Privacy Policy

Last updated: May 28, 2026

Washington and Nevada residents: see our separate Consumer Health Data Privacy Policy for rights specific to consumer health data.

What we collect

Comfrey collects only the data needed to provide its features. This includes your account email, profile details (name, date of birth, sex, height, weight, activity level), and the fitness data you choose to log: workouts, cardio sessions, nutrition and meals, body measurements, progress photos, weight, sleep, steps, water, and other metrics you enter.

Apple Health & Health Connect

With your permission, Comfrey reads health and activity data from Apple Health (on iOS) and Android Health Connect (such as workouts, weight, sleep, steps, heart rate, and active energy) to display your progress, and may write workouts and weight back to them. This data is used only to provide these features. We never use it for advertising, never sell it, and never share it with third parties.

Location and camera

If you use route planning or live cardio tracking, Comfrey accesses your location (including in the background during an active session, with your permission) to map and measure your route. The camera is used only for progress photos and the meal scanner, and only when you start those features.

How your data is stored

Your data is stored locally on your device. When you are signed in, key collections are also mirrored to your private, access-controlled space in Supabase so you can restore them on a new device. Progress photos are stored in a private storage bucket only you can access.

Third-party services

We use Supabase (authentication, database, and storage), Sentry (crash and error reporting — limited to your user id and non-personal diagnostics, never your health data), the Anthropic API (which powers the AI Coach; requests are processed through our secure backend), and RevenueCat with the App Store / Google Play for subscriptions. We never receive your full payment card details. We do not use advertising or tracking SDKs.

Data deletion

You can delete your account and all associated data at any time from Profile → Settings → Data & Privacy. This removes your local data and your cloud-synced records.

Children

Comfrey is not directed to children. You must be at least 16 years old to use it, and we do not knowingly collect data from anyone younger.

Health data disclaimer

Comfrey is a fitness tracking tool, not a medical device. Do not use it to diagnose or treat medical conditions. Consult a qualified professional for medical advice.

Contact

Questions about privacy? Email privacy@trycomfrey.com.