Privacy Policy

Achilles Journey ("we", "us") is an educational recovery tracker. This policy explains what we collect, why, and the choices you have. We designed the product to keep your health information private by default. For how the app relates to medical care, see the medical boundary in our Terms.

What we collect

• Account details — your email address (used to sign you in via magic link or Google) and optional display name.
• Recovery information you enter — injury details, dates, age range at the time of injury, protection and weight-bearing status, daily check-ins (pain, stiffness, swelling, sensations, notes), milestones, personal moments and appointment details you record, measurements, and any clinician instructions you record.
• Preferences — reminder settings and consent choices.
• Limited technical data — basic, non-health operational logs needed to keep the service reliable and secure. These never contain your symptoms, notes, or clinician instructions.
• Cookie preference — your analytics consent choice, stored locally in your browser (see Cookies & analytics).

How we use it

• To show your personal recovery timeline, stage, and trends.
• To send the emails you ask for (sign-in links, invitations you choose to send, and reminders if you enable them).
• To keep the service working, secure, and free of abuse.

We do not sell your personal information, and we do not use your health entries for advertising.

Temporary video processing

If you explicitly choose to create a finished share video, your selected clip and the Achilles Journey overlay are uploaded to private storage for temporary processing. Photos continue to be processed only on your device.

• The upload happens only after you press Download finished video.
• The source clip and overlay are deleted immediately after processing succeeds or fails.
• The finished video is available through a short-lived private link for 30 minutes, then it is deleted.
• An automated cleanup process removes abandoned uploads if a browser closes or a render is interrupted.
• The video is used only to create the export you requested — not for analytics, advertising, training, or review.

Age range at injury

During onboarding we ask which age range you were in at the time of your injury (for example “40–49”). We collect a range only — never your exact age or date of birth.

• It is stored as part of your recovery journey, alongside your other injury details.
• It does not select or change which protocol you follow.
• It does not alter the educational timeline or any dates you see.
• It is not used to predict your recovery or recommend activity.
• It is not currently included in community insights or shown to other users.

If we ever explore using age ranges in aggregate community insights, that would first go through a separate privacy, consent, and minimum-cohort review before any such use.

Anonymous community insights (optional)

If you opt in to community insights, some of your check-ins contribute to anonymous, aggregatedstatistics (for example, what people around the same recovery week commonly report). Insights are only shown once a minimum number of contributors is reached, and individual entries are never exposed. Free-text notes are never included. You can withdraw consent at any time; that stops future contributions, though previously released anonymous aggregates cannot be traced back to you.

Who can see your data

Your individual recovery records are visible only to you. Access is enforced at the database level (row-level security), so other users cannot read your records, and our internal admin tools only ever see anonymous, aggregate counts — never your personal recovery history.

Inviting someone

If you choose to send an invitation, the recipient will see your display name and your verified account email so they can recognise who invited them. The invitation screen shows this before you send. Founder invitations are identified as coming via Achilles Journey and do not disclose the founder's private administrator login email. Invitations never include recovery information.

Service providers

We rely on a small set of trusted providers to run the app:

• Supabase — database, authentication, and secure storage.
• Vercel — application hosting.
• Cloudflare — website security and traffic delivery for our public pages.
• Google — optional sign-in, and (only with your consent) analytics on our public pages.
• Google Cloud — temporary processing of a share video only when you request a finished video export.
• Resend — sending sign-in, invitation, and reminder emails.

Your choices & rights

• Delete a check-in or other record at any time from within the app.
• Delete your recovery data while keeping your account, or delete your account entirely.
• Withdraw community consent in settings.
• Depending on where you live, you may have additional rights to access or export your data — contact us and we'll help.

Cookies & analytics

• We use Google Analytics only on our public marketing pages — never in the signed-in application.
• The Google Analytics script is not loaded until you opt in. If you decline, or haven't made a choice, no analytics script or request is loaded.
• You can decline, or later withdraw consent from “Cookie settings” in the footer. Withdrawing stops collection immediately and removes analytics cookies.
• Your recovery records, symptoms, notes, clinician instructions, age range, email address and account or user identifiers are never sent to Google Analytics.
• Your cookie preference is stored locally in your browser.
• We do not use advertising or personalization features, Google Signals, cross-domain tracking, or user IDs.

Details pending legal review

The following are not yet finalised and will be completed with a qualified lawyer before public launch. They are placeholders, not statements of fact:

• Operator / data controller: [TO BE CONFIRMED — legal entity name and contact details].
• Legal basis & sensitive-health-data condition: [TO BE CONFIRMED — the lawful basis for processing and the special-category (health data) condition relied on].
• Retention period: [TO BE CONFIRMED — how long data is kept, and what happens after account closure].
• International processing / data location: [TO BE CONFIRMED — hosting region(s) and any cross-border transfers].
• Breach notification: [TO BE CONFIRMED — contact point and the procedure followed if a data breach occurs].

Contact

Questions about privacy? Email privacy@achillesjourney.com.