Privacy Policy

Effective Date: October 2026 • Low Fruit First (Australia)

The Plain English Privacy Guarantee: We do not use third-party tracking scripts, advertising pixels, or data brokers. Your audit answers, body measurements, and habit plans are stored encrypted in Cloudflare KV behind an unguessable 128-bit random token. We never sell or share your personal data.

1. Who We Are

Low Fruit First ("we", "us", "our") operates the web service at lowfruitfirst.com. We provide habit auditing, behavioral caloric estimation, and phased lifestyle planning software. For privacy inquiries, contact us at [email protected].

2. What Information We Collect

Anonymous Audit Answers: Sex, age, height, weight, optional waist measurement, physical activity level, and selected weekly habit frequencies (e.g. coffee, drinks, snacks).
Email Address: Only when you voluntarily provide it to receive your free audit summary, join our product waitlist, or receive your passwordless client hub link upon purchasing.
Customer Identification: When purchasing, payment processing is handled directly by Stripe. We do not process or store credit card numbers or financial account details. Stripe provides us with a confirmed payment session and customer email.
Logged Milestone Check-Ins: Self-reported morning bodyweight, waist measurements, and habit adherence choices submitted on Day 28, 56, and 84.

3. How Your Data Is Stored (Passwordless Security)

Habit Audit uses an account-less, token-based architecture:

Your personal plan is keyed by a cryptographically random 128-bit base32 token (e.g., https://lowfruitfirst.com/?plan=abc123xyz).
There are no passwords to create or leak. Whoever holds the personal return link holds the record.
Data is stored globally across Cloudflare KV high-security key-value storage.

4. How We Use Your Information

To compute your Mifflin-St Jeor metabolic rate and caloric impact calculations against verified Australian Food Composition Database priors.
To recalibrate your biological responsiveness factor (k) upon submitting milestone check-ins.
To deliver your personal return link and milestone reminders via transactional email (powered by Resend).
To send occasional product updates if you joined our newsletter/waitlist (powered by MailerLite). You may unsubscribe at any time with one click.

5. Third-Party Service Providers

We work exclusively with trusted infrastructure partners:

Cloudflare Inc. (Global edge hosting, DDoS protection, and secure serverless key-value storage).
Stripe Inc. (PCI-DSS compliant payment processing).
Resend Technologies Inc. (Transactional email delivery for magic links and reminder alerts).
MailerLite (Email list management for audit summaries and waitlist notifications).

6. Your Rights & Data Deletion

Under the Australian Privacy Act 1988 (Cth), the General Data Protection Regulation (GDPR), and applicable privacy legislation, you have the right to:

Access the personal information we hold about you.
Request correction of any inaccurate information.
Request permanent deletion of your audit record, plan, check-in history, and email address.

To request data deletion, email [email protected] with your personal plan link or email address. We will permanently purge your records within 48 business hours.