← Back to home

PRIVACY POLICY

Last updated: May 15, 2026

1. INFORMATION WE COLLECT

When you use MBF, we collect:

Account information: email address, name, and authentication data (via email/password, Google OAuth, or Discord OAuth)
Profile data: display name, membership tier, Stripe customer ID
Protocol data: intake quiz answers, daily task completions, workout logs, nutrition entries, reflection text
Proof photos: images you upload as workout proof
Usage data: pages visited, features used, session duration

2. HOW WE USE YOUR INFORMATION

To provide and improve the MBF service
To generate your behavioral diagnostic profile
To send protocol-related emails (progress updates, nudges, results)
To process payments through Stripe
To personalize your experience

3. DATA STORAGE

Authentication: Supabase (hosted, encrypted at rest)
Application data: SQLite databases on our VPS (nutrition entries, protocol progress, analytics)
Payments: Stripe (PCI-compliant, we do not store card numbers)
Emails: Resend (transactional email service)

4. THIRD-PARTY SERVICES

We use the following third-party services that may process your data:

Supabase - authentication and user profiles
Stripe - payment processing
Google - OAuth authentication (if you sign in with Google)
Discord - OAuth authentication and community (if you connect Discord)
Resend - email delivery
Cloudflare - DNS and CDN

5. DATA SHARING

We do not sell your personal information. We only share data with the third-party services listed above as necessary to operate the platform.

6. YOUR RIGHTS

You can:

Access your data through the Vault application
Delete your account by contacting us
Unsubscribe from emails at any time

7. COOKIES

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. CHANGES TO THIS POLICY

We may update this policy from time to time. Continued use of the service after changes constitutes acceptance.

9. CONTACT

Questions about your privacy? Contact us at [email protected].