Privacy Policy

Overview

Mission Winning (“we”, “us”) is operated by Mission Winning LLC and provides the Mission Winning apps and websites (including missionwinning.com). Privacy is the default: workouts and logs stay on your device until you sign in to sync. Optional product analytics are off until you allow them. This policy explains what we collect, why, and your choices for the hosted consumer service. The hosted service is not offered in Europe, Canada, Ukraine, or OIC member states — see Supported Regions. This policy is not a GDPR Article 13/14 notice for EEA/UK residents because we do not support those regions as customers of the hosted service.

What we collect

• Account: email address when you sign in (Apple, Google, Microsoft, Facebook, or magic link).
• Health & fitness data you enter: workouts, nutrition logs, assessments, journey progress, preferences (units, language, goals).
• Optional product analytics: typed product events (e.g. journey milestones, checkout) only if you allow analytics. No session recording, no autocapture of form fields.
• Local storage: the free core works offline; data stays on your device until you sign in to sync.
• Optional AI coach context: only when operators enable the coach LLM — a minimal summary (scores, streak, focus, session names), not full set-by-set workout history.
• Optional meal photos: when you use photo meal logging, the image is sent to our estimate API to suggest macros; we do not use meal photos for advertising and do not keep them as a long-term photo library.
• Optional push notifications: when you enable them, we store your browser push subscription (endpoint and keys) and — on devices without an account — a random device identifier, your time zone, and schedule preferences. Never your workout history.
• Optional AI usage metering: when AI features run, we record usage rows (feature, model, token counts, date) keyed to your account or device identifier — never the content of your prompts or the model's replies.
• Crypto checkout: when you pay with USDC, we record the payment intent (wallet address, amount, transaction reference) needed to deliver and support the purchase.

How we use data

• Provide and personalize your training journey (Today, recommendations).
• Sync across devices when signed in (Supabase cloud database).
• Process premium enrollments and support requests.
• Improve the product with aggregate funnel metrics — only when product analytics are allowed on your device.

Third parties

We use the subprocessors listed below. We do not use Meta Pixel or Google Analytics advertising tags in the app. Each vendor has its own privacy terms. Session recording is disabled in our PostHog config. Payment refunds are described on /refunds.

Your choices

• Use the free core without an account (local-only).
• Export or restore device data from Profile → Back up your data.
• Request access or deletion of your account and cloud data: support@missionwinning.com — see Data deletion & retention (erase within 30 days of a verified request, with legal exceptions).
• Control product analytics anytime: first-visit banner, or Profile → Privacy & analytics. Browsers with Do Not Track keep analytics off.

California privacy (CCPA)

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). California residents may request access or deletion of personal information we hold by emailing support@missionwinning.com. We will verify and respond as required by law.

Not medical advice

Mission Winning provides educational fitness tools only. Consult a qualified professional before starting new exercise or nutrition programs.

Subprocessors

Supabase (authentication and database); Vercel (app hosting); Stripe and/or PayPal (payments when enabled); Resend (transactional email when enabled); PostHog EU (product analytics, EU-hosted, only if you allow it — session recording disabled); Sentry (error monitoring, with personally identifying fields disabled); Upstash (rate limiting — transient request keys only); browser push services from Google, Mozilla, or Apple (only when you enable notifications); OpenFoodFacts (food and barcode lookup — the query only, never your account data); Solana RPC / Phantom (only when you choose to pay with USDC); optional OpenAI-compatible LLM provider when operators enable AI coach features (preferred: SpaceXAI/xAI with team Zero Data Retention). We remain the controller for consumer accounts; business customers who need a DPA should request docs/legal/DPA.md via support.

Local-first by design

Training logs, nutrition, and journey progress are stored on your device first. Cloud sync is optional and requires sign-in. We do not sell personal health data. The app harness is open source so you can inspect how privacy works.

AI features (disclosure)

Mission Winning discloses that some features may use artificial intelligence. The free core coach (rules-based weekly plan and offline adjustments) does not require an AI API key and does not send your data to a model. When operators enable optional AI features — such as LLM coach chat/voice, daily insight, or photo meal macro estimates — we process limited inputs with a configured provider (recommended: SpaceXAI/xAI). We do not sell that content or use it for ads. When the provider is xAI with team Zero Data Retention (ZDR), xAI does not retain API prompts or outputs at rest (see xAI security FAQ). Cloud sync, payments, email, and product analytics remain separate third parties — ZDR does not replace those policies.

