Privacy Policy
Effective July 15, 2026 · Last updated July 15, 2026
The short version
- We don't sell your data. Not to advertisers, not to anyone.
- Your tracking data is private by default. Your sessions, weight, sleep, and meals are visible only to you.
- Community posts are public. Anything you post to the Community feed can be seen by anyone — including people without an account.
- Food photos are never stored. They're analyzed in the moment and discarded. Only the nutrition numbers are saved.
- We never see your card details. Stripe handles all payments.
- You can delete everything, at any time, by emailing us.
This summary is for readability. The full policy below is what governs.
1. Who we are
Modality ("Modality", "we", "us") is a recovery and wellness tracking app based in Chicago, Illinois, United States. This policy explains what we collect when you use modalityclub.com and the Modality app, why we collect it, and what control you have over it.
For any privacy question, contact privacy@modalityclub.com.
2. What we collect
Information you give us
| Category | What it includes | Why |
|---|---|---|
| Account | Email address and password | To create your account and sync your data across devices. Passwords are hashed and managed by Google Firebase Authentication — we never see or store your actual password. |
| Wellness profile | Display name, profile photo or avatar, age, gender, height, weight, and your selected goals | To personalize your calorie target, recommendations, and coaching suggestions. All of this is optional — the app works without it. |
| Tracking data | Recovery sessions (sauna, red light, cold exposure, hyperbaric, IV, compression), water intake, sleep, weight over time, meals and their calories/macros | This is the core function of the app — it's what we show back to you as your history, streaks, and trends. |
| Community content | Posts, comments, likes, and any photos you attach to a post | To operate the public Community feed. |
Information collected automatically
- Subscription status — your Stripe customer ID, subscription ID, plan status, and renewal date. See §4.
- Notification token — only if you turn on reminders. Used solely to deliver the reminders you asked for; deleted when you turn them off.
- Technical logs — our hosting and server infrastructure (Google Firebase) records standard request data such as IP address, timestamp, and error diagnostics. We use this to keep the service running and secure.
Health-related data. Some of what you track — your weight, age, gender, and meals — is personal health information, and we treat it accordingly. Modality is a consumer wellness product, not a healthcare provider, insurer, or their business associate, so HIPAA does not apply to it. Please don't enter medical records, diagnoses, or clinical information into the app.
3. Food photos — how they're handled
This deserves its own section, because it's the question people ask most.
When you photograph a meal, the image is read in your browser and sent directly to our analysis service, which passes it to Anthropic's Claude API to identify the food and estimate its nutrition. The estimate comes back and is shown to you.
- We never save the photo. It isn't written to our database or our file storage. Once the response is returned, our copy is gone.
- Only the numbers persist — the food name, calories, protein, carbs, and fat — and only if you tap to add the meal to your day.
- Anthropic processes the image to generate the response and handles it under their own commercial terms. Anthropic does not use data submitted through their API to train their models.
Photos you attach to a Community post are different — those are intentionally published, and they are stored (see §5).
4. Payments
Subscriptions are processed by Stripe. Your card number, CVC, and billing details go directly to Stripe and never touch our servers — we can't see them.
What we do store is the minimum needed to know whether your subscription is active: your Stripe customer ID, subscription ID, status, and current period end date. Stripe's own handling of your payment data is governed by the Stripe Privacy Policy.
5. What's public and what's private
This is the most important distinction in the app, so please read it carefully.
Private — only you can see it: your tracking data, weight history, meals, sleep, water, wellness profile (age, gender, height, weight), and goals. Our security rules restrict these records so that only your signed-in account can read them.
Public — anyone can see it: your Community posts, comments, likes, your display name, and your profile photo or avatar. The Community feed is readable by anyone visiting the site, including people who are not logged in. Don't post anything you wouldn't want publicly associated with you.
6. How we use your information
- To provide the app: saving your logs and showing your history, streaks, and trends.
- To personalize: calculating your calorie target and tailoring suggestions to your goals.
- To operate the Community feed and moderate it.
- To process your subscription and trial.
- To send reminders — only if you explicitly turn them on.
- To keep the service secure, debug problems, and prevent abuse.
- To comply with the law.
We do not: sell or rent your personal information; share it with advertisers or data brokers; use your private tracking data to train AI models; or send you marketing email you didn't ask for.
7. Who we share it with
We share data only with the service providers that make the app work, and only as much as each one needs:
| Provider | What it handles | Their policy |
|---|---|---|
| Google Firebase | Accounts, database, file storage, hosting, push notifications | Firebase Privacy |
| Anthropic | Food photo analysis (images only, not stored by us) | Anthropic Privacy |
| Stripe | Subscription payments | Stripe Privacy |
We may also disclose information if legally required (a valid subpoena or court order), to protect someone's safety, or as part of a merger or acquisition — in which case we'd notify you first.
8. Data retention and deleting your account
We keep your data for as long as your account exists. If you'd like it deleted, email privacy@modalityclub.com from your account's email address and we'll erase your account, profile, tracking history, and stored photos within 30 days.
Two caveats, so there are no surprises:
- Deleting your account does not automatically remove your public Community posts and comments. Tell us if you want those removed too, and we'll take them down.
- Stripe retains payment and invoice records independently, as required by financial and tax law.
Cancelling your subscription is separate from deleting your data — see the Terms of Service.
9. Security
Your data is encrypted in transit (HTTPS everywhere) and at rest by our infrastructure providers. Access is enforced by server-side security rules — your private records are readable only by your authenticated account, and your subscription status can only be written by our payment webhook, never by a browser.
That said, no online service can promise perfect security, and we won't pretend otherwise. Please use a strong, unique password.
10. Your rights
Wherever you live, you can ask us to:
- Access a copy of the data we hold about you
- Correct anything inaccurate
- Delete your data
- Export your data in a portable format
- Object to or restrict certain processing
Email privacy@modalityclub.com and we'll respond within 30 days, free of charge.
If you're in the EU or UK, our legal bases for processing are: performing our contract with you (running the app and your subscription), your consent (notifications, optional profile details), and our legitimate interests (security and abuse prevention). You may also lodge a complaint with your local data protection authority.
If you're in California, you have the rights above under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, and we will never discriminate against you for exercising a privacy right.
11. International transfers
Our infrastructure is hosted in the United States. If you use Modality from elsewhere, your data is transferred to and processed in the US, which may have different data protection laws than your country. By using the app, you understand this transfer takes place.
12. Children
Modality is not intended for anyone under 18. We don't knowingly collect data from children. If you believe a minor has created an account, email us and we'll delete it.
13. Not medical advice
Modality is an educational tracking tool. It does not diagnose, treat, cure, or prevent any condition, and nothing in it — including AI nutrition estimates, coaching suggestions, and research summaries — is medical advice. Always consult a qualified healthcare professional before changing your diet, exercise, or recovery routine. See the Terms of Service for the full disclaimer.
14. Changes to this policy
If we make a material change, we'll update the date at the top and notify you in the app or by email before it takes effect. Continuing to use Modality after a change means you accept the updated policy.
15. Contact
Questions, requests, or concerns — we'd genuinely like to hear them:
Privacy: privacy@modalityclub.com
Support: support@modalityclub.com