The short version
- We don’t ask for your name or email. Your account is an anonymous ID.
- We use your data only to run MuscleKeep for you. We don’t sell it and we don’t use it for advertising.
- AI features are off until you allow them, and you can turn them off at any time.
- You can delete all your data from inside the app.
Who we are
MuscleKeep is provided by MuscleKeep (“we”, “us”). Contact us at support@musclekeep.net.
What we collect
| Category | Examples | Why |
|---|---|---|
| Anonymous identifier | A random user ID created by Firebase Authentication | To keep your data together across sessions and match your subscription |
| Device information | Platform, OS version, device model, app version, language, time zone, country | To show times in your time zone, support your device, and fix bugs |
| Profile | Sex, birth year, height, current and goal weight, units, medication type and name you enter, dose day or pill time, journey phase, concerns, equipment | To build your protein and strength plan and reminders |
| Health and fitness logs | Food and protein, water, fiber, weight, lean mass, waist, doses, injection sites, side effects, notes, workouts, check-ins | To show your progress, Muscle Shield score, insights and doctor report |
| Apple Health / Health Connect | Weight, lean body mass and body fat you choose to share; we write the weight, protein, water and fiber you log | So you don’t have to type scale data, only with your permission |
| Purchase status | Whether you have an active subscription, product, renewal and expiry dates | To unlock the app. We never see your card or Apple/Google account details |
| Usage events | Screens like “paywall viewed”, “food logged”, “workout completed” — without health values | To understand which features help and to improve the app |
| Error reports | Crash type, screen, app version, device model — scrubbed of health values, food names, notes and tokens | To find and fix problems |
| Push token | A Firebase Cloud Messaging token | To send reminders and messages you can turn off |
| Progress photos | Photos you take in the app | Stored only on your device. They never reach our servers |
| Contact form | Email, topic and message you send from our website | To reply to you |
Service providers
- Google Firebase (Authentication and Cloud Messaging) — anonymous sign-in and push notifications.
- RevenueCat — manages subscription status with Apple and Google, linked to your anonymous ID.
- Google Gemini API — only if you allow AI features. We send the meal photo or text you submit, the protein you have left today and symptom tags such as “nausea”. We never send your name, email, medication or dose history, or Apple Health / Health Connect data. We use the paid API tier, under which Google does not use the content to improve its products. Photos are processed in memory and not stored by us.
- Open Food Facts — when you scan a barcode we look up the product number. No personal data is sent.
- Hosting — our servers and database run on a virtual private server located in Germany.
Some providers process data in the United States. Each is bound by its own terms to use the data only to provide the service to us.
What we never do
- Sell or rent your data.
- Use health data, including Apple HealthKit data, for advertising, marketing or data mining, or share it with third parties for those purposes.
- Store HealthKit data in iCloud.
- Track you across other apps or websites. We don’t use the advertising identifier and don’t include ad SDKs.
How long we keep data
We keep your data while your account exists. When you delete your data, it is removed from our database immediately and from backups within 30 days. Error reports are kept for 90 days. Contact-form messages are kept for up to 12 months.
Your rights and choices
- Delete: Profile › Delete my data deletes everything. See Delete account.
- Export: Profile › Export my data gives you CSV files and a PDF report.
- AI: turn AI features on or off in Profile › AI features.
- Permissions: notifications, camera and Health access are optional and can be changed in your device settings.
- Depending on where you live, you may have rights to access, correct, delete or port your data, and to appeal a decision. Email us to exercise them; we respond within 30 days.
US state privacy rights
Residents of Washington, Nevada, Connecticut and other states with consumer health data laws should also read our Consumer Health Data Privacy Policy.
Children
MuscleKeep is only for adults 18 and older. We don’t knowingly collect data from anyone under 18. If you believe a minor has used the app, contact us and we will delete the data.
Security
Data is encrypted in transit (HTTPS). Access to our admin tools is limited, role-based and logged, and viewing health data is recorded in an audit log.
Changes
We’ll update this page and the date above when this policy changes. Significant changes will also be shown in the app.
Contact
support@musclekeep.net or our contact form.