Privacy policy

This site is run by H³ · Hale, Healed & Hearty, an online weight-loss coaching service operating from Accra, Ghana. Coaching is delivered by Wuenam Glory.

We only collect what the coaching itself requires. In practice that is three groups of information.

When you join a programme we store your name and email address, so we know who you are and can send you your plan.

When you pay, the payment itself is handled by Paystack. We never see or store your card or mobile money credentials. We do store Paystack’s record of the transaction: the amount, the method used (card, mobile money or bank), the reference, when it succeeded, and the full response Paystack returns to us, which includes the IP address the payment was made from.

When you take part, you may send your coach your weight, height, age, free-text notes about your health, and photographs: a photo of your scale and photographs of yourself from the front, back and side. As the programme runs you may also add a short note about each day and further photographs, and attach a photograph as proof of a completed task.

We also record when you last signed in and how many times, how many sign-in links you asked for, and whether you have opened the site as an installed app. That is used to tell whether clients are able to get into their plan at all, which is a real problem we have had to diagnose.

Progress photographs are the most sensitive thing we hold, and they are treated that way. They are stored in private buckets that are not readable from the public internet. Every request for one is checked against your own account first, and a link to a photograph expires shortly after it is issued.

Your photographs are visible to your coach and to nobody else. They are not used in marketing, on social media, or anywhere on this site unless you have separately and explicitly agreed to that in writing.

We do not sell your information and we do not share it for advertising. We use a small number of service providers to run the site, and they only receive what their part of the job needs:

• Paystack processes payments and holds the card or mobile money details we never see.
• Supabase is the database and the private storage where your measurements and photographs are kept.
• Cloudflare serves the site, and provides privacy-focused traffic analytics that do not use cookies or track individuals.
• Resend sends the emails we send you, such as your sign-in link and payment confirmation.
• Microsoft Clarity records how pages are used, including anonymised recordings of page interactions and heatmaps, so we can find what is broken. See the note below.
• Google, only if you choose to sign in with Google. We receive your email address and basic profile information, and nothing else.

These providers operate outside Ghana, so your information is processed abroad.

You can sign in with Google instead of waiting for an emailed link. If you do, this is exactly what happens to your Google information.

What we access. Only your email address and basic profile information (your name and profile picture), through the standard openid, email and profile permissions. We do not request access to your Gmail, your Google Drive, your contacts, your calendar, or anything else in your Google account, and we cannot read any of it.

How we use it. Your email address is used for one purpose: to find your existing coaching account and sign you in. Google confirms the address belongs to you, which is what the emailed link would otherwise prove. If no paid account matches that address, we do not sign you in and we do not create an account.

What we store. We store your email address, which we already hold because you gave it to us when you joined. We do not store your Google profile picture, your Google account identifier, or any Google access or refresh token. Nothing from Google is written to your coaching record beyond confirming that you signed in.

Who we share it with. Nobody. Information received from Google is not shared, sold, or transferred to anyone, and is not used for advertising, profiling, or training any model. It is used only to sign you in.

How it is protected. Your sign-in is held in a signed, http-only session cookie that cannot be read by scripts in your browser. We verify Google’s response cryptographically and refuse any sign-in where Google has not confirmed the email address as verified.

How long we keep it, and how to remove it. Your email address is kept for as long as your coaching account exists, as described above. You can disconnect this site from your Google account at any time from your Google account permissions page, which stops us receiving anything further from Google. Ask us to delete your account and the email address goes with it.

Our use of information received from Google APIs follows Google’s API Services User Data Policy, including its Limited Use requirements.

We use Microsoft Clarity to understand how people use this site. Clarity records page interactions, meaning clicks, scrolling and navigation, and can replay them as an anonymised session. It masks text input by default, so what you type is not captured.

It is used to find faults, not to profile you. It is what showed us that clients were tapping buttons that did nothing. You can opt out of this and similar tracking by enabling “Do Not Track” or a tracking blocker in your browser.

Proposed, not yet fixed. These periods are a sensible starting point and have not been finally decided. If you want your information removed sooner, ask and we will remove it.

• Photographs and measurements are kept while you are an active client and for 12 months after your last programme ends, so before-and-after comparisons are still possible, then deleted.
• Your name, email and programme history are kept while your account exists.
• Payment records are kept for 6 years, because tax and accounting rules require it. This is the one category we cannot delete on request.
• Analytics are kept according to Microsoft Clarity’s own retention schedule, which we do not control.

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. You can ask us to delete your photographs while keeping the rest of your account. Write to the address above or message your coach on WhatsApp, and we will respond within 30 days.

Deleting your account removes your measurements, photographs and daily notes. Payment records are kept for the period above.

This service is for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, tell us and we will delete it.

If we change this policy we will update the date at the top. If a change materially affects how we use your information, we will tell active clients directly.