Home

Privacy Policy

Last Updated: September 30, 2026

1. Introduction

Health Hishtadlus Inc. ("we," "us," or "our") is a Massachusetts corporation that operates healthhishtadlus.com. This Privacy Policy explains what personal information we collect, how we use it, and your choices regarding that information. By using our Site and services, you agree to this Privacy Policy.

By using our services, you also agree to our Terms & Conditions.

2. Information We Collect

Account information: When you register, we collect your first name, last name, and email address, and ask you to confirm that you are 18 or older. We do not collect your date of birth. Your password is stored as a cryptographic hash; we never store your password in plaintext and cannot recover it.

Body measurements: You may optionally provide your height and weight at signup or from your profile settings. We use them solely to calculate and display your Body Mass Index (BMI) on your dashboard, including a history of past readings shown as a BMI-over-time chart. You can update your current measurements at any time from your profile settings, delete individual chart entries from the BMI chart, and remove your measurements entirely at any time. If you join a coaching group, providing height and weight during account setup is required so we can track your progress toward the program's outcome guarantee.

Food log data: When you use the nutrition test, we collect the food and meal information you enter. This data is associated with your account and used to generate your nutrition scores and personalized suggestions. The nutrition test offers an optional voice-dictation feature: if you use it, your device's built-in speech recognition converts your speech to text. In some browsers this means the audio is processed by your browser or operating-system vendor's speech service under their privacy policy. We never receive or store the audio itself; we only receive the resulting text you choose to submit.

Suggestion progress markers: When you log a "win" against a change you're working on, we store a timestamp tied to that suggestion. We use the count of wins over the last 14 days to display your progress and to decide when a change has stuck. You can undo the most recent win at any time. When you finish all the changes from a round, we show you a summary and ask, for each completed change, whether you're still keeping it up; if you indicate you've stopped, we record that (with a timestamp) so you can take the change up again in a new round.

Usage data: Our hosting provider, Cloudflare, collects server-side data including IP addresses, pages visited, and session timestamps for the purpose of operating and securing the Site. We do not use browser-level tracking cookies or third-party analytics.

Sign-in cookie: When you log in, or finish setting up your account from an invitation link, we store one essential cookie in your browser containing a random session identifier and nothing else. It is what keeps you signed in, it is readable only by our own server, and it expires after two weeks or as soon as you log out. It is never used for tracking or advertising.

Communications: If you contact us by email or through our contact form, we retain your name, email address, the category of your inquiry, and the message content to respond to you.

Spam protection on our forms: When you send the contact form or a coaching application, a security check called Cloudflare Turnstile confirms the submission comes from a person and not an automated program. To do that, Cloudflare reads technical signals from your browser and device, such as your IP address and browser characteristics, and gives us only a pass or fail result. Most visitors never see it; occasionally it asks for one click. Cloudflare uses this information only to run the check, not for advertising. We also count recent submissions from each network and account to limit repeated sending.

Coaching applications: If you apply for the Coaching in Pairs program, we additionally collect the details you submit in the application (including your phone number, your city, and the name of anyone you ask to be paired with), and we use them solely to contact you about the coaching program and arrange your participation.

Group coaching nutrition data: If you are a coaching client on the group nutrition track, we store the eating-day plans you build, your daily clean-day logs (whether the day was on-plan and, if not, what was off-plan) used to calculate your streak, and the personal food allowances your coach sets for you. You can remove a logged day yourself for 24 hours after you log it; after that it stays in the record, because the same log is what your outcome guarantee is scored against. Re-logging a day replaces it and restarts that 24 hours. This data is used solely to run your coaching nutrition program and is visible to you and your coach.

Pairing and weekly calls: Coaching groups run in pairs. If your coach pairs you with another client, the two of you become each other's accountability partners, which means you each receive the partner notifications about the other's progress; un-pairing ends that. We also store the schedule of your weekly coaching calls, whether each one happened, and the notes your coach writes for their own preparation. You can ask us to show you or delete those notes at any time, and they are never shared with anyone outside the coaching relationship.

Coach access to your progress: If you are a client in a coaching group, your coach can see what you record during the group, gathered into a progress view: the workouts you complete and the reps you log, the exercise levels you move through, your weigh-ins and BMI readings, your daily nutrition logs, your eating-day plans, your allowances, your nutrition tests, the changes you track, and the workout times you set. Your coach sees this to coach you and to judge your outcome guarantee. Other clients never see it, we do not sell it, and we do not share it outside the coaching relationship.

