Palindrome
Privacy Policy
This policy explains what data Palindrome processes, why we process it, and what rights users have. Palindrome helps organize health related data. It does not diagnose, treat, prescribe, or replace a doctor.
Last updated: October 19, 2026
Operator and contact
Palindrome is operated by the Palindrome team. For privacy, account, or data questions, contact us at office@palindrome.life.
What Palindrome is
Palindrome is an app for organizing user entered data, including health journals, measurements, supplements, peptides, symptoms, wellbeing notes, and observation history. The app is organizational and educational.
Data we may collect
The user enters the data in the list below, from the check-in to goals, to track, organize, and review it. Palindrome does not diagnose and does not recommend anything based on it.
- Account data, including email address, user identifier, and profile settings.
- Check-in: ratings and answers for chosen markers, such as energy, fatigue, mood, stress, anxiety, sleep (quality, falling asleep, night awakenings), pain and where it is, perceived strength change, palpitations, hot flashes, appetite, digestive comfort, or libido, with the time of the entry and an optional note. The user chooses which markers to fill in.
- Day context tags, for example travel, illness or infection, shift work, training, a stressful day, a late meal, or a medication change, with an optional short note.
- Check-in settings: which markers are pinned and whether cycle tracking is on.
- Cycle tracking, if the user turns it on (it is off by default and needs consent to process health data): bleeding, cramps, and accompanying symptoms recorded in the check-in. Turning it off hides these markers and does not delete the saved history.
- Caffeine: entries (source, number and size of servings, product name, caffeine in mg together with whether the value comes from a label, a catalogue estimate, the user, or is unknown, the time of the entry, and an optional note), saved favorite drinks, and the caffeine content added to items in supplements. When a supplement is marked as taken, we also save a snapshot of its caffeine content from that moment.
- Nutrition: entries with daily macros (protein, fat, carbohydrates in grams), with the time of the entry and an optional note, from which we calculate the day total. The app has no meal list and no food database.
- Peptides: plans (name entered or chosen from the catalogue, dose, frequency, start and end dates, status, notes), entries (time, amount, method, site and side of the body, note), vials (amount of the substance, amount of liquid, reconstitution and expiry dates, note, amount remaining), and calculator results saved to a vial (amounts, dose, syringe or atomizer settings).
- Supplements: items in the supplement plan (name, dose, timing, frequency, notes), records of taking or skipping, the pause history (from and to dates), and package stock with its corrections.
- Body measurements: weight, circumferences, body fat, resting heart rate, blood pressure, height, and notes.
- Goals chosen by the user, for example for weight, circumferences, wellbeing ratings, or regularity: direction and an optional target value.
- Other user entered data, including health journals, symptoms, notes, and observations saved in the app.
- Consent records, including acceptance of the terms, privacy policy, health data processing consent, and optional marketing consent.
- Technical data, such as basic device, browser, session, security, and application error information.
- Cookies or similar mechanisms when needed for login, security, session management, app operation, or basic analytics.
Why we use data
- To create and operate user accounts.
- To save user entries, measurements, history, and settings.
- To show trends, history, and an organized view of user entered data.
- To calculate summaries from entered data, such as the day total of caffeine or macros, the amount left in a vial, supplement package stock, or a comparison of periods on charts. These are summaries of the entries, not assessments or recommendations.
- To improve product quality, application reliability, security, and support.
- To meet legal obligations when they apply.
Health data and safety
Users should not enter emergency information into Palindrome. In an emergency, contact local emergency services or a medical professional.
Palindrome does not diagnose, treat, prescribe, or recommend starting, stopping, or changing therapy. The app does not replace a doctor or other qualified professional.
Legal bases and GDPR
- Consent, when we ask for health data processing consent, marketing consent, or other optional processing.
- Contract, when we operate the account and core app functionality.
- Legitimate interest, when we protect security, product quality, abuse prevention, and support workflows.
- Legal obligation, when the law requires us to keep or disclose specific information.
Processors and providers
We may use infrastructure and service providers that help operate the app. This includes Supabase for database and authentication services, Vercel for hosting, Google OAuth for sign in, and other infrastructure, security, and technical support providers when needed to run the service.
Anonymous visit statistics
On the public pages (home page, calculator, terms, privacy policy, sign up and sign in) we measure anonymously which pages and buttons help people create an account. We use PostHog Cloud in the European Union (Frankfurt), which acts as our processor. For this measurement we do not use cookies or anything that is stored on your device, and we do not send health data or anything you enter in the calculator or the app. These statistics do not run inside the app once you are signed in. The calculator remembers the values you last entered only in your browser, so you do not have to type them again. We do not send them anywhere.
Visits are told apart by an anonymous hash that PostHog computes on its own servers from the IP address and browser data and changes every day, so it cannot identify a person or follow them from one day to the next; the IP address is not stored with the events. The legal basis is legitimate interest (Article 6(1)(f) GDPR): we want to know which pages help people create an account. PostHog keeps the events for 1 year by default (up to 7 years on a paid PostHog plan). You can object to this measurement by turning on Do Not Track or Global Privacy Control in your browser, which we respect, or by writing to office@palindrome.life.
Data stored in your browser
We keep some values only in your browser storage (localStorage): the values you last entered in the calculator, on the public page and in the app (for example the amount of substance, the amount of liquid, the dose, and the syringe or atomizer settings), and the chart series you last selected. For charts we store only the series identifiers, not the values from your entries.
Calculator values stay in your browser and reach your account only when you save a calculation or an entry. The chart selection is also part of the address of the charts page, so the series identifiers reach us with the request for that page, but we do not store them in the account database. Values remembered in your browser are not part of the export file and are not deleted with the account. You can remove them by clearing site data in your browser.
User rights
- Access your data.
- Correct or update your data.
- Delete your account in Profile, or request data deletion when legally available.
- Export your data: in Profile you can download a JSON file with your account data and all entries, including those marked as deleted. If the file exceeds the size limit, write to office@palindrome.life to receive the complete data.
- Withdraw consent when processing is based on consent.
- Contact us about privacy at office@palindrome.life.
Retention
We keep data while the account is active, while it is needed to provide the service, or while the law requires it. Users may request account or data deletion, and we will review the request under applicable law.
An entry deleted in the app may at first only be marked as deleted and hidden. We remove such an entry from the database permanently 30 days after it was deleted. Until then, the export file includes it with the deletion mark.
The account can be deleted by the user in Profile. Deletion is permanent and covers the account data and all entries described in this policy, including check-in, caffeine, nutrition, peptides, supplements, body measurements, and goals. The user can download their data before deleting. Deleting the account does not cancel a paid subscription, and payment history and confirmed purchase identifiers may remain without a link to the account.
Security
We use reasonable technical and organizational safeguards to protect user data. No internet system is perfectly secure, so we cannot guarantee protection from every risk.
Policy changes
We may update this policy when Palindrome features, providers, laws, or processing practices change. The current version will be available on this page.
