How Composa handles your data
A plain-language summary of what Composa does today. A full privacy policy is being finalised; until then, this page describes the actual handling.
What Composa stores
Your sign-in email; your profile and starting measurements; what you log — weight, tape measurements, food, medication doses, steps, habits, symptoms and energy; private progress photos; your timezone; anything you post in the Community; and, if you have Coaching, your check-ins, reviews and messages, including voice notes.
Who can see it
You. If you have Coaching, your assigned coach can see your tracking, check-ins and messages; other staff see only administrative details, not their content. Community posts are visible to other members. Progress photos are yours alone. Composa does not sell your data and has no advertising or ad-tracking integrations.
Where it is and who helps run it
Your data is stored with Supabase in the European Union (Ireland). The app is served by Vercel; its server code runs in the United States, so your data passes through it on the way to and from the database. Vercel also counts anonymous page views — addresses are stripped of ids, dates and anything after a “?” before they are sent, and no health values are sent. Stripe handles payments (Composa never sees card numbers). Resend sends email. Google Firebase Cloud Messaging delivers notifications to the Android app. Barcode lookups go from our server to Open Food Facts; product photos load from Open Food Facts in your browser, which shares your device’s IP address with them.
Applying for a free coaching place
If you apply for a free coaching place, your answers (first name, email, how long you have been on a GLP-1 and what you want help with) are emailed to our support inbox and used only to reply to you about that offer. They are not added to an account or a mailing list. You can ask us to delete them at any time: support@composa.health.
Your controls
In Settings you can download all your data and delete your account. Deleting removes your account and your data; Community posts you wrote stay visible but are no longer linked to you. Questions about your data: support@composa.health.
Not a medical service
Composa is a consumer tracking app, not a medical device or a healthcare provider, and it gives no medical advice.