Privacy policy
Last updated 1 November 2026. Fill in the items in [brackets] before launch.
Who we are
Ascent is run by [your name or company, address, country], contact: [support email]. We are the controller of your personal data under the GDPR.
What we collect
- Your email address, to sign you in with a one-time code.
- What you enter: profile (sex, birth year, height, weight, goals, training history, injuries), food logs, workouts, measurements, check-ins, skincare and notes.
- Photos you take or upload (meals, physique, face scans).
- AI usage records (time, feature, token counts and cost) to run your plan's limits.
Some of this, such as body measurements, photos and injuries, is health-related data. We process it only because you explicitly give it to us to get personalised guidance (GDPR Art. 9(2)(a)). You can withdraw at any time by deleting the data or your account.
How we use it
Only to run Ascent for you: calculate targets, show progress, and answer your requests. We do not sell your data, show ads, or build advertising profiles.
AI processing
When you press an AI button (meal photo, scan, coach), the relevant data and photo are sent to Anthropic's Claude API to produce that answer. Anthropic acts as our processor and does not use API data to train its models.
Where it is stored
Data and photos are stored with Supabase in the EU (Frankfurt). Each row and file is locked to your account. The website is served by Cloudflare. Processors: Supabase, Anthropic, Cloudflare[, payment provider when payments launch].
How long
As long as your account exists. Deleting your account (Me → Plan → Delete my account) permanently removes your data and photos right away; backups roll off within [30] days.
Your rights
You can access, correct, export, restrict or delete your data, object to processing, and complain to your data protection authority (in Slovenia: Informacijski pooblaščenec, ip-rs.si). Contact [support email].
Age
Ascent is for adults 18 and over.