← Eat & Perform

Privacy Policy

Last updated: 18 August 2026

Eat & Perform ("we", "us", "the app") is a performance nutrition app for endurance and combat sports athletes. This policy explains what data we collect, why, and the choices you have. It's a companion to our Terms of Service, which covers billing, liability, and the important note that the app's guidance is not a substitute for professional medical or dietetic advice.

1. Who we are

Eat & Perform is operated by Eat and Perform Ltd, registered in the UK at 53 Hey Street, Long Eaton, Nottingham, NG10 3HA. Contact us about privacy at info@eatandperform.com.

2. What we collect, and why

Data	Source	Why we collect it
Name, age, sex, weight, height	You, at onboarding	Calculates your calorie and macro targets
Training sessions — duration, heart rate, calories, HR zones	Apple Health / Health Connect, Strava, and in future WHOOP/TrainingPeaks	Calculates exactly how many grams of carbohydrate, protein and fat you burned
Sleep (future, WHOOP only)	WHOOP, once connected	Feeds the adaptive fatigue-risk signal
Diet type, allergies, food preferences	You, at onboarding	Filters and ranks recipes — allergies are a hard filter
Recipe selections, favourites	Your in-app activity	Builds your weekly meal plan and shopping list
Shopping list, basket, pantry history	Your in-app activity, and Pepesto	Builds a real supermarket basket and avoids re-buying staples
Account email, and a one-time sign-in code sent to it	You, if you create an account	Lets your data survive a reinstall and secures your account — no password is stored
Meal photos you choose to take	You, if you use meal-photo scanning	Estimating a meal's macros from a photo
Referral code and who referred you	You, if you send/redeem a referral link	Running our refer-a-friend program
App usage / crash diagnostics	Automatically	Fixing bugs and understanding feature usage

Payments. We never see or store your card details ourselves — payment is always handled directly by the payment provider:

• Subscription payments are billed through the Apple App Store or Google Play Store.
• The one-off fee for sending a shopping list to your supermarket basket is processed by Stripe — we receive only confirmation of payment and a billing reference, never your card details.
• Checkout of the groceries themselves happens on your supermarket's own site via Pepesto's hosted handoff — that payment never touches us either.

3. Health data specifically

• Health data (workouts, heart rate, sleep, active energy) is read on your device, with your explicit permission, and used only to calculate your nutrition targets.
• We do not use health data for advertising, and we do not sell it to any third party, in line with Apple's HealthKit rules.
• Revoke access anytime in iOS Settings → Privacy & Security → Health, or Android Settings → Health Connect. The app keeps working on manually logged data — a wearable is never required.

4. Who we share data with

• Pepesto — receives your macro targets and dietary restrictions to return matching recipes and a matched basket. Never receives your training or health data.
• Strava (if connected) — we receive your activity/HR-zone data under the authorisation you grant; we never post on your behalf.
• Supabase (our backend) — stores your account and profile data, protected by row-level security.
• Anthropic — receives meal photos you choose to take, solely to estimate macros. Not retained longer than needed for that.
• Stripe — processes the basket-send fee; we hold only a billing reference.
• Apple / Google — process subscription payments directly; we only see whether your subscription is active.
• We do not sell your personal data to anyone, for any purpose.

5. Your rights (UK GDPR)

• Access the data we hold on you — email us.
• Correct inaccurate data — most is editable in Settings → Profile.
• Delete your account and data — Settings → Account → Delete account, or email us. Removed within 30 days.
• Export your data in a portable format on request.
• Withdraw consent for health data access at any time.

6. Data retention

We keep your data for as long as your account is active. Deleting your account removes your personal data within 30 days, except where we're required to keep records longer by law (e.g. financial records).

7. Children

Eat & Perform is not directed at children under 16. We do not knowingly collect data from children under 16.

8. Changes to this policy

We'll notify you in-app of material changes before they take effect.

9. Contact

info@eatandperform.com