Progress milestones: As you train and log, we record which progress milestones you reach and the moment you reach them, for example your first completed week, a run of clean days, or the first time you beat your opening repetition count. Each is derived from records you already create on the platform; none of it is new information about you. We store it so each milestone is recognised once rather than repeatedly, and it is visible only to you and, if you are a coaching client, to your coach.

Workout schedule: If you set the times you train, we store each weekday and time you chose, which program day you assigned to it (if any), and how many minutes before the session you asked to be reminded. These times are stored as your local clock time and are read against the time zone on your account. We use them only to send your workout reminders and to show your next session on your dashboard. You can change or delete your schedule at any time, and deleting a time removes it and stops its reminders.

Sets you log: When you log a set during a guided workout we store what you performed: the exercise, the level you are on, and the repetitions or seconds. On exercises performed with assistance, such as the assisted pull-up, we also store how much help you reported using, because how much help you needed is the progress on that exercise and the repetition count alone cannot show it. We use these records to show you your own history, to tell you when you are ready to move up a level, and, if you are a coaching client, to judge your outcome guarantee.

Time zone: we store the time zone on your account so that anything tied to your local clock happens at the right moment: when reminders arrive, when your nutrition day starts, and what time your scheduled workouts are read against. When you open the settings panel your browser tells us which time zone your device is set to, so we can point out a mismatch. We do not request your location, and we do not collect or store GPS coordinates. By default, when your device's time zone differs from the one on your account, we update your account to match, so that your reminders keep arriving at the right local time if you travel. You can switch this off in Settings, after which your time zone changes only when you set it yourself. Notification emails are delivered through our email provider.

Recipes you send: when you send a recipe, the link carries an identifier of your account, so it opens only while you have access to the recipes. Whoever you send it to sees the recipe and nothing else about you. We do not see or store who you sent it to.

Accountability partners: when you accept an accountability partnership, we share your activity summary (workouts completed, changes completed, nutrition tests taken) and your missed-goal status with the connected partner via in-app and email notifications, and we show your partner your first name together with whether you have completed this week’s training on their dashboard. We do not show them your weight, your BMI, your eating log or your rep counts. This sharing is mutual and stops when either party revokes the connection.

Partnerships we make for you: a site administrator may match you with another member as accountability partners, and a coach pairs the clients in a coaching group the same way. A partnership made for you shares exactly what one you accept yourself shares, you are both notified when it is made or ended, and either of you can end it at any time from your settings.

Messages: you can send direct messages to your accountability partners, and our coach can send you messages that you can reply to. We store each message, who sent it, when it was sent, and how far each person in the conversation has read, so that we can deliver the conversation and show you what is unread. A conversation with a partner is visible only to the two of you: site administrators have no screen that shows it, and we do not read it except to investigate a report of abuse or where the law requires it. A conversation with the coach is visible to you and to our site administrators. When a partnership ends, its conversation is hidden from both of you, and it returns with its history if you become partners again. When an account is deleted, every conversation it was part of is deleted with it. Notifications about new messages follow your notification settings, and a notification email includes the start of the message.

Health screening: Before a coaching group starts, we ask you a short set of yes-or-no health questions (for example, whether a doctor has said you have a heart condition, whether you take medication for a chronic condition, or whether you are pregnant). We store your answers, the version of the questions you answered, and the date. If any answer is yes, we record that you were advised to talk to your doctor and confirmed you take part on your own responsibility; for a small number of answers (such as chest pain or fainting) we also ask for your doctor's OK before your first session and record when it arrives. Your answers are seen only by your coach and are used only to keep your training safe.

Records of what you agreed to: When you accept one of our legal documents (for example the Terms & Conditions or, for coaching clients, the Coaching Agreement and the Release of Liability), we record which document, its version, the time you accepted it, the IP address you accepted it from, and your browser's user agent (a short description of the browser and device). Where a document asks you to type your full name as a signature, we store that too. We keep these records as evidence of the agreement.

Marketing consent: If you choose to receive news and offers from us, we record that you opted in and when. If you later turn it off, we clear that record.

Media release choice: If you are a coaching client, we record whether you gave us permission to use your first name, quotes, progress numbers and any photos you send us in our marketing, and when. It is optional, never required to join, and you can withdraw it for future use at any time by emailing us.

3. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account
  • Provide and personalize our services
  • Generate nutrition scores, food ratings, and personalized suggestions
  • Send transactional emails such as account confirmation and purchase receipts
  • Send marketing emails and messages, only if you opted in (see Section 4)
  • Improve and develop the Site and services
  • Comply with legal obligations

We do not use your personal data to train AI models. We do not sell your personal data to advertisers or data brokers.

