Privacy Policy

Version 1.0 · Effective June 3, 2026

Health data is also covered by our separate Consumer Health Data Privacy Policy.

Who we are

Idunia is a US-only mobile app for adults (18+) that helps female athletes track nutrition and training. Idunia is operated by Max Output LLC (North Carolina). Contact: founders@maxoutput.ai.

What we collect

• Account info: email and authentication data, so you can log in.
• Health data you enter: nutrition, training, body metrics, and — only if you opt in — cycle data. Detailed in our separate Consumer Health Data Privacy Policy.
• Diagnostic logs: only if you tap "Report a problem" (see below).
• We do not collect precise location, advertising identifiers, or contacts.

What we DON'T do

• We do not sell your data.
• We do not share your data with advertisers, analytics providers, or social platforms.
• We have no third-party advertising, analytics, attribution, or tracking software in the app.
• We do not use your data to build advertising profiles or to train models for anyone else.

Where your data lives and how it's protected

• Your cycle data is stored only on your device, in an encrypted file whose key is held by your device's operating system. It is never sent to our servers, so we cannot access it.
• Account and other data are stored on our hosted backend, provided by Supabase, Inc. as our service provider — a company we hire solely to run the app, contractually prohibited from using your data for its own purposes. Data is encrypted in transit (TLS) and at rest; access is limited to operating the app.
• Using a hosting provider to store your data is not "sharing."

How we use it

Only to operate the app for you: authenticate you, calculate your targets and indicators, and show your own history back to you.

Crash / problem reports

We use no background crash or analytics software. If you tap "Report a problem," the app attaches your local diagnostic logs (never your cycle data) and sends them only when you choose to.

Your choices and rights

• Access, export, or delete your data anytime in Settings, or email founders@maxoutput.ai.
• Deleting your account removes your server-side data. Cycle data lives only on your device — deleting your account does not remove it; delete cycle history in Settings or uninstall to remove it.
• Withdraw consent: cycle tracking is optional (turn it off and delete it anytime, keep using the app); nutrition/training data is required to run the app, so to withdraw it, delete your account.
• California residents: we do not sell or share your personal information; you may access and delete your data as above.

Children

The app is for adults 18+. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it. If you believe a minor is using Idunia, email founders@maxoutput.ai.

Geography

We offer the app to US users only and do not target users outside the United States. The app is intended for use within the US; if you use it while traveling, your data is still processed in the US.

Security & breach

We protect your data with TLS in transit, encryption at rest, and least-privilege access. If a breach affects your health data, we will notify affected users (and regulators where required).

Retention

We keep your data until you delete it or close your account; deleted data is removed from active systems promptly and from backups within 90 days. Uninstalling the app removes on-device cycle data but does not delete your account or server-side data — use Settings → delete account for that. Cycle data is retained on your device until you delete it or uninstall.

Changes

If we materially change our practices, we will update this policy and, where required, ask for your consent again before applying changes to data already collected.

Contact: founders@maxoutput.ai