PRIVATE BY DESIGN

Your tracker, your records

This browser connects automatically to its own private tracker. There is no password or sign-in screen. A new, unconnected browser starts separately and cannot see your history.

What is stored

Your display name, timezone, preferences, exercise entries, plan review records, and connected-browser permissions are stored in the private database. Entries carry the editing browser’s label; that label does not verify who used the browser.

Who can access it

Anyone using this connected, unlocked browser can use its permissions. Use your device’s screen lock. People you connect later receive only the rights selected for that connection. The infrastructure owner has administrative access to the database.

When a connection is lost

Clearing browser data, private browsing, switching browsers, or replacing a phone can lose access. Records may still exist. Reconnecting from an authorized browser and restoring a dated backup are different actions.

Honest save states

“Saved” means the server confirmed your entry. Offline entries remain only on the screen until you reconnect and save. This build has no offline queue or service worker caching private data.

What this site does not do

No advertising, session replay, social sharing, or runtime AI. No promise of HIPAA certification, permanent browser retention, or medical monitoring.

Local development

When the local test banner appears, entries use local Firebase emulators. Use invented records only. They are not backed up to production.