Privacy policy

Hale is run by Dylan McMullan, REPLACE: your postal address ("we"). We are the controller of your personal data under UK data protection law.

Questions about your data: hello@halescore.com.

• Account: your email address and how you sign in (email link or Google). We never see your Google password.
• Profile: date of birth, sex, height, weight, time zone and the pillars you chose to focus on. We use weight only to score your habits fairly; Hale never sets a goal weight or calorie target.
• Assessment answers: your answers about sleep, nutrition, training, recovery and stress, skin, and posture. This includes a few screening questions about eating and exercise. This is health-related information, which the law treats as special category data.
• Your results and plan: your Hale Score, pillar scores, habits, and the days you log them.
• Coach messages: what you write to the AI coach and what it replies.
• Subscription: whether you have a paid plan. Stripe handles your card; we never see or store card numbers.
• Email list: if you leave your email for updates without creating an account.
• Usage: which pages and steps people use, without cookies or personal details (see "Cookies and analytics"). Our hosting provider also keeps ordinary server logs, which include IP addresses.

• To run Hale for you (your account, score, plan, coach and billing). Basis: it is needed to provide the service you asked for.
• To use your health-related answers. Basis: your explicit consent, which we ask for before the assessment starts. You can withdraw it at any time by deleting your account, and withdrawing it does not affect what we did before.
• To keep Hale secure and to understand which parts work. Basis: our legitimate interest in a safe, working product, using only cookie-free, non-identifying usage data.
• To keep tax and accounting records. Basis: legal obligation.
• To send you updates you asked for. Basis: your consent. Every email has an unsubscribe link.

We do not sell your data, use it for advertising, or share it with data brokers.

These companies process data for us, only to provide their service:

• Supabase — database and sign-in. Our data is held in the EU (Frankfurt).
• Vercel — hosts the website.
• Stripe — takes payments and manages subscriptions.
• Anthropic — powers the AI coach. When you use the coach, we send your messages plus a trimmed summary: your age range, sex, scores, habit completion rates, focus pillars, and whether a safety setting is on. We do not send your name or email. We use Anthropic's business API, which by default does not use that content to train its models.
• Resend — sends our emails.
• PostHog — cookie-free usage statistics, hosted in the EU.
• Google — only if you choose "Continue with Google".

Some of these (Vercel, Stripe, Anthropic) may process data outside the UK, including in the US. Where they do, they rely on approved safeguards such as the UK Data Bridge or standard contractual clauses. We may also disclose data if the law requires it.

• Your account data, answers, scores, habits and coach messages: until you delete your account. Deleting it removes them from our database straight away. They may remain in encrypted backups for a short time before those expire.
• Payment records held by Stripe and our accounts: for as long as tax law requires, which in the UK is currently six years.
• Email list: until you unsubscribe.
• If you start the assessment without creating an account, your answers are tied to an anonymous session. Email us and we will delete them.

You can ask us to:

• give you a copy of your data (use Export my data on your account page);
• delete your account and its data (use Delete account on your account page; it does not cancel a subscription, so cancel that first in billing);
• correct anything that is wrong;
• stop using your data in a particular way, or withdraw your consent.

Email hello@halescore.com and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would like the chance to fix it first.

We use one essential cookie to keep you signed in. It is set for anonymous sessions too, so your assessment can be saved before you create an account. We do not use advertising or tracking cookies.

Our usage statistics keep their identifier in memory only. Nothing is stored on your device, so there is no cookie banner. If your browser sends a "Do Not Track" signal, we honour it.

Hale is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you think we have, email us and we will delete it.

Hale measures everyday habits against published public-health guidance. It is not a medical service and does not diagnose anything. See our terms for more.

If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect. The date at the top shows the latest version.