Data & privacy.

On your device

Signed-out personal measurements are stored in this browser. Other people using the same browser profile may be able to access them. Demo measurements stay separate from personal account imports. Starting a fresh local profile replaces the local working profile. Browser-data controls export guest history and routine drafts or explicitly delete the guest records in this browser. Saved account data and account-scoped drafts are separate.

Your account

Supabase manages email-and-password authentication and stores account profiles and measurement history. Passwords are handled by Supabase Auth; they are not stored in your measurement profile. Signing in offers a review of any guest profile. Measurements are imported only after you choose to import them. Profiles default to private.

Raw measurement logs and import receipts are restricted to their account owner. Measurement clearing adds a history marker; it does not erase earlier observations. Signing out clears cloud measurements from the active dashboard and does not copy them into guest storage. Account exports include saved observations and metadata, assessment records, import receipts and routine history. You can delete selected measurement history after signing in again; this also removes derived assessment summaries and disables public sharing. Account deletion is offered when the secure server or authenticated account-deletion function is available. It requires confirmation and a recent sign-in. Live deletion does not erase third-party copies or provider backups; backup retention has not been independently verified. Unsaved account drafts may remain in this browser, scoped to that account, until you save or discard them. Other people with access to the same browser profile may access local storage.

Public snapshots

Publishing a profile shares its username, age cohort, coverage and model aggregates. Reference sex and body size are optional public fields; review the preview before publishing. Raw measurement logs remain private. A signed snapshot attests calculation by TOP1, not independent verification of the input measurements.

Switching back to private blocks new public-page and social-card requests. People and social networks may retain copies or images already saved.

Hosting and usage events

Vercel hosts the application and may retain operational request information. Optional PostHog usage events are inactive without a configured project key. The optional integration sends event names, route categories and metric IDs rather than measurement values, demographics, account identity, public usernames or full URLs.

Measurement limits

The index is experimental and self-reported. It is not a population rank, clinical score or diagnosis. Thermal and clinical observations require context and do not receive a health rank. View Methodology in your dashboard for metric evidence and calibration limits.

Support & data requests

For account help or a data request, email drahmedlr@gmail.com. Include the account email and request type. Please do not send passwords, lab reports or medical details. Identity verification is required before account changes.