1. At a glance
We collect the information needed to run Scale Habits, provide the features you request, remember your choices, process purchases, answer you, and keep the service secure. Some product information may be sensitive because it relates to food, weight, medication context, symptoms, or health goals.
We do not sell personal information or consumer health data. We do not use health data for targeted advertising, data-broker profiles, or advertising audiences. The public website may use the analytics and campaign-measurement technologies described below.
You can ask for access, correction, a copy, or deletion. You can also withdraw optional permissions. Our Consumer Health Data Privacy Notice gives additional detail about health-related information.
2. Scope and responsibility
Scale Tech LLC is responsible for the information described here. This notice applies to scalehabits.com, including its invite request form, plus iOS and Android apps, account and support flows, and paid services as they become available.
This notice does not govern a third-party service that acts independently, such as an app store, payment provider, restaurant, manufacturer, or linked website. Its own notice applies to information it collects for its purposes.
3. Information we collect
Invite and account details. First name, email address, sign-in identifiers, account status, settings, legal-document acknowledgments, permission receipts, and account creation or deletion records.
Food and decision inputs. Menus, labels, meal descriptions, images, spoken-input transcripts, available options, preferences, constraints, questions, selected plans, check-ins, corrections, and feedback.
Health and progress information. Information you choose to provide about GLP-1 use, allergies, intolerances, appetite, fullness, nausea, energy, weight, body measurements, goals, food responses, or related context. Read the Consumer Health Data Privacy Notice for the full categories and special rights.
Age eligibility. A self-declared age or age range, or an eligibility signal from an app platform or approved provider. We do not need or retain your date of birth. We keep the adult-eligibility result, method, time, and policy version.
Use and device information. Feature actions, screen and error events, app version, device type, operating system, language, time zone, general region, network information, IP address, request identifiers, and security events.
Purchases. Product, price, currency, purchase provider, receipt or transaction reference, entitlement, renewal, cancellation, refund, dispute, tax, and reconciliation status. We do not receive your full card number from the payment provider.
Messages. Emails, support requests, privacy requests, survey responses, and anything else you choose to send us.
Current invite form. If you request an invite, we collect your first name, email address, submission time, source page, and the consent wording shown. The invite route briefly creates a shortened cryptographic fingerprint from the request IP address to limit abuse.
4. Where information comes from
From you. Information you enter, say, send, select, correct, save, or connect.
From your use and device. Operational, security, and product events created when your browser or app communicates with Scale Habits.
From service providers and platforms. Sign-in confirmation, age-range signals, payment and entitlement events, delivery status, fraud signals, and support or app-store events.
From our processing. Suggestions, classifications, summaries, patterns, and health-related inferences created from the information above. We do not buy health profiles about you from data brokers.
5. How we use information
Provide the service. Authenticate you, understand an available food choice, generate a response, preserve a selected plan, support a later check-in, remember approved context, and keep your account consistent across devices.
Personalize with your permission. Apply your preferences, safety constraints, goals, and prior outcomes to a current request and later recommendations. We separate optional health context from basic account use.
Operate and protect Scale Habits. Deliver the website and apps, diagnose problems, prevent abuse, protect accounts, enforce our terms, reconcile purchases, and keep auditable legal and permission records.
Communicate with you. Send requested sign-in and service messages, answer support or rights requests, send an invitation email you requested, and send marketing only with the choice required by law.
Improve the product. Evaluate reliability, safety, accessibility, and feature performance. Identifiable health information is not used for unrelated research, testimonials, or marketing without a separate choice when required.
Comply with law. Maintain records, respond to lawful requests, establish or defend legal claims, and protect people and the service.
6. AI-assisted processing
Some requested features use an external AI provider to interpret an input or draft a recommendation. Before protected food or health information is sent, we show a separate permission screen. It identifies the information, purpose, provider or provider category, and available choice.
We aim to send only the information needed for the request and avoid direct identity when it is not needed. The permission screen and this notice will state the applicable retention and model-training position before the feature is enabled. Declining an optional AI permission does not remove unrelated privacy or account rights.
7. Providers and disclosures
We disclose information to providers that help us host, store, authenticate, secure, communicate, process payments, operate support, analyze limited product events, and provide approved AI processing. They receive only the information needed for their role and are subject to contractual or platform restrictions.
The current website uses Vercel for hosting and technical logs. Resend carries invite submissions to our mailbox and may create delivery records. Google Workspace hosts that mailbox. Google Analytics measures visits to the public marketing website only after a visitor allows analytics. A payment provider, app store, authentication service, cloud database, support tool, or AI provider is identified before its corresponding product function is enabled.
We may disclose information to professional advisers, auditors, insurers, authorities when law requires it, or a business successor that accepts this notice. We may also disclose information when reasonably necessary to protect rights, safety, security, or the service.
Providers may process information in the United States or another country. Where transfer safeguards are required, we use an available lawful mechanism.
9. How long we keep information
Invite requests. Until we send the requested invite email or six months after the request, whichever comes first. We delete the request sooner if you withdraw it.
Accounts and saved product data. While your account is active and until deletion is completed. We aim to remove deleted data from active systems within 30 days and from backups within 90 days, unless law or a documented security need requires limited retention.
Unsaved media and voice. Temporary images ordinarily expire within seven days. Raw voice is discarded after transcription unless a feature clearly lets you save it. Saved inputs follow your account retention choice.
Operational and safety events. Usually no more than 30 days unless an event is needed to investigate fraud, security, reliability, or a legal claim. The invite abuse-prevention counter normally expires within 10 minutes.
Purchases and legal records. For the period needed for tax, accounting, payment disputes, fraud prevention, legal compliance, and proof of your permissions or agreement. These records are separated from food and health content where practical.
Deidentified information. We may keep aggregated or deidentified information that cannot reasonably be linked back to you. We will not try to reidentify it.
10. Your choices and rights
You may ask whether we hold information about you and request access, correction, deletion, or a portable copy. You may withdraw optional consent, object to or restrict certain uses, appeal a denied request, or use an authorized agent where applicable law allows it. We will not unlawfully discriminate against you for exercising a right.
Use in-app controls when available or email info@scalehabits.com from the address connected with your account or request. You do not need to open an account to make a privacy request. We verify only what is reasonably needed and normally do not ask for government identification.
We aim to respond within 30 work days, or sooner when applicable law requires. A different legal deadline or a permitted extension may apply. We may retain a narrow record of the request and may deny a request when law allows, such as when we cannot verify it or must retain a transaction record.
You may unsubscribe from marketing through the message control or by contacting us. Essential account, purchase, safety, and privacy messages may still be sent. An invite request permits the single invitation message described at submission.
11. Age and security
Scale Habits is for adults. A neutral age screen or platform age-range signal may be used to determine eligibility. We do not retain a date of birth. If we learn that an account belongs to someone under 18, we will restrict it and delete associated information unless a narrow legal obligation requires retention.
We use safeguards designed for the sensitivity of the information. They include encryption in transit, access controls, separation of sensitive content from general events where practical, provider review, and incident procedures. No security method is perfect. We will give any legally required incident notice.
12. Changes and contact
We may update this notice when Scale Habits, our providers, or law changes. We will give reasonable advance notice of a material change when required. We will request a new choice before a materially different health-data use when law requires it.