Privacy policy
Draft, under legal review. A lawyer has not checked this text yet, and it may change once one has.
This policy says what Entry collects, why, who helps us run it, how long we keep it, and how you can see, change or delete it. It covers the Entry app, now in a private beta, and this website.
Who we are
Entry is made by Firsthand Studio (First hand Software, licence 342398, Doha, Qatar). We are responsible for your data in Entry. Write to us at hello@firsthandstudio.app about anything in this policy.
What Entry collects
Your account
- Your email address.
- Your password, if you sign in with email. Our sign-in service stores it only in a scrambled form (a hash) from which the password cannot be read back.
- If you sign in with Google: Google gives us your email address, and may also give your name and profile picture. The name becomes your profile's name, shown at the top of the Account tab; you can change or clear it in Account → Profile. The picture is kept by our sign-in service with your account, and Entry does not show or use it.
Your profile and settings
- Your name, if you give one or Google gives it, your language, your units, your default rest time, whether you track workouts, food or both, your time zone, and the hour your day starts.
- If you use the calorie calculator or set targets: your height, date of birth, activity level, goal and how fast you want to reach it, target weight, and your calorie, protein, carb and fat targets.
- Your sex, if you give it: male or female, used only to estimate your energy needs and the lowest calorie target Entry offers you. You can leave it out, or clear it later in your profile.
- The calculator asks women whether they are pregnant or breastfeeding. The answer is used once, to decide whether to calculate, and is never stored.
What you log
- Workouts: your routines and the weekdays you plan them for, the exercises you log, each set's weight and reps and when you did it, your rest times, and the personal records Entry works out from your sets.
- Food: each entry's food name, amount, calories, protein, carbs and fat, its meal, and the date and time with your time zone; the quick entries you type in; and the target that applied on each day.
- Weigh-ins: your weight, and the date and time.
Your weight, your food and your workouts can say something about your health, so we treat them as health data.
Food searches
When you search for a food, Entry records what you typed, how many results it found, which one you chose, and whether you logged it. This shows us which foods the list is missing. The words you typed are deleted after 90 days, and from our backups when those expire. The rest of the record (the counts, positions and times) stays with your account until you delete it. Turning off analytics also stops these records.
Analytics
Entry sends usage events to PostHog, an analytics service, on its servers in the European Union. An event is a name, with at most a count or a choice: "a workout was finished, with 18 sets", "a food was logged from search", "a weigh-in was logged". Events never carry your weights, foods, calories, targets, height, age, sex, name or email.
Events are linked to a random ID made for your account, not to your email or your account ID. With each event, PostHog also receives basic facts about the app and the phone: the app's name and version, the phone's language, time zone and screen size, and the versions of the software that sends the events. It also sees the IP address the event came from.
Analytics are on until you turn them off in Account → Analytics. The choice applies on that phone.
Protection against abuse
When you ask to delete your account, our server counts the attempts made from your account and from your IP address, so that no one can flood it with requests. Each count is kept at least until the end of the hour it covers, and is deleted the next time the server checks the counts.
On your phone
- Entry keeps a copy of your data on your phone, so that it works without a connection, and sends it to your account when it can.
- When you sign out, anything not yet sent stays on the phone, and is sent only if the same account signs in there again.
- Rest timer notifications are made on your phone. No notification service receives them.
- Your language, theme and analytics choice are kept on the phone.
What Entry does not collect
Entry does not collect your location, your contacts, your photos, or data from other health apps, and it has no advertising ID. It does not send crash reports. If that changes, this policy will say so before it happens.
This website
This website sets no cookies and uses no analytics or trackers. Cloudflare, which hosts it, handles your IP address to deliver the pages and protect the site; if it ever asks your browser to show it is not a bot, Cloudflare sets a cookie of its own for that. The "Join the beta" button opens a Google Form, run by Google. We use what you write there only to invite you to the beta.
How we use it
- To run Entry for you: keep your account, save what you log, and show it on any phone you sign in on.
- To work out what Entry shows you: personal records, totals, your weight trend and your targets.
- To improve Entry: analytics and food searches show which parts are used and which foods are missing.
- To keep Entry safe: limits on repeated requests, and a fresh sign-in before an account is deleted.
- To write to you about your account, such as the codes that confirm your email address or let you change your password, and about the beta.
We do not sell your data. Entry shows no ads and does not track you across other apps or websites. No other Entry user can see your data.
The laws we follow
Entry is for people in the GCC. We handle your data under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016, the PDPPL) and, for users in Saudi Arabia, the Saudi Personal Data Protection Law (the PDPL). We use your account and what you log to provide the service you asked for. Your weight, food and workouts can be health data, which both laws treat as sensitive: we use it only with your consent, which you give when you create an account and log it, and which you can withdraw at any time by deleting your account. Analytics and food searches help us improve Entry, and you can turn them off at any time.
Who else handles your data
These companies run parts of Entry for us. Each may use your data only to provide its service to us.
- Supabase: our database and sign-in. Your account and everything you log are stored in Frankfurt, Germany. Supabase also handles the IP address of each request, to limit repeated sign-in attempts, and keeps a security record of each sign-up, sign-in and account deletion, with the email address and the IP address used.
- PostHog: analytics, on its servers in the European Union.
- Resend: sends our emails: the codes that confirm your email address and let you change your password.
- Google: Google sign-in, if you choose it; the beta form; and our email inbox, if you write to us.
- Cloudflare: hosts this website.
- Apple and Google: to invite you to the beta, we give your email address to TestFlight or to Google Play testing, which deliver the app to you. Their own privacy policies apply to them.
Your data is kept and handled outside Qatar and Saudi Arabia: in Germany and the European Union, and by some of these companies in the United States. We share your data with anyone else only when the law requires it.
How long we keep it
- Your account and what you log: until you delete your account.
- The words of your food searches: 90 days. The rest of each search record: until you delete your account.
- Abuse counters: at least until the end of the hour they cover, then until the server next checks them.
- Sign-in records: our sign-in service keeps its record of sign-ups, sign-ins and account deletions. Deleting your account does not remove them today.
- Analytics events: until you delete your account, when we ask PostHog to delete them.
- Backups: our database provider keeps backups for a limited time. Data deleted from Entry, by you or after the 90 days for food searches, stays in them until they expire.
- Emails you send us: as long as we need them to answer you.
Your choices and rights
- See and change your data: what you log is in the app, where you can change or delete it.
- Get a copy: Entry has no export yet. Write to us and we will send you a copy of your data.
- Delete your account: in Account → Delete account. Entry asks you to sign in again first. Deleting removes your account and everything you logged from our servers, asks PostHog to delete your analytics events, and clears Entry's data for that account from the phone. It cannot be undone. Only the sign-in service's records stay (see How long we keep it). If you cannot open the app, write to us from the account's email address.
- Stop analytics: in Account → Analytics.
- Complain: in Qatar, to the National Data Privacy Office; in Saudi Arabia, to the Saudi Data and Artificial Intelligence Authority (SDAIA). We would like to hear from you first.
Children
Entry is for adults. Do not use it if you are under 18.
Security
Your data travels encrypted between the app and our servers. The database lets each account read and change only its own data. No system is perfectly secure: if a breach affects your data, we will tell you as the law requires.
Changes to this policy
When this policy changes, we update it here with a new date. For a change that matters, we will tell beta testers by email before it applies.
Contact
Firsthand Studio (First hand Software, licence 342398, Doha, Qatar). hello@firsthandstudio.app