Retention and destruction schedule

Retention and destruction schedule

This page describes the categories of data Weight Commit collects, how long we retain each category, and what happens to it when you revoke a consent or close your account. It is the public retention schedule referenced in our consent flows and our Privacy Policy.

CategoryWhat we collectWhile activeOn revocation or deletion
Account profileEmail, hashed password, display name, age, sex, height, weight goals, dietary preferences.Retained for the life of your account.Permanently deleted within 30 days of account closure.
Health dataBody weight, medication name and dose, injection site and time, side effects, sleep, food and macros, supplements, workouts, bloodwork.Retained for the life of your account.Permanently deleted within 30 days of revoking the health data consent or closing your account.
Biometric data (photos)Photographs you choose to upload, which may contain face geometry.Retained until you delete the photo or revoke biometric consent.All photos permanently purged from storage within 30 days of revocation or account closure.
Consent recordsFor every consent: type, version shown, exact text shown, timestamps for view and acceptance, IP address, user agent, revocation timestamp and reason if applicable.Retained for the life of your account, append-only (never modified).Anonymized and retained for up to 7 years after account closure to demonstrate regulatory compliance. The retained record contains a cryptographic hash of the original user ID, no identifying personal information.
Technical logsIP address, browser type, device info, request paths, error logs.Retained for 30 days.Naturally expire after 30 days. Logs do not contain personally identifying content beyond the standard fields above.
Marketing email subscriptionYour opt-in or opt-out preference for product update emails.Retained while you have an active subscription preference.Preference changes are recorded immediately. Future marketing sends respect the latest preference.
Active document versions
tostos_v2_2026-05-11
privacyprivacy_v2_2026-05-11
age 18 plusage_v1_2026-05-07
state residencystate_v1_2026-05-07
health datahealth_data_v2_2026-05-11
prescriber attestationprescriber_v1_2026-05-11
biometricbiometric_v1_2026-05-07
marketing emailmarketing_v1_2026-05-07