Privacy Policy

From the app, when you enter it:

• Account email address and name.
• Your attestation that you are 18 or older.
• Body weight entries and the notes you attach to them.
• Progress photos, including the pose each one is filed under.
• Show dates, divisions, placings and stage weights.
• Diet and cardio protocols, and the deviations you record against them.
• Prep calendar events.
• Plan documents you upload.

From this website: your email address, if you submit it to the waitlist, along with the date and which form you used.

We do not collect advertising identifiers, and there are no third-party analytics or behavioural tracking scripts on this site.

Structured data (entries, weights, shows, protocols, calendar events) is held in a Postgres database hosted by Neon in the United States. Photo files are held in Cloudflare R2.

Photo access is scoped to your user ID and served through signed links that expire one hour after they are issued. Photos are encrypted at rest and transmitted over TLS.

The waitlist for this website is a separate database from the application database.

No other user of RatiOS can see your photos, entries or protocols. There are no coach accounts and no coach dashboard. Data leaves your account only when you generate a comparison card or a weekly check-in card and send it yourself.

RatiOS is not end-to-end encrypted. The server decrypts your photos in order to render comparison and check-in cards. That means the operator has infrastructure-level access to the systems holding your data. We access it only to run and repair the service, or where we are legally required to. We would rather state this plainly than let the word “encrypted” imply something it does not.

These companies process data on our behalf:

• Neon: Postgres database hosting (United States).
• Cloudflare: Photo storage (R2), DNS, email routing.
• Railway: Application API hosting.
• Sentry: Crash and error reporting.
• Resend: Transactional and waitlist email.
• Vercel: This website.
• Apple: TestFlight and App Store distribution, subscription billing.

We do not sell personal information. We do not share it with advertisers. We do not use it to train models. We do not run behavioural tracking across other sites or apps.

Deletion is available on request today by writing to privacy@getratios.app. Self-serve deletion from inside the app is planned before public launch.

If your subscription lapses, your archive is retained and stays readable. We do not delete history to reclaim storage.

An account with no login and no active subscription for 24 months or more may be deleted. Before that happens we will send two email warnings and offer an export of your data.

Full-archive export is planned. It is not available yet, and we will not describe it as though it is.

If you join the waitlist we will email you when RatiOS opens up, plus occasional updates on what is being built. Nothing else, and no third parties. Every message carries a one-click unsubscribe, and unsubscribing removes you from the list.

Zappisoft Inc. is Canadian, and this policy is governed by PIPEDA. You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@getratios.app and we will respond.

If you are in a jurisdiction with additional rights, such as the EU or California, the commitments above (access, correction, deletion, no sale of personal information) apply to you as written.

RatiOS is for adults. You must be 18 or older to hold an account. We do not knowingly collect information from anyone under 18.

Privacy questions go to privacy@getratios.app.