Privacy Notice

Who is responsible for your data

Triton Total Health, based in the United States, is the data controller for personal information processed to operate Triton Total Health Community. This means we decide why and how that information is used. Paddle independently processes purchase and payment information as our Merchant of Record under its own Privacy Policy.

Information we collect and why

• Account and identity: name, display name, email address, login credentials managed by our authentication provider, and sign-in identifiers when you choose Google. We use these to create and secure your account, provide access, and communicate account changes.
• Membership: client access codes, access status, subscription identifiers, selected plan, billing period and payment-status updates from Paddle. We use these to grant access and manage your membership.
• Nutrition and fitness: age, height, weight, activity level and other calculator inputs you provide, macro targets, food entries, meal dates, nutrient amounts, and coach-assigned workouts and notes. We use these to calculate targets, track your entries and provide coaching features. This information may reveal sensitive health-related details; only provide information you are comfortable sharing for these purposes.
• Community and communications: thread titles, topics, posts, replies and messages you send for support. We use these for member discussions, responding to requests and enforcing community rules. Your display name and community posts are visible to other members.
• Technical and usage information: IP addresses, browser and device information, request and error logs, session identifiers and activity needed to operate the service. We use these for security, fraud prevention, troubleshooting and service improvement.

Legal bases

Where applicable privacy law requires a legal basis, we rely on performance of our agreement to provide accounts, tracking, lessons and membership; legitimate interests for service security, fraud prevention, moderation and improvement; and legal obligations for required records and lawful requests. We rely on consent where required, including for optional processing of sensitive information or non-essential tracking. You may withdraw consent, without affecting lawful processing before withdrawal. We do not use your food logs or fitness details for advertising.

Who receives information

• Service providers: hosting, database, authentication, storage, operational monitoring and support providers process information as needed to deliver and secure the service. The app is hosted through Lovable Cloud; Google receives information if you choose Google sign-in.
• Paddle: our Merchant of Record receives information needed for product sales, subscription management, payments, tax compliance and invoicing, and sends us membership-related updates.
• Food and video services: food searches and barcode lookups send the query or barcode to USDA FoodData Central or Open Food Facts, along with technical request information such as your IP address. Playing embedded YouTube or Vimeo videos connects to those providers, which may receive device, usage and cookie information under their own policies.
• Coach and members: the coach processes information needed to administer memberships and assigned workouts; other members see the community information you publish.
• Professional advisers and authorities: we may share necessary information with legal or accounting advisers and with authorities where required by law, or to protect rights and prevent fraud.

Retention and account closure

We keep account, nutrition and workout information for as long as necessary to provide your active account and resolve related requests. When information is no longer needed, we delete or anonymize it, subject to legal, security and dispute-resolution requirements. Account deletion removes the account’s food logs, macro targets and membership access records. Community contributions, coach-held records, subscription history, operational logs and backup copies may remain where necessary; account deletion is not a promise that every copy or community contribution is immediately erased. You can separately request review or removal of personal information in retained content. Paddle retains payment and tax records according to its own legal duties and privacy policy.

Security

We use appropriate technical and organizational measures, including encrypted connections, authenticated access, access controls and restricted administrative access. No online system can guarantee absolute security. Protect your credentials and avoid including sensitive personal information in public member discussions.

Cookies and browser storage

Essential session cookies or browser storage keep you signed in and support authentication and security. Local browser storage remembers your dark or light background choice. Embedded videos and payment services may use their own cookies, including analytics or marketing cookies, under their policies. We do not configure app-level advertising tracking. You can manage cookies and site storage in your browser and provider privacy settings; blocking essential storage may prevent sign-in or checkout. Where legally required, non-essential cookies require consent; do not play optional external videos if you do not want to connect to their provider.

International processing

We operate in the United States, and our providers may process information in other countries whose laws differ from yours. Where applicable law requires safeguards for cross-border transfers, we use legally recognized transfer mechanisms and appropriate contractual protections.

Your privacy rights and requests

Depending on your location and applicable law, you may request access, correction, deletion or a portable copy of your information; restrict or object to certain processing; withdraw consent; and complain to a relevant privacy regulator. We do not sell personal information or share it for cross-context behavioral advertising. You will not be discriminated against for exercising applicable privacy rights. We may need to verify your identity before acting on a request and will respond within the deadlines required by law.

You can update account details and request account deletion in Account. For other privacy requests, contact Coach Daina Behe, acting for Triton Total Health, through your existing coaching or support contact channel. Do not post sensitive details in community threads. For purchase information held independently by Paddle, use paddle.net or Paddle’s privacy contact process.

Updates

We may update this notice as the service changes. The effective date appears above; we will communicate material changes through the service or email where appropriate.