Privacy Policy

Last updated July 2026

Draft — review before launch. This is a plain-language starting point, not legal advice. Have a qualified lawyer review and adapt it for your jurisdiction before you go live.

Achilles Journey ("we", "us") is an educational recovery tracker. This policy explains what we collect, why, and the choices you have. We designed the product to keep your health information private by default.

What we collect

  • Account details — your email address (used to sign you in via magic link or Google) and optional display name.
  • Recovery information you enter — injury details, dates, age range at the time of injury, protection and weight-bearing status, daily check-ins (pain, stiffness, swelling, sensations, notes), milestones, measurements, and any clinician instructions you record.
  • Preferences — reminder settings and consent choices.
  • Limited technical data — basic, non-health operational logs needed to keep the service reliable and secure. These never contain your symptoms, notes, or clinician instructions.

How we use it

  • To show your personal recovery timeline, stage, and trends.
  • To send the emails you ask for (sign-in links, invitations you choose to send, and reminders if you enable them).
  • To keep the service working, secure, and free of abuse.

We do not sell your personal information, and we do not use your health entries for advertising.

Anonymous community insights (optional)

If you opt in to community insights, some of your check-ins contribute to anonymous, aggregatedstatistics (for example, what people around the same recovery week commonly report). Insights are only shown once a minimum number of contributors is reached, and individual entries are never exposed. Free-text notes are never included. You can withdraw consent at any time; that stops future contributions, though previously released anonymous aggregates cannot be traced back to you.

Who can see your data

Your individual recovery records are visible only to you. Access is enforced at the database level (row-level security), so other users cannot read your records, and our internal admin tools only ever see anonymous, aggregate counts — never your personal recovery history.

Inviting someone

If you choose to send an invitation, the recipient will see your display name and your verified account email so they can recognise who invited them. The invitation screen shows this before you send. Founder invitations are identified as coming via Achilles Journey and do not disclose the founder's private administrator login email. Invitations never include recovery information.

Service providers

We rely on a small set of trusted providers to run the app:

  • Supabase — database, authentication, and secure storage.
  • Vercel — application hosting.
  • Google — optional sign-in.
  • Resend — sending sign-in, invitation, and reminder emails.

Your choices & rights

  • Delete a check-in or other record at any time from within the app.
  • Delete your recovery data while keeping your account, or delete your account entirely.
  • Withdraw community consent in settings.
  • Depending on where you live, you may have additional rights to access or export your data — contact us and we'll help.

Details pending legal review

The following are not yet finalised and will be completed with a qualified lawyer before public launch. They are placeholders, not statements of fact:

  • Operator / data controller: [TO BE CONFIRMED — legal entity name and contact details].
  • Legal basis & sensitive-health-data condition: [TO BE CONFIRMED — the lawful basis for processing and the special-category (health data) condition relied on].
  • Retention period: [TO BE CONFIRMED — how long data is kept, and what happens after account closure].
  • International processing / data location: [TO BE CONFIRMED — hosting region(s) and any cross-border transfers].
  • Cookies & analytics: [TO BE CONFIRMED — which, if any, cookies or analytics are used, and choices offered].
  • Breach notification: [TO BE CONFIRMED — contact point and the procedure followed if a data breach occurs].

Not medical advice

Achilles Journey is a personal recovery documentation and educational tool. It does not diagnose, treat, prescribe rehabilitation, recommend progression or determine whether an activity is safe.

The information shown is general educational context and may not reflect your individual recovery. Always follow the instructions given by your treating healthcare professionals.

If you are concerned about your symptoms or notice an unexpected change, contact an appropriate healthcare professional. In an emergency, contact your local emergency services.

Contact

Questions about privacy? Email privacy@achillesjourney.com.