Supported Regions & territorial scope

The hosted Mission Winning consumer service is directed to users in Supported Regions. We do not offer the hosted service to residents of Europe (EEA, United Kingdom, Switzerland, France, and associated territories), Canada, Ukraine, or Organisation of Islamic Cooperation (OIC) member states — see /regions. If you are in an unsupported region, do not create an account or send us personal data expecting a supported customer relationship. Open-source self-hosting is separate and is your responsibility. We may process limited technical data (such as IP-derived country signals) to enforce regional availability, fraud prevention, and legal compliance. California residents see CCPA rights below. We do not sell personal information for cross-context behavioral advertising.

Data deletion and retention

After we verify a deletion request from the account holder (email support@missionwinning.com with subject Data deletion from the account email), we will delete account-linked personal data we control in our cloud systems within thirty (30) days, except where retention is required or permitted by law (for example tax or accounting records for paid transactions, fraud or security investigations, or legal holds) or where a processor must retain records under its own legal duties. Ordinary backups are removed on normal rotation. Data stored only on your device is under your control (clear storage or uninstall). Self-hosted copies are the operators responsibility. California residents also see CCPA rights below.

Changes to this policy

This policy is versioned; the date above is the version you accept. Material changes re-prompt for consent in the app before your next sign-in, and are announced in the app or by email where appropriate. Earlier versions are available on request.

Children & youth

Mission Winning is not directed at children under 13, and youth school features require verifiable parental consent before any youth data syncs (consent records are kept server-side). Where local law sets a higher digital-consent age (up to 16 in parts of the EU), we rely on parental consent up to that age. Parents can request deletion of a child's data anytime: support@missionwinning.com.

Cookies & device storage

We set no advertising or third-party tracking cookies. Sign-in uses strictly necessary, httpOnly cookies; app data lives in your browser's local storage, on your device. The full inventory — every cookie and storage key, what it is for, and how long it lives — is on the Cookies page at missionwinning.com/cookies.

Health-related data (Art. 9)

Workouts, nutrition logs, assessments, body metrics, and mind check-ins are health-related data. Used without an account, they never leave your device. If you sign in to sync, we process them solely to provide the service you request — plans, history, and progress — on the basis of your explicit consent given at sign-up. We never sell health data and never use it for advertising. You can withdraw consent at any time by deleting your account, which deletes your cloud data.

International transfers

Some subprocessors process data in the United States (Supabase, Vercel, Stripe, Resend, Sentry, xAI). Where GDPR applies, transfers rely on Standard Contractual Clauses or an adequacy decision, with the vendor's data processing agreement in place. Product analytics stay in the EU (PostHog EU-hosted). An EU/UK Article 27 representative has not yet been appointed; until then, contact support@missionwinning.com for any data protection matter.

Lawful bases (GDPR)

• Contract (Art. 6(1)(b)): account creation, cloud sync, premium delivery, and support — processing needed to provide what you asked for.
• Consent (Art. 6(1)(a)): product analytics, marketing attribution, push notifications, and optional AI features such as photo meal estimates — each off until you switch it on, withdrawable anytime.
• Legitimate interests (Art. 6(1)(f)): security, rate limiting, abuse and fraud prevention, and error monitoring — limited to what a user would reasonably expect.
• Legal obligation (Art. 6(1)(c)): payment, tax, and accounting records we must keep by law.

Data retention

• Cloud data: kept while your account exists; deleting your account deletes it (database-level cascade, effective immediately).
• On-device history: non-training entries (nutrition detail, mind check-ins) are trimmed after 90 days on your device; training history stays until you clear it.
• Payment records: retained as required by tax and accounting law.
• Waitlist and beta emails: kept until you unsubscribe or ask us to delete them.

Your rights (GDPR)

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (most records are editable in-app).
• Erasure — delete your account and cloud data in-app (Profile → Account) or by email.
• Portability — download your cloud data as JSON in-app (Profile → Account) and your device data from Profile → Back up.
• Restriction and objection — ask us to limit or stop specific processing, including any processing based on legitimate interests.
• Withdraw consent — analytics and other consent-based processing stop going forward; withdrawal does not affect prior lawful processing.
• Complain — you can lodge a complaint with your local supervisory authority (EU/UK data protection authority) at any time.

Security & breach notification

Cloud data is protected with row-level security, verified server-side authentication, httpOnly cookies, rate limiting, and strict transport security. No system is perfectly secure: if a breach affects your personal data, we will notify you without undue delay and, where GDPR applies, notify the competent supervisory authority within 72 hours of becoming aware of it, as Art. 33 requires.

Where we offer the service

Questions: support@missionwinning.com