Privacy Policy

MetabolicLabOS collects information to provide and improve our services, including the website, subscription products, AI assistant (Kai), and Tracker.

Account & contact information

• Email address (used as your login identifier)
• Name, when you provide it
• Login verification codes (expire after use)

Payment information

• Processed and stored by Stripe. We never see or store your full card number.
• We store: Stripe session ID, subscription ID, plan tier, interval, and whether a plan is active.

Self-reported health data (Tracker)

• Weight, injection dates and doses, symptoms, energy level, protein, water, and notes you enter.
• Beta program answers, if you apply.

This data is self-reported, stored only in your account, and used to personalize insights, generate weekly reports, and provide context to Kai. It is not sold or shared with advertisers.

AI assistant (Kai) data

• Messages you send Kai and Kai's responses.
• Session and usage counts.
• Feedback ratings you provide on Kai answers.

Kai conversations are stored to improve response quality and flag safety issues. Message content is processed by our AI provider (Anthropic, OpenAI, or Google, depending on the model — see "Third-Party Services").

Usage & technical information

• Pages visited, tools used, features clicked.
• Free-tool submissions (e.g. Nausea Fix, Plateau Fix answers).
• Purchase history.
• Email opens and clicks (via SendGrid).
• IP address, browser type, device type.
• Admin audit logs (access to the admin dashboard).

We use the information we collect to:

• Authenticate you at login (email + one-time code).
• Provide the paid services you subscribed to (Kai, Tracker, Complete).
• Deliver downloadable guides and freebies.
• Process payments and renewals via Stripe.
• Send transactional emails: welcome, login codes, purchase receipts, weekly reports, plateau alerts.
• Send marketing emails, if you opt in via a freebie signup (unsubscribe in every email).
• Personalize Tracker insights and Kai responses to your recent check-ins.
• Analyze aggregate usage to improve the product.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations.

We use the following third-party processors. Each has its own privacy practices; links below go to their policies.

• Stripe — payment processing, subscription management, customer portal.
• SendGrid — transactional and marketing email delivery, open/click tracking.
• Anthropic (Claude), OpenAI (GPT), and Google (Gemini) — Kai routes messages to one of these providers depending on model. Only your message content is sent; your identity (name, email) is not attached to provider calls.
• Skool — our community platform. If you join, Skool collects information directly from you under their own policy.
• Unsplash and similar — imagery providers; no personal data shared.
• Cloud hosting — our servers run on managed cloud infrastructure with encrypted storage.

We retain your data for as long as your account is active, plus:

• Payment records: 7 years (tax and legal requirements).
• Tracker check-ins and Kai conversations: until you request deletion or 24 months after last login, whichever is earlier.
• Unsubscribed email addresses: retained on a suppression list indefinitely to honor your unsubscribe preference.
• Beta program data: kept for 12 months after your 21-day window ends, then deleted.

You can request deletion of all non-legally-required data at any time (see "Your Rights" below).

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate information.
• Deletion — request we delete your account and data (subject to retention exceptions).
• Portability — receive your data in a machine-readable format (JSON export of your Tracker history).
• Opt-out of marketing — unsubscribe link in every marketing email, or email us.
• Opt-out of sale — we do not sell personal information.

To exercise any right, email privacy@metaboliclabos.com with your request. We respond within 30 days. Residents of California (CCPA/CPRA), the EU/UK (GDPR), and other jurisdictions with data-rights laws have additional specific rights; we honor all of them.

MetabolicLabOS uses a small number of essential cookies to keep you logged in, remember pricing preferences (monthly vs yearly), and prevent fraud. We also use basic analytics to understand page traffic. We do not use advertising cookies or cross-site trackers.

Email open and click tracking (via SendGrid) records when you open or click a link in our emails. You can disable this in your mail client or unsubscribe from marketing emails entirely.

We take reasonable measures to protect your data: TLS for all traffic, encrypted storage, access controls on admin systems, audit logging, and password-free authentication (email-based one-time codes). No internet service is 100% secure; if you suspect your account is compromised, email us immediately.

MetabolicLabOS is intended for adults (18 years and older). GLP-1 medications are typically prescribed to adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

Our servers are located in the United States. By using MetabolicLabOS from outside the US, you consent to your information being transferred to and processed in the United States, where data-protection laws may differ from those in your country.

We may update this Privacy Policy. Material changes will be announced by email to active subscribers at least 14 days in advance. The "Last updated" date at the top of this page always reflects the current version.

For privacy questions or data-rights requests:

Privacy: privacy@metaboliclabos.com
General support: support@metaboliclabos.com