these things in the past twelve months and we do not plan to. There is nothing to opt out of today.
If you send the Global Privacy Control browser signal during signup, we record the signal in your account as a standing opt-out. If our practices ever change, you remain opted out automatically.
Your health data (weight, medication, side effects, sleep, food, supplements, workouts, bloodwork, optional progress photos) is sensitive personal information. We already restrict our use to operating the service for you. We do not infer characteristics about you, do not build a marketing profile, and do not retain the data for any other purpose. There is no additional limit to opt into.
Open Settings then Privacy and click Export. We email you a JSON file with every piece of data we hold about you, including profile fields, every health log entry, every consent record, and account metadata. Available within minutes of the request.
Most fields are editable directly in-product (profile, height, weight, goal, medication, dose history, side-effect notes). For anything you cannot edit yourself, send us the correction request from the Settings then Privacy page and we respond within seven days.
Open Settings then Privacy and click Delete Account. Your account enters a 30-day grace window during which you can recover it. After 30 days, every piece of data we hold about you is permanently purged. Health log entries, profile fields, photos, and account metadata are all deleted. We retain anonymized consent records (hashed user ID only) for up to seven years to demonstrate regulatory compliance.
Every consent you gave at signup is revocable from Settings then Privacy. The revocation consequences are disclosed before you confirm (some revocations trigger full account deletion because the service cannot operate without that consent). Revoking the health-data consent, for example, deletes your account because there is no way to operate a logbook without storing what you log.
If you authorize another person to make a privacy request on your behalf, we ask the agent to demonstrate written authorization, and we ask you to verify your identity directly with us before we act on the request.
We do not charge you more, give you a lesser service, or otherwise penalize you for exercising any of these rights.
Most requests are self-serve in Settings then Privacy. For anything else, contact the support address shown on the Privacy Policy page. We respond within 45 days, with one 45-day extension if needed and disclosed to you in writing.