DRAFT, not legal advice. Version 0.1, 2026-10-23. This page will be reviewed before ceria is sold.
Privacy policy
This explains what ceria collects, why, who handles it, how long it is kept and how to take it back. It is written to be read, not to hide things.
Who we are
ceria is published by James Bell, sole trader, trading as Ceria. Contact for anything about your data: [email protected]. ICO registration: not yet required, because ceria has not started trading; it will be registered before launch.
What we collect
- What you give us: your account (email), profile, goals, dietary restrictions, food log, workouts, measurements and anything else you type in.
- What you let us read: from Health Connect, only the types in the table below, only after you allow each one on your phone. Read-only: ceria never writes to Health Connect.
- What your use creates: plans, suggestions and your accept or decline choices, so the app can show what changed and why.
Health Connect data we request
11 data types, each tied to a feature you can see. If you refuse one, the app works with the rest and tells you what is missing.
| Data type | Why ceria reads it | Feature it supports |
|---|---|---|
| Steps | Daily activity for your calorie target | Calorie target and daily activity |
| Resting heart rate | Recovery trend, to suggest an easier week when you need one | Recovery trend and deload suggestions |
| Heart rate | Average heart rate on workouts | Workout summaries |
| Sleep | How long and how well you slept | Recovery card and readiness |
| Weight | Your weight trend against your goal | Weight trend against your goal |
| Body fat | Body composition trend | Body composition trend |
| Exercise sessions | Workouts you have done, so training and nutrition match | Training log, so training and nutrition match |
| Total calories burned | Your daily burn | Daily energy balance |
| Active calories burned | Calories burned in workouts | Workout energy |
| Distance | Distance on runs and rides | Run and ride totals |
| Elevation gained | Climb on runs | Climb on runs |
There is one more optional permission, Health data history: Lets you bring in months of history once, so your trends start from more than 30 days. It is asked only if you choose to pull older records.
And one more, Background reading: Lets ceria read the same data you have already allowed while the app is closed, so it arrives without you opening the app. It adds no new kinds of data; it only lets the data you already allowed be read while the app is closed.
How we use it
Only to run the features you can see in the app: your targets, your trends, your plan and your coach. We do not use it for any other purpose. Our commitments:
- We never sell your data.
- We never use it for advertising, by us or anyone else, and never pass it to data brokers.
- We never use it for credit, lending or insurance decisions.
- We pass it to another party only with your explicit consent, or where needed for security, to follow the law, or if the business is sold (you would be told).
- People at ceria do not look at your health data unless you ask for support and agree, for security, to meet a legal duty, or in aggregate with no names.
- We do not use your data to train AI models, and we will only use an AI provider whose terms say the same.
Garmin data and AI
If you connect your Garmin account, ceria reads your Garmin Connect data, read-only and only with your permission, through Garmin's official Connect API. It is used only for you: to show your own trends and to adapt your own targets and plan. It is never sold, never shown to other users, and Garmin-sourced data is labelled as coming from Garmin. You can disconnect at any time, and deleting your account deletes it.
AI transparency statement. ceria can use an AI system (Anthropic's Claude) to write coaching text and plans. This happens only if you have separately given explicit consent to AI coaching, and before any of your data, including Garmin-sourced data, is processed by it. What is sent is a short summary of the metrics needed to answer you, never your name or email. Your data, including Garmin data, is not used to train AI models. The AI suggests and you confirm: it cannot change your plan, log or settings on its own. You can withdraw consent at any time and ceria keeps working without it.
Who handles it
These services process data for us, each for one purpose. The data sources and processors page explains it in plain words.
| Service | Used for | What it receives | Region |
|---|---|---|---|
| Supabase | Database and sign-in | Your account, profile, training, nutrition and health data | [region to be confirmed] |
| Cloudflare | Runs the ceria server and serves this site | Requests to ceria, which pass through it; it does not keep your health data | Global network |
| Anthropic | AI coaching and AI food-label reading, only when you use them | The question or photo you send plus the summary needed to answer it. Not your name or email | [region to be confirmed] |
| GitHub | Holds ceria's code and runs the scheduled sync for the original single-user setup | At present, the owner's own synced data files, until the sync moves to the new server | [region to be confirmed] |
| Health Connect on your phone, Google Play, and optional Google Calendar sync | Health Connect data stays on your phone until you allow ceria to read it. Calendar sync sends only the session titles and times you choose | Global |
Data is sent over HTTPS and stored with providers that encrypt it at rest. If data is processed outside the UK, we will say where and what protects it; this is being confirmed with each provider.
How long we keep it
- Daily totals (steps, resting heart rate, weight and so on): for the life of your account.
- Workout and sleep sessions: for the life of your account.
- Detailed heart-rate and step series: 90 days, then removed; the daily summary stays.
- Workout traces (heart rate, speed, elevation): full detail for 12 months, then thinned; the workout itself stays.
- If you disconnect a source, what it already gave us stays unless you delete it.
- If you delete your account, it is hidden at once and can be restored for 15 days. After that everything is deleted for good, or sooner if you choose "delete now". Backups drop the data within [backup retention period to be confirmed with the database provider].
Your rights
You can see, export, correct and delete your data in the app (Account). You can object to or limit how we use it, and you can complain to the Information Commissioner's Office. Email [email protected] for any request and we will reply within one month.
Age
ceria is for people aged 18 and over.
Cookies and tracking
This site and the app use no analytics and no advertising cookies. The app stores a sign-in token on your device so you stay signed in.
Changes
If this policy changes in a way that matters, we will tell you in the app before it applies. Each version is dated at the top of the page.