Privacy Policy

nLight.fit stores health and behaviour data on your behalf. This page describes what is collected, how it is protected, who ever sees it, and the control you keep over it. It is written to be read, and it is deliberately consistent with the more technical security and privacy documentation - if the two ever disagree, that is a bug worth reporting.

What we collect

• Account data: a username and a password hash. Passwords are hashed with bcrypt and never stored in plaintext. There is no email field on the account.
• Profile data: display name, age, height, goals, injuries, allergies, Mission Statement fields and free-text notes you choose to add. These fields are encrypted at rest with AES-256-GCM.
• Ledger data: the daily metrics you track - habits, workouts, nutrition, weight and your custom columns.
• Integration data you connect: WHOOP recovery, sleep, strain and workout data; biomarker panels extracted from lab PDFs you upload; a methylation genetics profile if you upload one.
• Conversations: your chats with the coach, which the coach uses as memory.
• Operational telemetry: request logs and error traces used to keep the service working. These are about requests, not a marketing profile.

How it is protected

A specific set of profile fields and your WHOOP tokens are field-level encrypted. Ledger rows, lab results, methylation results, coach conversations, progress pictures and learnings are not — they are protected by database access control and the provider's disk encryption. Sessions are signed and short-lived. Machine access uses scoped, revocable API tokens or OAuth 2.1 with PKCE, and every MCP tool exposed to external AI clients is read-only. The honest, detailed account is on the security page.

Who your data is shared with

Your data is never sold and never used for advertising. It is processed by the infrastructure providers required to run the service (hosting, database, AI model providers that power the coach) strictly to provide the service to you. When you connect an external AI client through the MCP server, that client reads your record only after you explicitly approve it on a consent screen, only with the scopes you granted, and you can revoke its token at any time.

Your control

• Export: your full ledger is exportable as CSV at any time, from inside the app.
• Revocation: every API token and OAuth grant you have issued is listed in the app and revocable with one click.
• Deletion: delete your account from Settings (username + password confirmation). That erases the account and every user-scoped collection — ledger, labs, genetics, photos, chats, tokens and profile. Stripe payment records are retained as a legal/tax record. You can also contact us.

Changes

Material changes to this policy are recorded in the changelog with the date they took effect. Questions about anything on this page: austin@nlight.fit.