Who we are
HRT Tracker is operated by CruzNet LLC, a US company. Questions or concerns: support@cruznetllc.com.
What we collect and why
We collect only what the app needs to work:
- Account identity — your name and email address, provided via Google Sign-In. Used to authenticate you and display your account name.
- Health & protocol data — doses, compounds, frequencies, bloodwork markers, vitals (BP, weight, glucose, mood), physique measurements, weekly check-ins, and competition dates. Stored in your private account to power the dashboard. Never shared.
- Usage events — anonymous funnel events (page views, sign-in, first log) tied to a browser-local ID. Used to understand how people discover and adopt the app so we can improve it. No personal information is attached until you sign in, and even then the data is only used in aggregate by us internally.
- Third-party workout data — if you enter a Hevy API key, workout data is fetched directly from the Hevy API in your browser. We do not store your Hevy API key server-side.
How data is stored
Your data is stored in two places:
- Your device (localStorage) — protocols, vitals, dose logs, and bloodwork are cached locally so the app works offline and loads instantly.
- Supabase (cloud database) — a PostgreSQL database hosted in the US on Supabase's infrastructure. Your data is isolated by user ID with row-level security policies — no other user can read your rows.
All traffic between your browser, our Cloudflare Worker, and Supabase is encrypted in transit (HTTPS/TLS).
Who we share data with
We do not sell, rent, or trade your personal or health data to any third party. The only infrastructure providers who process your data are:
- Supabase — database & authentication hosting
- Cloudflare — CDN, Workers runtime, and edge delivery
- Google — OAuth sign-in (name & email only, no health data)
If you use the optional coaching feature (share token), you choose which coach can see your data. You control this and can revoke it at any time.
Your rights and controls
- Export — download a full JSON copy of all your data at any time from Settings → Your Data → Export All Data.
- Delete — permanently delete your account and all associated data from Settings → Your Data → Delete Account. Deletion is immediate and irreversible.
- Correction — update or overwrite any log entry directly within the app.
- Portability — the exported JSON is structured and human-readable; you own it.
Cookies & local storage
We do not use advertising cookies. We use localStorage (not cookies) to cache your app data locally and store a randomly generated anonymous ID for funnel analytics. No cross-site tracking.
Children
HRT Tracker is intended for adults 18 and older. We do not knowingly collect data from minors.
Changes to this policy
If we make material changes, we'll update the "Effective" date at the top of this page and, if your email is on file, notify you. Continued use of the app after changes constitutes acceptance.
Contact
Privacy questions & data requests
support@cruznetllc.com