Privacy Policy

Effective date: [DATE] · Last updated: [DATE]

The short version. We collect what onwards needs to coach you: your account email, the wellness information you log (such as weight, waist, BMI, meals and routine), and the meal photos you snap. Meal photos are sent to Google's Gemini service to read what's on your plate. We treat your health information as sensitive, we do not sell your data or use it for third-party advertising, and you can delete your account and erase your data from inside the app at any time. The full detail is below.

1. Who we are

This policy explains how [Legal Entity Name] (“onwards”, “we”, “us”) collects and uses personal information through the onwards mobile app and the website at onwards.click (together, the “Service”). For data-protection purposes we are the controller of your personal information.

Contact: privacy@onwards.click · [Registered address]. If you are in the EU/UK and we are established outside it, our representative is [EU/UK representative, if required under GDPR Art. 27].

2. Information we collect

Account & contact information

When you create an account we (and our authentication provider, Clerk) collect your email address and a unique user identifier. If you sign in with Apple, Google or Facebook, we receive basic profile information from that provider (for Sign in with Apple, this may be a private relay email).

Health & wellness information you provide

To deliver coaching, onwards collects the wellness data you choose to log — for example your weight, waist measurement, BMI, goals, meals and dietary choices, water, sleep, activity and routine. We treat this as sensitive “special category” health information and only process it with your explicit consent (see Section 4).

Meal photos (user content)

When you snap a meal, the photo is processed to identify the food on your plate. To do this, the image is sent to Google’s Gemini AI service for analysis. Google processes the image to return a result to us; we do not control Google’s independent practices, which are governed by Google’s terms. We recommend reviewing Google’s applicable AI/API privacy terms. We do not use your meal photos for advertising.

Usage, device & diagnostic information

We may collect app usage events, approximate analytics identifiers, device and app version information, and crash/diagnostic logs to keep the Service working and improve it. [List your analytics/crash tools, e.g. Apple App Analytics, or remove if none].

Information stored on your device

Much of your data is stored locally on your device (e.g. in the app’s on-device storage). Some data is stored with our providers to support sign-in and, where offered, sync across devices.

3. How we use your information

To provide and personalise the Service — reading your meals, building your plan and routine, and showing your trends.
To create and secure your account and authenticate you.
To analyse meal photos and generate coaching suggestions.
To maintain, troubleshoot, secure and improve the Service.
To communicate with you about the Service (service messages; marketing only with your consent where required).
To comply with legal obligations and to protect the safety, rights and property of users and others.

4. Legal bases (EU/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you sign up for); your consent (which you can withdraw at any time — in particular, your explicit consent for processing special-category health data and meal photos); our legitimate interests (to secure, maintain and improve the Service, balanced against your rights); and legal obligation (where we must process data to comply with the law).

5. How we share information

We do not sell your personal information and do not share it for cross-context behavioural advertising. We share information only with service providers acting on our instructions, and where required by law:

Clerk — account creation, sign-in and identity management.
Google (Gemini) — analysis of meal photos to identify food.
Apple — Sign in with Apple (and the App Store for distribution/payments).
Amazon Web Services — hosting and infrastructure for the website and, where offered, backend services.
[Any analytics/crash/email providers you use].
Legal & safety — to comply with law, enforce our terms, or protect rights and safety.
Business transfers — if we are involved in a merger, acquisition or asset sale, with notice to you.

6. International transfers

Some providers (e.g. Google, Clerk, AWS) process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or an applicable adequacy decision. You can request more detail at privacy@onwards.click.

7. How long we keep your information

We keep your personal information while your account is active and as needed to provide the Service. When you delete your account, we erase your personal data as described in Section 9, except where we must retain limited information to comply with legal obligations, resolve disputes or enforce our agreements. Backups are overwritten on a rolling basis.

8. Your rights

EU/UK: you may request access to, correction of, deletion of, or a copy (portability) of your data; restrict or object to certain processing; and withdraw consent at any time. You can also lodge a complaint with your local data-protection authority.

California & other US states: you may request to know, access, correct or delete your personal information, and to opt out of any “sale” or “sharing” (we do not sell or share for advertising). We will not discriminate against you for exercising these rights.

To exercise any right, use the in-app controls or email privacy@onwards.click. We may need to verify your identity before responding.

9. Deleting your account and data

You can start account deletion from inside the app (in Profile). When deletion completes, we delete your account with our identity provider, purge your data stored on your device, remove your data from any backend we hold (unless we are legally required to keep specific records), and — if you used Sign in with Apple — revoke your Apple sign-in token. “Delete” is intended to mean gone.

10. How we protect your information

Encryption of data in transit (HTTPS/TLS) and encryption at rest where supported by our providers.
Access controls and least-privilege practices for systems holding personal data.
Reputable sub-processors (Clerk, Google, Apple, AWS) selected for their security posture and bound by data-processing terms.
Storing much of your data on your own device, reducing what is held centrally.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

onwards is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us information, contact privacy@onwards.click and we will delete it.

12. Not medical advice

onwards is a wellness companion, not a medical device or healthcare provider, and does not provide medical advice or diagnosis. Always consult a qualified professional about your health. If your relationship with food, eating or your body feels overwhelming, support is available — in the US, the National Alliance for Eating Disorders helpline is 1‑866‑662‑1235 (Mon–Fri) with free referrals at findedhelp.com.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with an updated “Last updated” date and, for material changes, provide additional notice in the app or by email where appropriate.

14. Contact us

Questions or requests: privacy@onwards.click · [Legal Entity Name], [Registered address].

← Back to onwards.click