Privacy

Nothing about your injury ever reaches our servers. Your answers, your pain scores, your check-ins and your assessment results are stored in your own browser and are never uploaded — whether you have an account or not. This is the most important thing on this page, and it is a property of how the app is built rather than a promise about how we behave.

What stays on your device

All of the following live in your browser’s local storage. We cannot read them, and we could not produce them if asked:

• Which injury you selected, and the answers you gave at intake
• Your age band, affected side, and how long you have had symptoms
• Every pain score you have entered, morning and during activity
• Your movement assessment results and confidence score
• Your plan: which phase and level you are on, and its history

Clearing your browser data deletes all of it permanently. You can save a copy of everything as a file from the account page at any time — that file is the complete set of what the app knows about you, because there is nowhere else it could be.

What we hold, if you create an account

An account exists so that a subscription has somewhere to live. If you sign in, we store:

• Your email address, from Google sign-in
• A user identifier
• Your subscription status, billing period, and the identifiers our payment provider uses

That is the complete list. Our lawful basis is performance of a contract — we cannot give you access to something you paid for without knowing who you are and what you paid for.

Because none of it describes your health, it is ordinary personal data rather than the special category that health data falls into. That distinction is deliberate: we designed the app so that we never hold health data at all.

Who else is involved

• Google — only if you choose to sign in with it. We receive your email address and nothing else.
• Supabase — hosts the account and subscription records described above.
• Paddle — our payment provider and merchant of record. If you subscribe, Paddle handles the payment and holds your billing details. We never see your card.
• Vercel — hosts the site and processes ordinary server logs, including IP addresses, for security and reliability.

We do not sell your data, we do not share it with advertisers, and there is no advertising or cross-site tracking on this site.

Your rights

You can access, correct, export and delete your data. In practice most of that is in your own hands, which is the point:

• Access and export — save a copy of everything from the account page.
• Correction — change any answer by retaking the intake.
• Deletion— “Delete my account” on the account page removes your account and subscription record and clears this device. It is immediate and cannot be undone.

If you are in the EU, the UK or Türkiye you also have the right to complain to your data protection authority. We would rather you wrote to us first at support@getzinde.com.

How long we keep things

Account and subscription records are kept while your account exists, and deleted when you delete it. Some records of a transaction may be retained by Paddle for as long as tax law requires them to be — that is their obligation as merchant of record, not ours.

Children

The app is for adults. It refuses to build a program for anyone under 18, and the reason is clinical rather than legal: while a growth plate is open, loading behaves differently and the program would be the wrong answer.

Who we are

TO BE COMPLETED — your registered name, TO BE COMPLETED — your registered address, Türkiye. Contact: support@getzinde.com.

Changes

If this policy changes in a way that affects you, we will say so in the app rather than quietly changing the date at the top.