← Back to Slowloss

Privacy policy

Last updated: 3 August 2026

Who is responsible

Slowloss is run by Zeshan, who is the data controller for the service. Privacy questions: privacy@slowloss.com.

What we collect and why

We collect only what the service needs to work:

  • Account details — your email address, display name and password (stored as a secure hash by our authentication provider). Used to sign you in and contact you about your account.
  • Your logs — meals (names, calories, macros, notes, times), water totals, daily targets and your timezone. This is the product: it exists so you can see it back.
  • API tokens — if you connect an assistant, we store a hashed token and when it was last used. We never store the token itself.

The legal basis is performance of a contract: we process this data to provide the service you signed up for. We do not use your data for advertising, we do not sell it, and we do not share it with anyone except the hosting providers below.

Cookies

Slowloss uses only strictly necessary session cookies to keep you signed in. There are no analytics or tracking cookies, which is why there is no cookie banner.

Where your data lives

Data is stored with Supabase in the European Union (London region) and the web app is served by Vercel. If you connect an assistant, requests pass through our MCP server on Railway; it holds no database credentials and stores nothing.

How long we keep it

Until you delete it. Deleting a meal removes it immediately. Deleting your account (in Settings) permanently removes your account and everything logged under it — there is no retention period and no backups are kept beyond the provider's short-term operational backups.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, and you can object to or restrict processing. Most of this is self-service: your data is visible in the app and deletable in Settings. For anything else, email privacy@slowloss.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

See also the terms of use.