Who Can See Your Data

Other users: never

There is no public profile, no user directory, no search that finds people, no

followers and no feed. Another ClapDiet user has no way to discover that your

account exists, let alone see anything in it. This is not a setting you have to

find and switch on — the product has no social layer at all.

ClapDiet staff: yes, and here is exactly what

This is the part people expect to read "no", and an earlier version of this

article said so. It was not true, and it is the kind of untrue that matters

most on this page.

An administrator can open:

Your profile — name, email, date of birth, biological sex, height,

weight, country, region, city, timezone, and whether two-factor is on

Any lab panel, with its results and its interpretation

That is health data, and there is no per-support-case consent step gating it.

What follows from that:

Every such view is recorded. Opening one person's profile, or one lab

panel, writes an audit row naming the administrator, what they opened, and

whose it was. Browsing a paginated list does not, because a row per page

would bury the views that matter under the ones that do not.

Those rows are kept 90 days, alongside the rest of the audit trail.

Administrator accounts are few, and the role is granted deliberately —

every admin route checks it.

We would rather tell you this than let you believe a promise the software does

not keep.

Third parties: what each one gets

Google Gemini, for AI features. It receives the health facts an answer

needs — date of birth, biological sex, height and weight, conditions with

severity and diagnosis dates, medications with dose and frequency, allergies,

preferences, and your latest lab panel. It does not receive your name or your

email address.

That limit is real. It is not anonymity, and calling it that would be the

comfortable lie: health facts about one person identify that person in

aggregate. What is true is that we send the facts and withhold the name.

Stripe, for payments. Card details go to Stripe's own checkout page and

never reach ClapDiet. There is no card number field in this product.

Sentry, for website errors. It sees crashes on the web app. The phone app

sends nothing to any monitoring service — it ships no analytics SDK and no

crash reporter.

Nobody else. Your data is not sold, not shared with advertisers, and not

contributed to research. There is no advertising in ClapDiet and no research

programme for it to be contributed to.

Sharing it yourself

Everything here is something you do, in front of you, one file at a time:

The Clinician Report — conditions, medications, allergies, current

interactions and recent labs on one page, printed from your browser. See

Sharing Labs with Clinicians.

The data export — the whole record as JSON, or one topic as CSV. See

Exporting Your Data.

There are no share links. Nothing generates a URL someone else can open, so

there is nothing to set an expiry on and nothing to revoke. There is no family

sharing, and nothing that posts an achievement anywhere.

What you control

The surest control is what you record. Anything you remove — a condition, a

medication, a lab panel — stops being used the moment it is gone, and is not

retained anywhere.

Beyond that, Settings > Privacy & Security holds the export and the

account deletion. There is no sensitivity dial for the safety warnings, and

that is deliberate: a switch that can hide a medication interaction eventually

hides the one that mattered.

If you are worried about your account

Check your active sessions in Settings and sign out anything you do not

recognise, change your password, and turn on two-factor authentication if it is

off. Data Security describes what stands

behind the account.

---

Related Articles:

Data Security

Sharing Labs with Clinicians