Privacy
What we hold, and what we do with it.
Patterns holds health data about you: what you eat, when you bleed, how you slept, what hurt. That is the most sensitive category of personal data there is, and the law treats it that way. This page is written to describe what the code actually does, not to be broad enough to cover anything we might do later.
The short version
- Your data is yours. You can download all of it as a file, at any time, in one click.
- You can delete your account, and delete means delete — not a hidden flag.
- We do not sell your data, and we do not share it with advertisers or data brokers.
- Nothing you write is used to train anybody’s AI model.
- A model reads your check-in text so it can suggest what to log. That is optional, it is off unless you turn it on, and when it is off the request is never made.
What we collect
Only what you type in, plus the minimum needed to run an account. There is no tracking pixel, no advertising SDK, no third-party analytics watching what you do in the app.
| What | Why |
|---|---|
| Your email address | It is how you sign in. There is no password to lose. |
| Age, height, weight, activity, goal | Your calorie and nutrient targets are computed from these. Without them we would show you an average woman’s numbers. |
| Contraception and life stage | On methods that stop ovulation there is no cycle to describe. Without this the app would confidently tell you that you are ovulating on a cycle you are not having. |
| Conditions you record | They change what is offered and what is never assumed. Nothing here is treated as a clinical fact. |
| Everything you log | Food, periods, symptoms, sleep, movement, mood, weight, medication. This is the product. |
| Your check-in text | Kept exactly as written, forever, unedited. It is the primary record; everything structured is a reading of it, and a reading can be redone. |
Who else sees it
Four companies, each doing one job. Nobody else, and none of them for their own purposes.
| Who | What they do | What they get |
|---|---|---|
| Anthropic optional | Reads your check-in text and proposes what to log from it. | The words you wrote in that check-in, and nothing else — no name, no email, no account id. There is a test in the codebase that runs the real request builder and fails if an identifier ever gets attached. |
| Render | Runs the server and the database. | Everything in your account is stored here. |
| Vercel | Serves the website. | The usual things a web host sees: IP address, browser, which pages were requested. |
| Resend | Emails your sign-in code. | Your email address and a six-digit code. |
Anthropic does not train on data sent through its API, and we have not opted into anything that would change that. If we ever add a fifth company to this list, the version at the top of this page changes and you will be asked to agree again — because a consent record that cannot say what you agreed to is not worth keeping.
The AI part, specifically
When you write a check-in and AI reading is on, the text goes to Anthropic and comes back as a set of proposals. Three things constrain what happens to it:
- Nothing identifying you travels with it.
- Nothing is saved to your log until you confirm it, one item at a time.
- Every proposal has to quote the words it came from, and any proposal whose quote is not actually in your text is discarded before you see it. A model cannot suggest a symptom you never mentioned, because it cannot invent the quote as well.
Turn it off and no request is made at all. Your words are still saved and you can log everything by hand — you lose the suggestions, not the app.
The microphone
You can talk to Patterns instead of typing. That uses your browser’s own dictation — the same thing that types for you in any other text box — and in most browsers the audio is sent to the browser’s maker to be turned into words. In Chrome that is Google.
Patterns never receives the audio and never stores it. What reaches our server is the text, exactly as if you had typed it. Where a browser can transcribe on the device itself we ask it to, and some now can. The first time you tap the microphone the app says all of this before it starts listening — and if you would rather nothing left your phone, typing gets you the same log.
Your rights
- Get a copy. Settings → your data → download. It is a JSON file with every row we hold, in a shape another program can read.
- Delete it. Settings → delete account. Everything goes: check-ins, logs, recipes, the account itself.
- Withdraw consent. The AI toggle is a real switch, not a preference we consult when convenient.
- Correct it. Every logged item can be edited or removed in the app.
Two honest caveats about deletion. Ingredients you contributed to the shared reference set stay, because they are no longer only yours. And database backups roll off on their own schedule rather than instantly, which is true of every service that keeps backups — a service that could erase its own backups on demand could also lose your data to a bad Tuesday.
What this is not
Patterns is not a medical device and nothing in it is a diagnosis or a treatment. It describes what you logged. A pattern it shows you is worth taking to a doctor; it is not a substitute for one.
Asking us something
support@trackpatterns.com. A real person reads it.
Terms · Last updated 2026-08-22