Privacy Policy

WAY Studio (“we”, “us”), available at https://way-studio.online, is a web app for tracking the calories and macronutrients of Indian food, logging body weight, and following your progress toward a diet goal. It is operated by Nischay (individual developer). This Privacy Policy explains what personal information we collect, why we collect it, how we use, share, store and protect it, how long we keep it, and how you can delete it. It applies to the WAY Studio website and web app. Contact: way.the.studio@gmail.com.

We collect only what the app needs to work.

Information you give us

• Account information: your email address. If you sign in with Google, we also receive your name and basic profile details from Google. If you sign in with an email code, we receive the email address you enter.
• Profile and goals: display name, height, weight, age, sex, activity level, diet goal (lose, maintain or gain weight), calorie and macro targets, optional daily step, distance and calorie-burn goals, and optional body measurements.
• Food and recipe logs: foods and meals you log (item, quantity, meal type, date and time) and custom recipes or dishes you create.
• Weight logs: your weight entries and dates, and an optional target weight and target date.

Information from Google, only if you connect Google Health

• Your daily steps, distance and calories burned (read from Google Health).
• Heart rate, blood oxygen (SpO2), VO2 max, blood glucose, floors climbed and, if you add those tiles, sleep and irregular rhythm notifications (read from Google Health and shown on your dashboard; not stored by us).
• Body Age: your last 7 weeks of steps, Active Zone Minutes, workouts, sleep and resting heart rate, and your VO2 max from the last 90 days, are read from Google Health and combined with your body measurements to estimate an effective age (from the last 30 days, with a 4-week trend). It is calculated each time you view it and not stored. Readiness and recovery are estimated the same way from your heart rate variability, resting heart rate and sleep compared with your own recent baseline.
• OAuth access and refresh tokens that Google issues so the connection keeps working (see section 4).

Information collected automatically

• Session cookies set by our authentication provider to keep you signed in.
• Preferences kept in your browser’s local storage, such as light or dark theme and whether you accepted our Terms.
• Standard server logs (for example IP address and request time) kept by our hosting provider for security and reliability.

We do not ask for payment details, your contacts, your precise location, photos or files, and we do not use advertising or cross-site tracking cookies.

• To create and secure your account and sign you in.
• To calculate your daily calorie and macro targets and show your nutrition, weight trend, body progress and activity.
• To send your logged meals and weight to Google Health, and to show your Google Health activity, when you connect it and choose to use those features.
• To fix problems, prevent abuse and keep the service reliable.
• To answer your questions and requests, and to meet legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not build advertising profiles from it.

Connecting Google Health is optional. If you connect it, WAY Studio asks Google for the following permissions (OAuth scopes), and only these:

How Google user data is handled

• Activity data (steps, distance, calories burned) is requested from Google when you open the app and is shown to you. It is used only to display your dashboard and activity pages.
• Nutrition and weight data is sent to Google only when you tap a sync button, or when automatic sync is on. Each sync sends the values you already logged in the app.
• We store the OAuth tokens Google gives us in our database, linked to your account, and use them only to perform the actions above on your behalf. We never store your Google password.
• We do not sell Google user data and do not transfer or share it with third parties, except to our service providers as needed to operate the app (section 5), to comply with law, or with your consent.
• We do not use Google user data for advertising, including retargeting or interest-based advertising.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• No person at WAY Studio reads your Google user data unless you ask us to, it is necessary for security or to investigate abuse, or the law requires it.

WAY Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You can disconnect Google Health at any time using Disconnect in Settings; this deletes our stored tokens and revokes our access at Google. You can also remove WAY Studio at any time from your Google Account's third-party access page at myaccount.google.com/permissions. Entries already written into your Google Health account remain there until you delete them in Google Health.

We share information only with service providers that process it on our behalf to run WAY Studio, under their own privacy and security commitments:

• Supabase: database storage and user authentication.
• Google: Google Sign-In (if you choose it) and the Google Health API (if you connect it).
• Our email delivery provider: to send sign-in codes to your email address.
• Our web hosting provider: to serve the website and apps.

We may also disclose information if required by law or to protect the rights, safety and security of users or the service. If WAY Studio is ever transferred to another operator, we will make sure your information stays protected by an equivalent policy and tell you first. We do not sell or rent personal information.

• Data is sent over encrypted HTTPS connections.
• Records are protected by access controls so each signed-in user can reach only their own data.
• Google OAuth tokens are kept server-side in our database and are never shown in the app or shared with other users.
• We limit the information we collect to what the features need.

No online service can promise perfect security. Please keep your devices and sign-in methods secure and contact us if you suspect misuse of your account.

We keep your information for as long as you have an account. You are in control of deletion:

• Delete account (Settings → Delete account) permanently erases your profile, food logs and weight logs, revokes our access to Google Health, and deletes the stored Google tokens.
• Disconnect (Settings → Connected Apps) removes Google Health access and our stored Google tokens without deleting your account.
• To also remove your sign-in record held by our authentication provider, or to request deletion of anything else, email us at the address below and we will act on it within a reasonable time, normally within 30 days.

Data may remain in encrypted backups for a short period before being overwritten. Data previously written to your Google Health account is controlled by you in Google Health.

You can view and edit your profile and logs in the app. You can also ask us to give you a copy of, correct or delete your personal information, or withdraw consent to our processing, by emailing way.the.studio@gmail.com. We handle requests in line with applicable law, including India's Digital Personal Data Protection Act, 2023. If you have a grievance about how we handle your data, contact us first and we will respond promptly.

We use essential cookies from our authentication provider to keep you signed in, and browser local storage for preferences such as theme and Terms acceptance. These are needed for the app to work. We do not use them for advertising. You can clear them in your browser settings, but you may then be signed out.

WAY Studio is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Our service providers may store and process information on servers outside India. By using WAY Studio you understand that your information may be transferred to and handled in those locations.

We may update this policy as the app changes. The effective date at the top shows the latest version, and we will ask you to review and accept significant changes.

Nischay (individual developer), WAY Studio. Email: way.the.studio@gmail.com. Website: https://way-studio.online.