This policy explains what personal data Qowla collects, how it is used, and your rights under UK GDPR and the Data Protection Act 2018.
When you use Qowla we collect the following:
- Account data — your name and email address, provided at sign-up
- Body metrics — your start weight, current weight, and target weight (in kilograms)
- Workout logs — dates, exercises completed, and Form points earned
- Meal logs — food items, calorie and macro totals logged each day
- Programme progress — your current cycle, week, streak, and rank
- Technical data — session cookies required to keep you logged in; your browser's language header (used to show relevant food results)
We do not collect payment card details. All billing is handled by Whop (see below).
Your data is stored in Notion databases. Notion is a US-based service, which means your data may be processed on servers located in the United States. Notion is Privacy Shield compliant and processes data under Standard Contractual Clauses approved by the European Commission.
Authentication (login sessions) is handled by Supabase, which stores session tokens in encrypted, httpOnly cookies on your device. Supabase offers EU-region hosting; however, some data may transit through US infrastructure.
By using Qowla, you acknowledge that your data may be stored and processed outside the United Kingdom.
Your data is never sold to third parties. It is shared only with:
- Whop — our payment processor. Whop receives your email address and subscription status to manage billing. Whop's own privacy policy applies to data they hold.
- Qowla staff — founders only, solely for support and product improvement purposes
Leaderboard positions display only your first name and rank to other Qowla members. Your email, weight, and meal data are never visible to other users.
- To provide and personalise your fitness programme
- To calculate your calorie targets and TDEE automatically after week 1
- To award Form points and track rank progression
- To display your position on the leaderboard
- To send you programme-related notifications (if enabled)
We do not use your data for advertising or profiling purposes.
Under UK GDPR you have the right to:
- Access — request a copy of all data we hold about you
- Correction — ask us to correct inaccurate data
- Erasure — request deletion of your account and all associated data ("right to be forgotten")
- Portability — receive your data in a portable format
- Objection — object to processing in certain circumstances
To exercise any of these rights, email qowla@qowla.org. We will respond within 30 days. Account deletion requests are processed within 7 working days.
We retain your personal data for as long as your account is active. If you cancel your subscription and do not return, your data is deleted 12 months after account closure. Workout and meal logs are deleted alongside your account data.
Qowla uses only functional cookies — specifically a session cookie to keep you logged in, and a preference cookie for dark mode. We do not use advertising, tracking, or analytics cookies.
For any privacy-related questions or requests, contact us at: