Your data is yours.

Whatever you log: weights, lab markers, body composition, decision journal entries, Sunday Reflections. Your email (so we can send you sign-in links and the weekly recap). Your medication, dose, and protocol start date (so we can put you in the right cohort).

Show it back to you. Compute your trends. Anonymously aggregate it into cohort stats (e.g. “73% of week-12 tirzepatide users have lost 5%+”) — never tied to your handle or email.

We don't sell it. We don't share it with pharma. We don't run ads against it. We don't hand it to insurance. If a court order ever came, we'd fight it and tell you about it.

Your anonymous handle. Your bio (140 chars max — write whatever you want). The posts you choose to share with your cohort. Your sigil, which is a generated mark from your handle. Not your real name, not your email, not your weight, not your medication, not anything you haven't explicitly shared.

Your feed is filtered by your cohort coordinates — phase, med, month. These tags are computed from your profile and recent logs. They live on posts you write, so cohort-mates with the same coordinates see your shares. The tags themselves are public to your cohort; the underlying data (your exact weight, your exact labs) is not.

You can export all your data as JSON from your dashboard at any time. You can delete your account, which permanently erases your data within 30 days. (We hold for 30 days only to recover from accidental deletes.)

Note: export and delete buttons are coming to /dashboard/profile in the next release. Until then, email eric@cohort.fit and Eric will handle it personally within 48 hours.

On iOS, you can grant Cohort permission to read selected data from Apple Health: weight, sleep, heart rate variability, resting heart rate, VO2 max, glucose (CGM), nutrition, and step count. We use this to compute in-app analytics — body composition trends, recovery readiness, cardio context, and glucose-by-shot-phase patterns.

Permissions are granted per data type. We only read the types you explicitly approve. You can revoke any of them at any time in iOS Settings → Privacy → Health → Cohort.

What we persist on our backend: rolled-up sleep summaries (duration + stage minutes per night) sync to your Cohort account so the sleep tab works across your iPhone and the web. You can disable this sync from Settings → Sleep integration.

What we don't persist: weight, HRV, RHR, VO2 max, glucose, nutrition, and step data are read on demand, used to compute the screen you're looking at, then discarded. Apple Health stays the source of truth.

What we never do: write back to Apple Health without your direct action. The only writes are: a weight you manually log, a protein amount you manually log, and a mindful-minute marker when you complete a daily reflection.

Two cookies — both first-party, both functional:

• Authentication session — so you stay signed in
• Referral attribution — a short-lived cookie set when you arrive via someone's invite link, so they get credit if you subscribe. Discarded after 30 days even if you don't subscribe.

No analytics cookies, no advertising cookies, no third-party trackers, no pixels.

We use a small set of vendors to run the service. They process data on our behalf under contract, scoped to what they need to do their job:

• Supabase — database + authentication (everything you log, your account)
• Stripe — payment processing + subscription management (your payment method, your billing history)
• Resend — transactional email (sign-in links, receipts, trial reminders, weekly recap)
• Vercel — web hosting (the server that serves this page)
• Apple HealthKit — iOS only, read-only by default. See above section.

We do not share data with advertisers, data brokers, insurance companies, or pharmaceutical companies. Period.

Cohort is peer support, not medical advice. We do not diagnose, treat, or prescribe. Talk to your prescriber before changing dose, stopping medication, or making clinical decisions. The Concierge (Eric) answers questions personally; his answers are educational, not clinical.