Privacy policy

Last updated September 27, 2026

Draft. This policy is waiting for a lawyer's review and is not in force yet.

The short version

• What you log is kept on your device first. Only if you make an account is a copy kept on our server, so your phone and computer stay in step.
• When you use an AI feature, what it needs goes to the AI company that does the work, and nothing more.
• No ads, no trackers, and nothing is ever sold. How the app is used is counted only in totals that do not say who you are.
• You can download a copy at any time, and deleting your account deletes it from our server.

Throttr is run by 36N Group LLC, Wyoming, USA ("we"). Questions about your data: support@throttr.com.

What stays on your device

Without an account, everything you log stays in your browser's storage on that device, and we never receive it. Progress photos always stay on your device: they are never uploaded, with or without an account. Your choices for that device, like its look and sounds, stay there too.

What our server keeps if you make an account

• Your account: your email address and, if you give one, a display name. Your password and your recovery key are kept only as one-way scrambles (hashes), which cannot be turned back into them.
• If you sign in with Google: Google tells us your email address, your name, a link to your profile picture and the number Google uses for you. Never your Google password, your contacts or anything else in your Google account. We keep only the email and your first name, as your account's, and Google's number, so the same Google account finds you next time. Such an account has no Throttr password or recovery key: Google is how you get back in.
• A copy of what you log: workouts and sets, plans, other activities, body weight and measurements, daily check-ins, notes on your joints and exercises, exercises you added, your food diary and saved foods, your conversations with the coach and the facts the coach remembers about you, and your settings.
• Your sign-ins: for each device you sign in on, when it signed in and was last used, and the description your browser gives of itself (its name and version). A sign-in lasts up to 180 days.
• How much you used the AI each day: the number of requests and what they cost us. Not what you asked.
• Your plan: if you have Throttr Pro, the day it runs to and, if you paid for it, Paddle's reference for it.

We use this only to run Throttr for you. Some of it is information about your health, such as your weight, what you eat and notes about pain; we treat it with the same care and use it for nothing else.

What goes to AI companies

The AI features need an account. When you use one, what it needs is sent through OpenRouter, a US company that passes the request to the company whose AI model does the work:

• OpenAI for plans and the coach: your answers to the plan questions, your plan, your question, and the parts of your training and food log the coach looks up to answer it.
• Google for meals and labels: your meal photos, what you say or type about a meal (a voice note is sent as the recording), the names of your saved foods, so it can recognise them, and the photo of a nutrition label you ask it to read.

We do not keep your meal photos, label photos or voice notes: the diary keeps only the foods and their numbers. Your coach conversations are kept in your log until you delete them. OpenRouter, OpenAI and Google handle what they receive under their own privacy terms.

Barcodes and food search

When you scan a barcode or search for a packaged food, our server looks in its own copy of Open Food Facts, a public food database, which it brings up to date from Open Food Facts every day. When the copy cannot answer (a barcode it does not have, or while the copy is being rebuilt), our server asks Open Food Facts itself: Open Food Facts receives the barcode or the words you searched, from our server, not linked to you. We keep its answer for a day so the next lookup is quicker.

Asking for the phone app

If you answer "Request the phone app", we keep your answers (your phone, what you would use, the apps you use now, what you would pay) and, only if you ask to be told when it is out, your email. We will send that one email and nothing else. Your answers are deleted with your account; if you sent them without one, ask us and we will delete them.

Telling us what you think

If you send a message with "Tell us what you think", we keep what you wrote, when you sent it, whether you were signed in and, only if you ask for an answer, your email. We use it to answer you and to make Throttr better, and for nothing else. Your messages are deleted with your account; if you sent one without an account, ask us and we will delete it.

Keeping Throttr safe

To stop people guessing passwords or flooding the app, the server counts attempts from each network address and email, and how much each account uploads and looks up. The addresses and emails are kept only as scrambled fingerprints that cannot be turned back into them.

Counting how Throttr is used

To learn what works, the app and the website tell our server when some things happen: someone new arrived, opened the app or a page of the website, reached a step of the setup, finished it or looked around with sample data, logged a first workout or meal, finished a workout, made an account or signed in, tried an AI feature (with an account or without one), met a free AI limit, installed the app, or shared a workout picture. With each note go the site or link that first brought this browser here (for example TikTok, or a search), the goal picked in the setup, whether the app runs from the home screen, the hour this browser first came and how many days ago that was. Our server adds the country your connection comes from and the kind of device and browser (for example an iPhone, or TikTok's own browser).

None of it is kept with your name, email, account or network address, and no cookie is used for it. Cloudflare keeps the notes for three months, and we read them only as totals. To switch it off in a browser, open throttr.com/?count=off once in it.

Who runs the servers

Cloudflare runs our server and database. It keeps the server's request logs, which show what was asked for and when, for up to 7 days.

When Throttr Pro opens, Paddle will handle payments as the seller of record. Paddle takes your payment details; we never see your card. Paddle tells us whether your Pro is active.

Cookies and storage

Throttr uses one cookie, to keep you signed in. It uses your browser's storage to keep your log and your choices on your device, and, for the counting above, the hour this browser first came, from where, and which one-time notes it has already sent. There are no advertising or tracking cookies.

Your choices

• Download a copy: Settings, then Your data, then Download a backup. It holds everything you logged except progress photos, which are already on your device.
• Delete your account: Settings, then Account, then Delete account. Everything on our server is deleted at once: your account, your synced log, your sign-ins, your AI use, your plan, your phone-app answers and your messages to us. The device you are using keeps its own copy until you clear it, and Paddle keeps its own record of any payment.
• Ask us: to see, correct or delete what we hold, or with any question, write to support@throttr.com. If you live in the EU or the UK, you can also complain to your data protection authority.

Children

Throttr is not for anyone under 16, and we do not knowingly keep data about them.

Changes

If we change this policy in a way that matters, we will say so in the app before the change applies.