Privacy Policy

1. Who operates N&S WholeLife

N&S WholeLife is a product of N & S Confidence Reaction Services. References to “we,” “us,” or “our” in this policy mean N & S Confidence Reaction Services. For privacy or data questions, contact support@nandswholelife.com.

2. Scope

This policy covers the current version of the N&S WholeLifewebsite (this site) and the current version of the N&S WholeLife native app for iOS and Android. It does not cover any third-party site or app you reach through a link from N&S WholeLife.

3. Information you provide

• Email address — required to create and sign in to your account.
• Display name — optional; your legal name is never required.
• Onboarding and profile preferences — region, preferred language, primary wellness goal, movement preference, and meal preference. These are collected during onboarding to personalise your experience and are optional except where onboarding itself requires a selection to continue.
• Optional tracker entries— see “Wellness and fitness information” below.
• Account-deletion requests— see “Deletion” below.

4. Account and access information

We record trial and subscription entitlement information (such as your trial end date and subscription status) so the app can determine whether your account currently has access. The native app only reads this entitlement status — it never collects a card number, bank detail, or other payment instrument itself. Where a purchase happens on our website, see “Payment information” below.

5. Wellness, fitness and nutrition information

If you choose to log them, we store the following entries against your account so your progress can be shown back to you:

• Water intake
• Movement / activity minutes and general workout completion
• Sleep / rest hours
• Mood check-ins
• Tracked activities— walks, runs, hikes, and rides you choose to track, including elapsed and moving time, distance, pace, elevation gain, and the route you covered (see “Location and activity tracking” below)
• Nutrition profile — age, sex, height, weight, activity level, and nutrition goal, used to calculate your daily energy and macronutrient targets
• Food and meal logs — the items you log, with their energy and macronutrient values

We do not describe all of this as simply “fitness” data. Sleep, mood, hydration, body measurements, nutrition, and maternal-wellness information can be sensitive wellness/health-related information, and we treat it with the same care as the rest of your account data — it is private to you, used only to power your own progress views and guidance, and never used for advertising.

Optional pregnancy or breastfeeding status. When setting up a nutrition profile you may optionally tell us that you are pregnant or breastfeeding. Providing this is entirely optional, and you can use the app without it. We treat it as sensitive personal information, and we use it only to tailor the nutrition and wellness guidance shown to you — for example, so that ordinary weight-loss or weight-gain targets are not calculated for you. It is never used for advertising, and it is never shared with advertisers or used to profile you.

All tracker logging is optional. You can use the app fully without ever logging a tracker entry.

Location and activity tracking

When you start a location-based activity in the app — such as a walk, run, hike, or ride — N&S WholeLife collects precise location data while that activity is being tracked. We use it only to:

• Calculate the distance you covered
• Draw and save the route for that activity
• Show that activity in your history and progress

Location is collected only for activities you start yourself. Tracking continues if your screen locks during an activity, and stops as soon as you finish it. The app asks only for “While Using the App” location access — it never requests always-on or background location outside a running activity, and it does not track your location when you are not recording an activity.

Saved routes are stored against your own account and are private to you. Maps are drawn using Apple Maps on iOS, which is provided by Apple as part of the device platform. Your location and route data is never used for advertising, never used for cross-app or cross-site tracking, never sold, and never shared with advertisers or data brokers. You can decline or withdraw location permission at any time in your device settings; activity tracking simply will not record distance or a route without it.

6. Motherhood information

The Motherhood section offers pregnancy, postpartum, and nursing wellness content and guided movement sessions, organised by stage. It does not include any fertility, menstrual-cycle, or medical-record tracking, and it does not diagnose or treat any condition.

Completion and timer state for a Motherhood guided workout session stays on your device only — it is not transmitted to or stored on our servers.

Meal photos and AI meal recognition

The app includes an optional Scan feature that can recognise a meal from a photo so you can log it without typing it in. This only ever happens when you choose to scan a meal — N&S WholeLife never accesses your camera or photo library on its own.

When you scan a meal:

• The photo is re-encoded on your device before it is sent, which strips embedded metadata such as EXIF location (GPS) — where the photo was taken is never transmitted.
• The image is sent to our server and passed to our AI processing provider, Cloudflare Workers AI, purely to identify the food and estimate its nutrition in real time.
• We do not store the photo. The image is processed for that single request and is not saved to your account or anywhere else. We keep only a non-reversible hash of the request, plus which provider and model answered it, so we can apply fair-use limits.
• What is saved is the result you choose to log — the food name and its nutrition values — exactly as if you had typed it in yourself.

Meal photos are never used for advertising, never used to profile you, never used for cross-app tracking, and never sold. Scanning is entirely optional — you can log every meal manually and never use it.

7. Local-only information

Some information never leaves your device and is not collected by us at all:

• Your grocery list, built from Meals selections
• Motherhood guided-session completion and timer state
• In-progress countdown/timer state while you are inside a guided workout session

8. Service providers

Supabase provides authentication, database, and backend infrastructure for N&S WholeLife. Where a feature requires server-side storage (for example, tracker entries, onboarding preferences, or account/entitlement records), the relevant account or wellness data is processed by Supabase on our behalf to operate that feature. We do not use Supabase for advertising or cross-app tracking.

