Privacy Policy
Foundation is a personal tracker. It holds things people usually keep private: what you weigh, what you earn, what you owe, what you ate, and what you wrote down. This page says plainly what happens to all of it.
The short version
- Your data belongs to you. It is stored so that you can read it and sync it between your own devices, and for no other purpose.
- There is no advertising, no analytics and no tracking in this app. No third-party analytics or advertising software is installed in it.
- Nothing you record is sold, rented, or shared with anyone.
- You can delete your account and everything in it from inside the app.
What is stored, and where
When you create an account, your data is saved on your device and synced to a private database record held with Supabase, our hosting provider. That record is protected by row-level security, which means it can only be read by someone signed in as you.
That record holds whatever you have entered: your targets and settings, workouts, weigh-ins, steps, meals, transactions, balances, assets, debts, bills, journal entries, notes, goals, and your score history.
Physique photos are stored in a separate private storage bucket, not in the database record, and are likewise readable only by your account.
Private journal entries are hidden behind Face ID or your device passcode on this app's own screens. Being clear about what that is and is not: it prevents the words being shown by the app, but it is a screen lock, not encryption, and your export file contains them in plain text.
Who else receives anything
Foundation talks to a small number of outside services. None of them are sent your name, your account, or anything you have written.
| Service | What it receives | Why |
|---|---|---|
| Supabase | Your account email and everything you record | Sign-in, and syncing between your devices |
| Brevo | Your email address | Sending sign-up codes and password resets |
| CoinGecko | The symbols of any crypto you hold | Live prices |
| Yahoo Finance | The tickers of any stocks you hold | Live prices |
| Open Food Facts | Food searches and scanned barcodes | The food database |
| Apple | Your subscription status | Handling payment, if you subscribe |
Worth saying explicitly, because it is not obvious: looking up a price sends that symbol to the price service, and scanning a barcode sends that barcode to Open Food Facts. Those requests reveal what you hold and what you scanned. They carry no account identifier and cannot be linked back to you by us.
What never leaves your device
- Reminders. Every notification is scheduled on the phone itself. Nothing is sent from a server, and no reminder content is transmitted anywhere.
- Step counts are read from the phone's motion sensor and are only stored with the rest of your record.
- Face ID. The app is told whether the check passed. Your biometric data is handled entirely by iOS and is never available to Foundation.
Deleting your data
Settings has a Delete Account option. It removes your database record, your stored photos, and your sign-in, and it deletes the photo files from the device. This cannot be undone.
You can also export everything you have recorded from Settings before you go.
Children
Foundation is not directed at children and is not intended for anyone under 13.
Changes
If this policy changes in a way that affects what happens to your data, the date at the top will change and the app will say so.
Contact
Questions about any of this: [email protected]