Privacy Policy

The Whole Thing collects only what it needs to run the app: your account details, the training, food, habit, supplement and progress logs you add, any check-in photos you upload, and basic diagnostic information. We never store payment card numbers or passwords in readable form.

We do not sell your data, build advertising profiles, or share your logs with anyone you have not chosen.

If you connect Apple Health, Health Connect or a wearable, we only read the data you allow, such as steps, sleep and workouts.

Your data is used to run The Whole Thing: your programs, meal plans, habits, progress charts and Odin, your AI coach. Only you and the coach you link can see your logs. Your data is never used to train public models.

We may also email you about your account, the beta, security notices and product updates. The Whole Thing gives general guidance only and is not medical advice.

All user data is encrypted in transit (TLS 1.3) and at rest using industry-standard AES-256 encryption. Access to production systems is strictly limited to essential engineering staff, who undergo regular security reviews and privacy training.

Backups are performed daily and stored in secure, geographically redundant environments. Your progress photos and logs are never exposed to the public internet and never leave our controlled infrastructure.

We follow SOC2-aligned procedures, including access logging, role-based permissions, environment isolation, and automated security auditing.

You may access, request deletion, export, or modify your personal data at any time. Simply contact our support team, and a human (not an AI) will assist you. Email hello@thewholething.app. If you delete your account, The Whole Thing permanently removes your personal information, logs, photos and diagnostic data unless legal retention is required.

We will never punish you for leaving.

You may also request:

• Removal of specific progress photos
• Turning off Odin, the AI coach, for your account
• Unlinking your coach so they no longer see your logs
• Immediate deletion of your account and all your data

Finally, your data is yours. The Whole Thing only processes what you choose to provide and claims no rights to it.