Privacy
How Gainloop handles your data
Your account, your data only
Every page and data request checks who is signed in, and every record is tied to your account, so no other user can ever see your logs, photos or plans. Passwords are stored as one-way hashes. Two-factor sign-in is available in Settings.
What's stored
Meals and nutrition, water, weigh-ins, measurements, body-fat readings, workouts, Apple Health activity, supplements, daily check-ins, reviews and research notes — in a private Postgres database (Neon). Calculations (calories burned and left to eat, macros, averages, trends, e1RM, nutrient limits) are done by code, not by AI.
Photos
Progress photos are stored in a private storage bucket (or the private database) and are only ever served to you while signed in — there are no public or shareable links. Location and camera metadata (EXIF) are stripped in your browser before upload. Food photos are kept as small thumbnails on the meal they belong to. Receipt photos are read once to list what you ordered and are never saved; card numbers, names and addresses on them are ignored.
AI
AI is used to read food photos, receipts and descriptions, scan supplement labels, answer questions about your own logs, word your reviews and summarize research. Requests go to paid models through OpenRouter and only to providers that don't store prompts to train their models; free AI tiers are never used. When a receipt is scanned, only the restaurant and item names (never your data) are searched on the web to find published nutrition. Progress photos are only sent when you've turned on photo analysis and tap Analyze, always through zero-data-retention endpoints, and the AI never estimates body-fat % from a photo. Private AI routing (Settings) extends zero retention to chat, reviews and research. AI numbers are labelled as estimates and you can correct them before saving.
If the morning email is on, a summary of your numbers (no photos) is sent to your own inbox through Resend. Turn it off any time in Settings.
Apple Health
If you set up sync, your iPhone sends active and resting calories, steps, exercise minutes, distance, Apple Watch workouts, sleep, resting heart rate, weight and body fat using a token you create. The home-screen widget uses a separate read-only token that can only see today's totals. Only a fingerprint (hash) of each token is stored, and any token can be revoked.
The owner's notes
Today's food entries (name, time and macros), daily totals, targets and morning weight are mirrored to the owner's private Obsidian knowledge base for the owner's own account only — no other user's data is ever copied there (a private GitHub repository) so other personal tools stay in sync. Photos, body measurements and check-ins are never mirrored. The tracker's database stays the source of truth for logs.
Export & delete
Everything can be downloaded as JSON or CSV from Settings, and you can permanently erase all tracking data, or your whole account, there. Health data is collected only with your consent at sign-up, is never sold, and is never shared for advertising. If a breach ever affected your data, you'd be notified without unreasonable delay — and, where the FTC Health Breach Notification Rule applies, no later than 60 calendar days after it was discovered.
Gainloop is a general fitness and wellness tool. It doesn't diagnose, treat or prevent any condition and isn't a substitute for a doctor's advice.
Last updated October 21, 2026