1. Who We Are
Recomp Health is a New Zealand-based health technology company developing the Recomp Health app — a GLP-1 body recomposition platform. Our website is recomphealth.org. We are the controller of the personal information we collect about you.
For privacy-related enquiries, contact us at privacy@recomphealth.org.
2. Information We Collect
We collect the following categories of personal information:
Email addresses
We do not currently operate a live waitlist or contact form on this site. If we reintroduce one (e.g. a product-updates signup, or a coach-application form), it will be processed via Formspree (US-based) and this policy will be updated to describe it.
Usage and analytics data
Page views, clicks, scroll depth, session duration, and device/browser type. Collected automatically when you visit our website via PostHog (US Cloud) and Microsoft Clarity (Azure, US). This data is used to improve our website and understand user behaviour.
Session recordings and heatmaps
We record anonymised session replays and generate heatmaps of user interactions via PostHog and Microsoft Clarity. These do not capture passwords or payment information. Text inputs may be masked.
Error and performance data
JavaScript errors, stack traces, and performance metrics are captured via Sentry (US) to help us identify and fix technical issues. This data does not include personal identifiers.
3. How We Use Your Information
- →To send product updates and relevant health content, if a contact form is active and you opt in (no such form is currently live on this site)
- →To analyse website traffic and improve user experience
- →To identify and fix technical errors on our website
- →To monitor website availability and performance
4. Third-Party Services
We use the following third-party processors. Each has its own privacy policy governing how they handle data.
| Service | Purpose | Location |
|---|---|---|
| Formspree | Contact form submission (not currently in use — no live form on this site) | United States |
| PostHog | Product analytics, session replay | United States |
| Microsoft Clarity | Heatmaps, session recordings | United States (Azure) |
| Sentry | Error tracking | United States |
| UptimeRobot | Website uptime monitoring | United States |
| AWS Amplify / CloudFront | Website hosting and CDN | United States |
| Supabase | App database, authentication, file storage | Australia (Sydney) |
| AWS S3 | Generated report artifact storage | Australia (Sydney) |
| AWS SQS + Lambda | Report generation queue and processing | Australia (Sydney) |
| Anthropic (Claude API) | AI-generated narrative in clinical reports | United States |
5. Cookies and Tracking
Our website uses cookies and similar technologies for analytics and session recording purposes (PostHog, Microsoft Clarity). These are functional and analytics cookies. By using our website, you consent to this use. You can opt out at any time by contacting us or adjusting your browser settings to block cookies.
6. Data Retention
Different categories of data are retained for different periods, reflecting their purpose and legal obligations:
| Data category | Retention period |
|---|---|
| Email address (waitlist) | Until you unsubscribe or request deletion |
| Website analytics & session replays | Up to 12 months |
| Error logs | Up to 90 days |
| Generated report artifacts (PDFs, CSVs) | 30 days after generation, then automatically deleted |
| Share links | Expire 1–168 hours after creation (user-configurable) |
| Health data logs (app) | Indefinite while account is active; deleted on account closure |
| Audit logs (security & access events) | 7 years (NZ Privacy Act 2020 compliance) |
| Backups | Up to 30 days, then automatically purged |
You may request deletion of your data at any time by emailing privacy@recomphealth.org. Account deletion removes all personal data within 30 days, except audit logs required for regulatory compliance, which are anonymised rather than deleted.
7. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- →Access the personal information we hold about you
- →Request correction of inaccurate information
- →Request deletion of your personal information
- →Withdraw consent to marketing communications at any time
- →Lodge a complaint with the New Zealand Privacy Commissioner
To exercise any of these rights, email us at privacy@recomphealth.org. We will respond within 20 working days as required by the Privacy Act 2020.
8. International Data Transfers
Your data is stored across multiple jurisdictions depending on the service:
- →Australia (Sydney) — Supabase database, AWS S3 storage, AWS SQS/Lambda processing. This is where your health data and generated reports live.
- →United States — Analytics (PostHog, Microsoft Clarity), error tracking (Sentry), website hosting (AWS Amplify), and AI narrative generation (Anthropic Claude).
New Zealand has approved cross-border data transfer arrangements under the Privacy Act 2020. By using our service, you consent to the transfer of your information to these jurisdictions for processing by the services listed in Section 4.
9. AI Processing of Health Data
When you generate a Monthly Summary, GLP-1 Intelligence, Clinician, Dietitian, or Coach report, computed metrics derived from your logs (e.g. average calories, weight change, training volume) are sent to Anthropic's Claude API in the United States to generate a personalised narrative.
- →Only computed metrics and trend summaries are sent — never raw food logs, free-text notes, or identifiers.
- →Per Anthropic's API terms, your data is not used to train their models.
- →A deterministic template fallback is used if AI generation fails or is disabled.
- →You can opt out of AI narratives in your account settings; reports will use the template fallback only.
- →All generated narratives pass a safety review pass before being included in reports.
10. Health Data Collected in the App
The Recomp Health app collects the following categories of sensitive health information. All health data is logged voluntarily by you and stored in your account:
- →GLP-1 medication details (drug name, dose, injection site, schedule, side effects)
- →Body metrics (weight, body fat percentage, waist, hip, chest measurements)
- →DEXA scan results (lean mass, fat mass, bone mineral content)
- →Biomarker results (blood glucose, HbA1c, lipid panels, hormones, inflammation markers)
- →Nutrition and dietary intake logs (macros, micronutrients, hydration, meal timing)
- →Exercise and fitness activity data (sets, reps, loads, session types)
- →Daily readiness scores (energy, sleep quality, soreness, stress)
- →Progress photos (only if you upload them — encrypted at rest)
- →Coaching messages (if you engage a coach through the app)
Health data is used solely to provide the Recomp Health service: generating reports, powering coaching, and (with opt-in consent) contributing to anonymised aggregate research datasets. It is never sold to third parties, never shared with insurers, and never used for advertising. You can export or delete your full health data at any time from your account settings.
11. Children's Privacy
Our website and app are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal information to us, please contact us at privacy@recomphealth.org and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent update. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions or to exercise your rights, contact us at:
© 2026 Recomp Health. All rights reserved.