Privacy Policy

ISOS Fuel (“ISOS”, “we”, “us”) provides a mobile app and related services for endurance athletes to log fuel, training context, and optional gut-health signals. This policy explains what we collect, why we use it, and the choices you have.

Controller contact: hello@isosfuel.com. For support requests use support@isosfuel.com.

We collect information you provide and information generated when you use the app.

• Account details — name, email, password (stored hashed), and profile fields you set (e.g. weight, height, unit preference, race date).
• Fuel and meal logs — foods, macros, barcodes, ingredients text, meal timing, and related notes.
• Training context — workouts you create or sync (e.g. via Strava), duration, sport, and fuel linked to sessions.
• Optional gut / GI data — symptoms, stool logs, culprit flags, sensitivities, and detective preferences you enable.
• Optional health sync — values you choose to sync via Apple Health / Health Connect (for example weight), subject to OS permissions.
• Device and usage — app version, crash/diagnostic signals if enabled, and basic technical logs needed to run the service.
• Partner meal shares — short-lived codes that expose meal composition (ingredients and macros) only, never GI or biometric health flags.

We use your data to operate ISOS and improve the product — not to sell personal health data.

• Provide account access, sync, and core fueling / gut features.
• Personalise targets, routines, and on-device insights you request.
• Connect optional integrations you authorise (e.g. Strava).
• Secure the service, prevent abuse, and diagnose outages.
• Respond to support and account requests (including deletion).
• Meet legal obligations where applicable.

Depending on the activity, we rely on: performance of a contract (providing the app you signed up for); consent (optional health permissions, certain integrations, marketing if we ever offer it); legitimate interests (security, product reliability, non-intrusive analytics); and legal obligation where required.

We do not sell your personal information. We share data only as needed to run ISOS:

• Infrastructure providers that host our API and database (currently including cloud hosting such as Railway) under contractual obligations.
• Optional third-party services you connect (e.g. Strava) under their terms and your OAuth consent.
• Food / barcode lookup providers when you search or scan — typically product metadata, not your full health history.
• People you explicitly share a meal code with — composition only, for a limited time.
• Authorities if required by law, or advisors under confidentiality when needed to protect rights or safety.

We keep account and log data while your account is active. If you delete your account, we remove associated personal data from our production systems within a reasonable period (typically within 30 days), except limited records we must retain for security, fraud prevention, or legal compliance (for example billing or dispute logs if those exist later).

Expired meal share codes and their payloads are removed according to their short expiry window.

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access controls on production systems. No method of transmission or storage is 100% secure; please use a strong unique password and keep your device protected.

Depending on where you live, you may have rights to access, correct, delete, restrict, or export your personal data, and to object to certain processing. You can:

• Update profile details in the app.
• Delete your account in the app (More → Data & Account → Delete Account), which permanently removes your account data subject to the retention note above.
• Email hello@isosfuel.com for privacy requests. We may need to verify your identity before fulfilling a request.

ISOS is not directed at children under 16 (or the digital consent age in your country). We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

Our servers and processors may be located outside your country. Where we transfer personal data internationally, we take steps designed to provide an appropriate level of protection as required by applicable law.

We may update this policy as ISOS evolves. We will post the revised version with an updated date (currently 11 November 2026). Material changes may also be surfaced in the app or by email where appropriate.

Privacy questions: hello@isosfuel.com. Support: support@isosfuel.com.