Privacy note

Seladon — version 2026-11-04

Seladon is a small app run by one person, Cosmin Zaharia, and used by a few people he knows. This note says what it stores about you, who handles it, what we would use it for beyond running the app, and how to have it deleted. Contact: dev@mczhr.com.

1. What is stored

• Your account: your name, email address and the Google account you sign in with.
• What you log: meals and foods, workouts and sets, sleep, body measurements, blood work, glucose readings, daily notes, goals and plans, and what you tell the chat about yourself (an injury, a medication, the equipment you have).
• Runs and sensor data: runs and other sessions, with their GPS routes, heart rate and other sensor streams, from the app itself or from what you connect (Strava, Polar, Health Connect, Apple Health, Garmin files you upload).
• Your chats: every message you send, the replies, what the assistant looked up or wrote for you, and photos you send.
• Feedback and usage: feedback you send, and a log of which parts of the app were called and when, for fixing problems. When the app crashes or hits an error, it sends us a report of it: the app's version, your phone's model and system version, what the app was doing, and the error's technical details. It holds none of your health data.

This is health data. We process it because you agree to it, and only to run the app for you, unless you also agree to training (section 3).

2. Who processes it

• Oracle Cloud hosts the servers and the database, and keeps the backups (Oracle Object Storage).
• AI model providers: Anthropic, OpenAI, Mistral and Google. To answer you, your message and the records a reply needs are sent to a model from one of them; photos are read the same way. They process it to produce the reply.
• Tavily receives the name of a packaged food when we look up its published label on the web. It receives no other data about you.
• Strava and Polar, when you connect them: we read your activities from them. Google confirms who you are when you sign in. Health Connect and Apple Health stay on your phone; the app sends us what they hold, with your permission.

Your data is not sold, not shared for advertising, and not used for anything but the purposes in this note.

3. Training our own model — only if you say yes

We may train Seladon's own AI model on chats and logs. We do that only with data from people who turned on the separate training consent in the app. It is off unless you turn it on, and the app works the same either way.

• Training runs on computers we rent for it from a GPU provider, preferably in the EU, which then processes that data for us.
• Data that came from Strava is not used, whatever you choose.
• You can turn it off at any time in the app. From then on nothing of yours is added to training. A model already trained cannot be untrained: it keeps what it learned before.

The tests we write when your conversation shows us a problem are rewritten so they keep the problem and none of your words, foods, numbers or health details. Those rewrites are not your data.

4. Deleting your data

Write to dev@mczhr.com and we delete everything that traces to you: your account, logs, runs, sensor streams and GPS, chats, photos, profile, goals, consent records and any training data from your conversations. We keep only a note that we deleted it, and when.

What remains, and why:

• Nutrition labels you scanned into the shared food list. A label is a fact about a product, not about you; your name is not on it.
• A model already trained on your data, if you had agreed to training (see section 3).
• Rewritten test cases that hold none of your data (section 3).
• Short excerpts that showed us a problem, only if you say yes when you ask for deletion, with your name and dates removed. You can withdraw that yes later.

Backups are overwritten on their own schedule, so a deleted record can stay in a backup until it is replaced.

5. Sign-in and cookies

The app keeps you signed in with tokens stored on your device. The web pages use one session cookie for the same purpose. No tracking or advertising cookies are set.

6. Changes

If this note changes in a way that affects what you agreed to, the app asks you again before you continue.