Privacy Policy
Information We Collect
When you use The Method MD ("the App"), we collect the following categories of information:
Account Information: name, email address, and encrypted password provided during registration.
Health & Fitness Data: age, gender, height, weight, body measurements, fitness goals, dietary preferences, physical limitations, recreational activities, workout logs (exercises, sets, reps, weights), meal completion tracking, daily compliance data, and body weight check-ins.
Usage Data: app interaction patterns, feature usage frequency, session duration, device type, operating system, and browser information.
Payment Information: payment processing is handled entirely by Stripe, Inc. We do not store, process, or have access to your full credit card number, CVV, or banking details. We receive only a transaction confirmation and the last four digits of your card for reference.
How We Use Your Information
Your data is used exclusively to: generate and personalize your fitness and nutrition programs; calculate macro targets, caloric needs, and meal scaling; track your workout progress and daily compliance; provide AI coaching responses contextually relevant to your profile; process subscription payments; improve the App's features and user experience; and communicate important account or service updates.
Data Sharing
We do not sell, rent, or trade your personal information to third parties. Your data may be shared only with: Supabase (database hosting and authentication); Stripe (payment processing); Anthropic (AI coaching via Claude API — only contextual fitness data, never your full profile); and ElevenLabs (text-to-speech voice synthesis — text content only, no personal identifiers). We may also disclose information if required by law, legal process, or to protect the rights and safety of our users.
AI Data Sharing Disclosure
When you use the AI Coach, the following data is sent to Anthropic (Claude API) to generate personalized responses: first name, age, sex, height, weight, start weight, fitness goal, experience level, equipment access, dietary track (including halal-friendly and kosher-friendly status), active cuisines, food allergens, physical limitations, recreational activities, daily caloric and macro targets, current program phase/week/day, streak count, recent weight check-ins, today's scheduled workout and meals, today's logged progress, meal timing preference, GLP-1 medication status, health screen flags, behavioral patterns from your program data, and summaries of previous coach conversations.
Your email address, password, payment information, and full profile history are never sent to the AI. Data is transmitted via encrypted HTTPS connection. Anthropic's data retention policy applies to AI interactions. You can disable AI coaching at any time from your profile settings.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA): the right to know what personal information we collect, use, and disclose; the right to delete your personal information (available via Settings > Delete Account); the right to correct inaccurate personal information (available via your Profile settings); and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than providing the App's core fitness and nutrition services. To exercise any of these rights, contact us at support@themethodmd.com. We will not discriminate against you for exercising your privacy rights.
Data Storage & Security
Your data is stored on Supabase infrastructure with row-level security (RLS) policies ensuring that each user can only access their own data. All data is encrypted in transit (TLS 1.2+) and at rest. API keys and sensitive credentials are stored exclusively in server-side edge functions and are never exposed to client-side code. While we implement industry-standard security measures, no system is completely immune to unauthorized access, and we cannot guarantee absolute security.
Data Retention
Your data is retained for the duration of your active subscription. Upon account deletion or subscription cancellation: account and profile data is deleted within 30 days; workout logs and compliance history are anonymized and may be retained for aggregate analytics; and payment records are retained as required by financial regulations (typically 7 years). You may request complete data deletion at any time by contacting support.
Your Rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); export your data in a portable format; opt out of non-essential data processing; and withdraw consent for data processing at any time. To exercise any of these rights, contact us at support@themethodmd.com.
GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), we process your data under the lawful bases of: contract performance (providing the subscribed service); legitimate interest (improving the App); and consent (for optional features such as AI coaching and voice synthesis). You may withdraw consent at any time without affecting the lawfulness of processing performed prior to withdrawal.
Cookie & Data Storage Policy
Local Storage. The App uses browser localStorage to persist your session data, preferences, workout logs, and meal tracking between visits. This data is stored on your device and is not transmitted to our servers until you are authenticated with a valid account. Clearing your browser data will remove locally stored information.
Authentication Tokens. When you sign in, the App stores an encrypted authentication token to maintain your session. This token expires automatically and is refreshed periodically for security. You can invalidate your session at any time by signing out.
Third-Party Services. The following third-party services may store cookies or data on your device: Stripe — payment session cookies for secure checkout processing; Supabase — authentication session tokens. We do not use advertising cookies, tracking pixels, or third-party analytics platforms that build advertising profiles. No data collected by the App is used for targeted advertising.
Your Choices. You can manage data storage through your browser settings. Disabling localStorage may prevent the App from functioning correctly. You can delete all locally stored App data by clearing your browser's site data for this domain.
Children's Privacy
The App is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will delete that information promptly.
Last Updated: August 2026 These policies are subject to periodic review and update.
Pattern.81 LLC 7251 NE 2nd Ave, Suite 109, Miami, FL 33138 For questions: support@themethodmd.com