Privacy Policy

Reputable Health operates the Summer Shred Study app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read it carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

• Account Information: When you sign up, we collect your email address and authentication details through our secure auth provider (Supabase). We do not store passwords in plain text.
• Weekly Check-In Responses: If you choose to complete the optional weekly check-in, we store your self-reported weight, supplement or medication use, and any feedback you provide about the program.
• Google Calendar Data: If you connect Google Calendar, we create events in your calendar on your behalf. We do not read, store, or analyze the contents of your existing calendar events. We only write workout events and retain only the event IDs necessary to manage those events.
• Usage Data: We collect anonymized analytics about how users interact with the app (page views, feature usage) to improve the program. This data is not linked to your personal identity.

• To provide and maintain the Summer Shred Study program
• To sync your workout schedule with Google Calendar (only if you explicitly connect it)
• To analyze aggregate program effectiveness and improve content
• To respond to your questions or support requests
• To send you optional program reminders or updates (only with your consent)

We do not sell your personal data. We do not use your data for advertising profiling or share it with third parties for marketing purposes.

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/SSL
• Database connections are encrypted and access-controlled via Row-Level Security (RLS)
• Authentication tokens are handled securely by Supabase with automatic refresh
• Google Calendar integration uses OAuth 2.0 with minimal scope (calendar.events only)

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it. Google Calendar event IDs are removed immediately upon disconnecting your calendar.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Revoke Google Calendar access at any time from your Google Account settings
• Objection: Object to processing of your data for analytics or research

To exercise any of these rights, contact us at research@reputable.health. We will respond within 30 days.

You can disconnect Google Calendar at any time by clicking "Disconnect" in the app — this removes our access to your calendar and deletes stored event IDs from our database. To fully delete your account and all associated data, email us at research@reputable.health with the subject "Account Deletion Request."

If you have questions about this Privacy Policy or our data practices, contact us at: