Skip to content
EAT/SLEEP/REP

Privacy

LAST UPDATED: AUGUST 2026 (TEAMS) · PLAIN LANGUAGE, ON PURPOSE

The short version

We built EatSleepRep because the big trackers monetize your attention and your data. We don't. No ads, no ad networks, no selling or renting your information to anyone. Ever.

What we collect

If you create an account: your email address, and the training data you log — food entries, sleep, sets, and your targets. That's what makes sync work across your devices. If you join the early-access list, we store the email you gave us so we can write to you about the app.

Apple Health and Health Connect

If you turn wearables on, the app reads two things from your phone's health store — Apple Health on iOS, Health Connect on Android: sleep and body weight. That is so a watch, ring or smart scale can fill in your log instead of you typing it. Nothing else is read.

The app never writes anything back to Apple Health or Health Connect. Health data read this way is used for one purpose only: showing you your own log inside the app. It is never used for advertising or marketing, never sold or shared with a data broker, never sent to an advertising network, and never used to train anyone's models. It syncs to your account like the rest of your log so your devices agree, and it is deleted when you delete your account. You can revoke the permission at any time in your phone's settings, and the app keeps working — you just type the numbers yourself.

Photos of food

If you photograph a plate, the picture is sent to an AI provider to be read once and turned into an estimate of calories and macros. We do not store the photo, and it is not attached to your account or used to train anyone's models.

What we don't collect

No advertising identifiers, no cross-site tracking, no data brokers, no selling your logs to "wellness partners." No location — not precise, not approximate, not at all. No contacts, no browsing history. Your training data is yours.

When you're on a team

A coach can only see you if you enter their join code. Joining is the consent, and leaving is one tap — your log, your PRs and your streak stay yours and stay complete either way.

What your coach can see: the name you put on the roster, your position and class year if you entered them, your ESR score and its four parts, your training — sets, lifts, personal bests — your sleep hours, your calories and protein, whether you hit the targets you set, and your streak. The same numbers you see on your own Board.

What your coach cannot see: your email address, your progress photos, your check-in notes, your body measurements, or anything you logged before you joined their team.

Team leaderboards rank effort and output only — chains, sessions completed, new personal bests, nights slept, days you hit your own protein target. Bodyweight and body-composition figures are never ranked, on any board. That is a design rule, not a setting.

Athletes under 18

Coaches mark a team as a youth team when they create it. On a youth team, and for anyone who has not told us they are 18 or older, the shareable performance card stays off until a parent or guardian approves it through a link the athlete sends them. There is no directory, no search, and no way for a stranger to find an athlete. A guardian or the athlete can switch sharing off at any time, and the link expires after 90 days unless renewed.

The performance card carries lifts, personal bests, training consistency, position and class year — nothing else. No bodyweight, no body composition, no sleep, no food, no health information, no contact details, no location.

We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, write to us and we will delete it.

Team rules

Coaches can post a list of expectations for their team — things like no alcohol in season, or sleep eight hours before a game. These are displayed to athletes and nothing more. The app does not track, monitor, verify or report on anything in that list, and coaches see no data about it.

When a program pays

If a school, club or gym buys seats, we store the buyer's billing details with our payment processor (Stripe) and the fact that the team's seats are paid. Paying for seats does not give the organization any access to an athlete's data beyond what their coach already sees, and it does not change what an athlete can turn off.

Who touches your data

We use a small set of infrastructure providers to run the service: hosting and database (Vercel, Neon), transactional login emails (Resend), payments (Stripe), our mailing list (Klaviyo), and Google Analytics for usage measurement. They process data on our behalf to deliver the product — nothing more. Analytics events carry things like "someone closed a day" and how long their streak is; they never carry your email, your bodyweight, your body composition or what you ate.

Barcode and food lookups query public food databases (Open Food Facts, USDA FoodData Central) using the barcode or search term only — never your identity. A photographed meal goes to an AI provider to be read once, as described above.

Your controls

The rules for using the product, as opposed to the rules for the data in it, are in the terms. What the product actually does is on how it works, and what it costs is on the pricing page.

You can use the app without an account — everything stays on your device. You can leave a team at any time and keep everything you logged. You can switch the performance card off at any time, and so can your parent or guardian. You can unsubscribe from emails with one click.

You can delete your account yourself, and everything in it goes with it. In the app it is YOU → Account → Delete my account. Without the app, use eatsleeprep.com/delete-account.html — it emails you a confirmation link and needs nothing installed. Deletion is immediate and permanent; there is no grace period and no undo. Crash reports are kept for thirty days so we can fix what broke, and the account id inside them is wiped when you delete. Stripe retains payment records because tax law requires it — that is Stripe's copy, and it holds no training data.

Questions

Write to hello@eatsleeprep.com. A human reads it.