Legal & Privacy

Last updated: March 5, 2026

Terms of Service

1. Acceptance of Terms

By accessing or using Zero Friction ("the Service"), you agree to be bound by these Terms of Service. If you do not agree with any part of these terms, you must not use the Service.

2. Description of Service

Zero Friction is a personal health and performance tracking application that allows users to log daily vitals, nutrition, hydration, training activities, and receive AI-generated insights. The Service is provided as-is for personal, non-commercial use.

3. User Accounts

You must authenticate via Google OAuth to use the Service. You are responsible for maintaining the security of your Google account. Each account is personal and may not be shared or transferred.

4. User Responsibilities

You must provide accurate health data for your own personal tracking
You must not attempt to access other users' data
You must not use the Service for any unlawful purpose
You must not attempt to reverse-engineer or compromise the Service

5. Medical Disclaimer

Zero Friction is not a medical device and does not provide medical advice, diagnosis, or treatment. AI-generated insights are for informational purposes only. Always consult qualified healthcare professionals before making health decisions.

6. Availability & Modifications

We reserve the right to modify, suspend, or discontinue the Service at any time without notice. We may update these Terms periodically. Continued use after changes constitutes acceptance.

7. Limitation of Liability

The Service is provided "as is" without warranties of any kind. We shall not be liable for any indirect, incidental, or consequential damages arising from your use of or inability to use the Service, including but not limited to data loss or health decisions made based on Service outputs.

8. Termination

We may terminate or suspend your account at our discretion if you violate these Terms. You may delete your account at any time by contacting the administrator, which will permanently remove all your stored data.

Privacy Policy

1. Information We Collect

Account information: Name, email address, and profile image provided through Google OAuth
Health data: Daily vitals (weight, glucose, HRV, readiness), nutrition logs, hydration logs, and training logs that you voluntarily enter
AI interaction data: Contextual notes and AI-generated briefings
User settings: Personal goals, health constraints, and API keys you configure

2. How We Use Your Data

Your data is used exclusively to:

Display your personal health and performance dashboards
Generate AI-powered insights and briefings via Google Gemini
Maintain your authenticated session

We do not sell, share, rent, or trade your personal data with third parties for marketing or advertising purposes.

3. Data Storage & Security

Data is stored in a secured PostgreSQL database hosted on Supabase
All connections are encrypted in transit via TLS
Database access requires authentication and is restricted by Row Level Security
User-provided API keys are stored encrypted and scoped to individual accounts

4. Third-Party Services

The Service integrates with:

Google OAuth: For authentication only. We access your name, email, and profile image.
Google Gemini AI: Your health data may be sent to the Gemini API to generate personalized insights. This uses your own API key and is subject to Google's AI terms.
Supabase: Database hosting, subject to Supabase's Privacy Policy.

5. Data Retention

Your data is retained for as long as your account is active. Upon account deletion, all associated data (vitals, logs, AI briefings, settings) is permanently deleted from our database. There is no recovery after deletion.

6. Your Rights

You have the right to:

Access and view all data stored about you within the application
Request correction of inaccurate data
Request deletion of your account and all associated data
Withdraw consent to data processing by ceasing use of the Service

7. Cookies & Tracking

We use only essential session cookies required for authentication. We do not use analytics trackers, advertising cookies, or any third-party tracking scripts.

8. Contact

For questions about these policies, data requests, or account deletion, please contact the application administrator.