4. Marketing Communications & Service Announcements

Creating an account does not sign you up for marketing. We send marketing email or WhatsApp messages (news, offers and program announcements) only if you explicitly opt in: by ticking the optional box when you sign up or join coaching, or by turning on offer emails in Settings. You can withdraw that consent at any time by turning off email for "Offers & subscription" in Settings → Notifications, by using the unsubscribe link at the bottom of any offers email (no login needed), or by emailing us, and we stop. Withdrawing it does not affect service messages such as purchase receipts, account security notices, or the reminders you have switched on.

Service announcements composed by site administrators are delivered as in-app notifications and emails using the contact information and language preference on your account. You can opt out from Settings → Notifications without affecting the rest of your account.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data.

We share data with the following service providers, and only as much as each needs to do its job for us:

  • Cloudflare, Inc.: provides our hosting, database, CDN, and server-side analytics, and runs the Turnstile spam check on our public forms. Cloudflare may process your IP address, usage data, and browser signals.
  • Stripe: processes payments on our behalf. When you make a purchase, we share your email address, a Stripe customer ID, and transaction metadata with Stripe. You provide payment card information directly to Stripe; we do not store your payment card data on our servers.
  • Lemon Squeezy: for some international sales we route checkout to Lemon Squeezy, which acts as Merchant of Record. When that happens, your email, order details, and country are shared with Lemon Squeezy so it can process the payment and collect and remit applicable VAT/GST.
  • Anthropic: when you take a nutrition test, the food and meal text you enter is sent to Anthropic's AI service so it can read and sort it. We send the text you typed, not your name or email. Under Anthropic's commercial terms, this data is not used to train their models.
  • Resend: delivers our emails (account emails, receipts, reminders, and marketing email if you opted in). It receives your email address and the content of each email.
  • Meta (WhatsApp) and Twilio: used for WhatsApp messages and voice-call broadcasts to people who have agreed to receive them, or to our existing clients about the training they receive from us. They receive your phone number and the message. Tell us (or reply "STOP") and we stop messaging you; we then keep your number only to make sure we never message it again.
  • Our video-call service: coaching calls are held over a third-party video-call service, which processes your name, the audio and video of the call while it happens, and connection data. We do not record calls unless everyone on the call agrees first.
  • Off-site coaching payments: coaching is paid by the payment method agreed with you in writing before you enroll (for example a bank transfer or a card payment service). That provider receives the details needed to process your payment.

We may disclose personal information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of our users.

6. Consumer Health Data

Some of what you give us is health data: your weight, height and BMI readings, your health screening answers and any doctor's clearance, and your nutrition logs, eating-day plans and nutrition test results. We treat it with extra care:

  • We use it only to provide the service to you and, if you are on a program with an outcome guarantee, to judge that guarantee.
  • We never sell it, and we never use it for advertising or to target ads.
  • We share it only with the service providers listed in Section 5, only as needed to run the service, and with your coach if you are a coaching client.
  • We ask for your consent before we collect it. For coaching, that means you agree before you answer the health screening and before you give your body measurements.
  • You can see it, correct it, or have it deleted at any time (see Section 10).

7. Data Security

We implement industry-standard security measures to protect your personal data, including HTTPS encryption for all data transmission and cryptographic hashing of passwords. No method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain your personal data for as long as your account remains active. If you request deletion of your account, we will delete your personal data within 30 days of the request, except where we are required to retain data by law.

9. Children's Privacy

Our Site and services are intended for users who are 18 years of age or older. We do not knowingly collect personal data from persons under 18. If we become aware that we have collected data from a person under 18, we will promptly delete that account and all associated data. If you believe we have inadvertently collected data from a minor, please contact us at healthhishtadlus@gmail.com.

10. Your Rights

You have the right to access, correct, or delete your personal data. To exercise any of these rights, email us at healthhishtadlus@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

11. International Users

Health Hishtadlus Inc. is operated in the United States. If you are accessing the Site from outside the United States (including from Israel, the European Union, or any other jurisdiction), your personal data will be transferred to, stored, and processed in the United States. By using this Site, you consent to the transfer, storage, and processing of your data in the United States.

12. Changes to This Policy

We may update this Privacy Policy at any time. We will indicate the date of the most recent revision at the top of this page. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or to exercise your data rights: healthhishtadlus@gmail.com

14. Language

This Privacy Policy is available in English and Hebrew. In the event of any conflict or inconsistency between the two versions, the English version shall govern.