On the website only, we also use Paystack for payment processing (see “Payment information” below), Vercel Analytics and Speed Insights to measure page performance, and Sentryfor error reporting — see “Cookies and tracking” below for how each is limited. The native app does not include any analytics, advertising, or crash-reporting SDK.

9. How we use information

• To operate your account and verify sign-in
• To determine your access/entitlement status
• To provide app functionality you request (meals, workouts, Motherhood content)
• To show your own tracker entries and workout history back to you
• To calculate distance, pace, and route for an activity you choose to track, and to save it to your activity history and progress
• To calculate your daily energy and macronutrient targets from the nutrition profile you provide, and to show your food logs back to you
• To personalise the wellness and nutrition guidance you see — including adjusting it where you have optionally told us you are pregnant or breastfeeding
• To maintain account and platform security
• To process account-deletion requests

All of the information described in this policy is used to operate the app and personalise your own experience. We do not use your information for advertising or personalised-ad targeting, we do not use it for cross-app or cross-site tracking, and we do not sell it to advertisers or data brokers — N&S WholeLife has no advertising SDK, no ad-targeting feature, and no cross-app tracking of any kind.

10. Sharing and disclosure

We do not sell your personal data, and we do not share it with advertisers. Data is sent to the service providers named above strictly to operate N&S WholeLife(for example, Supabase to store and serve your account data, or Paystack to process a website purchase you initiate) — not for those providers' own independent purposes. We may also disclose information where required to comply with a legal obligation. N&S WholeLife has no public profile, feed, or social-sharing feature, so your wellness data is never made visible to other users.

11. Payment information

We do not store full card numbers or card security codes. Website payment processing — including your card details — is handled by Paystack, our third-party payment provider. The native app never displays a price, never links to a checkout flow, and never collects any payment-card or bank detail itself.

We do retain limited transaction-verification and audit records for each website payment: the provider's transaction reference, amount, status, event type, relevant dates, your account identifier, and masked or tokenised metadata where Paystack supplies it. These records are kept only as reasonably necessary for payment support, fraud prevention, dispute handling, accounting, tax, and legal or regulatory obligations, and are not retained for longer than necessary for those purposes.

12. Security

Data in transit between the app and our backend uses HTTPS/TLS. Server-side access to your data is scoped to your own account through Supabase's row-level security, and neither the web nor native app uses a privileged service-role key for ordinary reads or writes. No method of transmission or storage can be guaranteed 100% secure, and we cannot promise absolute security.

13. Retention

We do not commit to a fixed retention period here. Account and wellness data is retained for as long as reasonably needed to operate your account and the features described in this policy, and to meet legitimate accounting, tax, or legal obligations where applicable. Exact retention specifics beyond this are not yet finalised and remain a founder/legal decision — this policy will be updated once that decision is made, rather than stating a number now that is not yet true. Deletion requests are handled under the request-based process described below.

14. Deletion

You may request deletion of your account and associated data at any time — from inside the app under Settings → Account, or using our account deletion page. Submitting a request records that you want your account deleted — it does not delete anything immediately. Requests are normally completed within 30 calendar days — this may include identity verification and can pause where identity, fraud, legal or regulatory verification is genuinely outstanding — and our operator will confirm completion directly. Any payment already made is not automatically reversed, and this excludes limited transaction and audit records we are required or permitted by law to retain for the purposes described above.

Your rights

• You may request access to any personal data we hold about you.
• You may request correction of any inaccurate data.
• You may request deletion of your account as described above.
• You may withdraw any optional consent at any time.

To make a data or privacy request, contact us at support@nandswholelife.com.

15. Children

N&S WholeLife is intended for adult account holders. We have not yet set a specific minimum-age policy for this service — that exact wording remains a founder/legal confirmation, and we are not stating an age threshold here until it is finalised.

Cookies and tracking

N&S WholeLife uses only essential session cookies required for authentication and app functionality. We do not use third-party advertising trackers or cross-site tracking cookies.

We do use two privacy-conscious services on the website to keep it working properly. Vercel Analytics and Speed Insights measure which pages are visited and how quickly they load. They set no cookies, do not follow you across other websites, and are not given your name, email address or any account details.

We also use Sentry on the website to alert us when something breaks — for example a failed payment confirmation or a page that will not load. These diagnostic reports are configured to exclude personal information: no passwords, no password-reset links, no payment card details, no email addresses and no message contents are sent. Where a report needs to be linked to an account so we can fix that person's problem, only an internal account identifier is included. The native app does not include Vercel Analytics, Speed Insights, Sentry, or any other analytics/crash-reporting SDK.

16. Changes to this policy

We may update this policy from time to time. The current version always lives at this page. Material changes will be reflected here with an updated date.

Contact

For all privacy and data enquiries: support@nandswholelife.com

N&S WholeLife — A product of N & S Confidence Reaction Services