Privacy policy

This policy explains what data n1 (“the app”) collects, how we use it, and the rights you have over it. n1 is operated by Sunfluencer USA LLC (“we”, “us”), a Wyoming limited liability company, c/o Corporation Service Company, 1821 Logan Ave, Cheyenne, WY 82001, USA. For any privacy question or request, write to hello@iamn1.app.

What we collect

We collect data you give us during onboarding and use: identity (email, name, date of birth), body composition (weight, height, body fat), training inputs (goals, experience, equipment), and workout logs (sets, reps, weights, durations).

Optional inputs include sleep, mood, and energy logs; measurements (waist, hips, etc.); progress photos; and data from Apple Health or Health Connect if you connect them (see “Health data” below).

We also collect device-level diagnostics (app version, OS, crash reports) and aggregate usage analytics. We do not collect contacts, photo libraries beyond progress photos you explicitly upload, browsing history, or precise location.

Health data (Apple Health, Health Connect)

In the phone app you can connect n1 to Apple Health (iPhone) or Health Connect (Android). n1 reads nothing until you allow it on your phone's permission screen. Today it reads four types of data: weight, body fat, resting heart rate and sleep. It writes one: the strength workouts you finish in n1. The web app cannot reach either store and reads nothing from them.

n1 reads these to keep your body log up to date without typing, and uses them where it uses the same values you log yourself. It writes your workouts so that your health app shows the training you did in n1.

Health data is treated as sensitive. It is never sold, never shared with advertising networks or data brokers, never used for advertising or marketing, and never used to choose the supplement content n1 shows you.

To stop the import, open Settings ▸ Body data and tap Disconnect, then remove n1's access in your phone's Health or Health Connect settings. Readings already imported stay in your body log until you delete them: Settings ▸ Start from scratch ▸ Start completely fresh, with “Also delete weigh-ins” ticked, deletes them at once; deleting your account deletes them at the end of its 30 days; or ask us at hello@iamn1.app.

How we use it

• To generate your training plan, weekly review, and per-set weight recommendations.
• To project body-composition timelines and track calibration against your actual data.
• To deliver push notifications you've opted into (morning check-in, evening summary, coach messages, achievements).
• To improve recommendation quality across the user base via de-identified aggregates only — never tied back to your account.

Who we share with

We use a small set of processors, each handling only the minimum data needed for its function: Supabase (database and sign-in), Anthropic (text generation for the coach chat, coach messages, the morning brief and the food estimate) and Expo (push delivery). Exercise videos are played from YouTube, a Google service that is not our processor: Google acts under its own privacy policy (see below).

We do not sell or rent your data. We do not share with advertising networks. We do not allow third-party tracking pixels inside the app. Exercise videos from YouTube (Google) load only after you press Play, from youtube-nocookie.com — the still image you see before that is served by n1. Once a video plays, Google receives your IP address and device information and may set cookies. n1 never sends YouTube your account, your workouts or your health data.

International transfers

Some processors above may store or process data outside your country of residence. Where that happens, transfers are made under appropriate safeguards (such as the processor's standard contractual clauses).

Retention

We retain your data while your account is active. Account deletion is a soft-delete with a 30-day cooling-off window — log back in any time during that window to cancel. After 30 days, your profile, sessions, and personal records are permanently anonymised.

Security

Data is encrypted in transit. Database access is constrained by row-level security so accounts cannot read each other's data, and progress photos are stored in a private bucket served only through short-lived signed URLs. No system is perfectly secure, but we work to protect your data and will notify you of any breach affecting it as required by law.

Your rights (GDPR Articles 15–22)

• Access: download a JSON copy of every row tied to your account from Settings ▸ Data & privacy.
• Rectification: edit your profile, goals, body metrics, and preferences at any time inside the app.
• Erasure: Settings ▸ You & account ▸ Delete account starts the 30-day deletion window.
• Portability: the JSON export is in a structured, machine-readable format for re-import into another service.
• Object / restrict: opt out of any optional processing (analytics, the health import, exercise videos) from Settings without losing core functionality. Exercise videos: Settings ▸ Data & privacy ▸ Exercise videos — Ask first, Always play or Off.

Children

The app is not directed at users under 16. We do not knowingly collect data from anyone under that age. If you believe a minor has signed up, contact us and we'll delete the account.

Changes

We'll notify you in-app at least 30 days before any material change to this policy takes effect. The “Last updated” date above will change with every revision.