Privacy policy

Last updated November 3, 2026.

Scaledown is a weight-loss tracker you share with the people you choose — your family, a team, coworkers or friends. This policy explains what it stores, who can see it, and how long it’s kept.

What we store

• Your name, sign-in handle, a scrambled (hashed) password and — only if you add it — an email address used just for password resets. If you use Sign in with Apple, we store Apple’s anonymous user ID for your account.
• Sign-in sessions for each device you use. A session ends when you sign out, after 60 days without using the app, or after a year at most.
• If you turn on notifications in the iPhone app, a device token so we can send you alerts. If you turn on background Apple Health sync, a per-device key (stored scrambled) so your phone can send new readings while the app is closed.
• What you log: weight, calories eaten and burned, food entries, body fat and muscle %, tags, locked days, vacations and your plan settings.
• Group activity: which groups you’re in, cheers, reactions, challenges, team goals, and any reports you send about other people.
• A profile photo, if you add one. People in your groups and your friends can see it.
• Meal plans, saved foods and saved meals you create.
• If you buy Scaledown Pro: which plan you have, when it renews or ends, and the product you bought. We never see or store your payment details. Apple handles payment.
• Feedback you send from the app: your message, the screen you were on and the app build.
• Error reports: if the app hits an error, it sends the error message, the screen and the app build so we can fix it. These reports aren’t tied to your account.

Apple Health

If you connect Apple Health in the iPhone app, Scaledown reads: body weight and body fat percentage; active and resting energy (calories burned); steps and workouts; sleep; heart rate, resting heart rate, heart-rate variability and respiratory rate (used for the sleep, readiness and strain scores). Scaledown only writes to Apple Health if you turn on “Write weigh-ins to Apple Health”, and then only the weights you type into Scaledown.

Health data is used only to run Scaledown for you. It is never sold, never used for advertising or marketing, and never shared with data brokers. Your raw Health data — your weight, calories, sleep and heart readings — is never shown to anyone else. You can disconnect at any time in the app or in the iPhone Settings app under Health → Data Access & Devices.

Who can see what

Only people in groups you’ve joined can see you, and only inside that group. Depending on your privacy setting (which you can set per group), they may see figures calculated from your log — your percentage toward your goal, percentage lost, your share of a team goal — plus your streaks, which days you weighed in and locked in, and achievements. Or, on “Private”, nothing at all. Your actual weight and calories are never shown to anyone. You can block anyone, and they’ll disappear from everything you see (and you from theirs).

Services we use

• Railway hosts the server and database. All traffic uses encrypted HTTPS.
• Apple delivers notifications and Sign in with Apple.
• Food databases (fatsecret, USDA FoodData Central, Open Food Facts) receive the words you search or the barcode you scan — never your name or account.
• Resend sends password-reset emails, which contain nothing but the code, and forwards feedback you send to our support inbox.
• Apple processes Scaledown Pro purchases, and RevenueCat tells our server which plan you have. RevenueCat receives your Scaledown account ID and your purchase receipts from Apple, never your name, email, weight or Health data. See RevenueCat’s privacy policy at revenuecat.com/privacy.

We don’t use analytics, ads or third-party trackers.

How long we keep it

• While you have an account, we keep your log so your trend and history work.
• When you delete your account (Plan & profile → Delete my account), your profile, log, food, Health data, device keys and sessions are deleted immediately and permanently, and your posts are removed from group feeds.
• If an administrator removes an account, a copy of its data is kept for 30 days in case the removal was a mistake, then deleted automatically.
• Reports you send about someone, and reports about you, are kept with the names involved so we can act on them and spot repeat abuse.
• Database backups made by our host roll over on their own schedule; deleted data disappears from them as they expire.

Contact

Questions? See the support page.