Privacy Policy
This policy explains what personal information 100k collects, why, who we share it with and what rights you have. It covers the 100k app at app.100kmethod.com and the website at 100kmethod.com. We follow the Protection of Personal Information Act (POPIA) in South Africa and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Michał Mysiak, 46/10 Warszawska Street, 81-309 Gdynia, Poland is the responsible party (controller) for your information. Contact: hello@100kmethod.com.
2. What we collect
| Information | Why we need it |
|---|---|
| Account: e-mail, password (stored encrypted) | To create and secure your account, and to send you the e-mails described in section 4. |
| Where you came from (a short campaign name in the link, e.g. from an ad) | To know which ads and pages work. Stored with your account when you sign up. |
| Body data: sex, birth year, height, weight, activity level | To estimate your daily energy burn, your minimum intake and your protein target. |
| Food entries, meal photos and meal descriptions | To estimate calories and protein and add them to your day. |
| Activity: daily burn, steps, screenshots from Oura or a watch that you choose to add | To read your burn and steps and close your day. |
| Coach messages and notes | To give you notes based on your day and answer your questions. |
| Subscription status (free trial, active, cancelled) | To give you access. We don’t receive or store your card details. |
| Technical logs (e.g. errors, usage limits) | To keep 100k secure, working and within cost limits. |
Weight, body and food data can count as health information, which is special personal information under POPIA and a special category under GDPR. We only process it with your explicit consent, which you give in the app when you sign up. You can withdraw consent at any time by deleting your account.
3. Automated analysis
Meal photos, meal descriptions, screenshots and your day’s data are analysed automatically by an AI model to estimate food values, read activity screenshots and write coach notes. You can always correct the numbers. These estimates are not decisions about you with legal or similar effects, and no human reviews your photos unless you ask us for support.
4. Who we share it with
We don’t sell your information. We share it only with service providers who help us run 100k, under contracts that require them to protect it:
| Provider | What they do |
|---|---|
| Supabase | Database, file storage and login. Data is stored in the European Union (Ireland). |
| Anthropic | AI analysis of meal photos, meal descriptions and screenshots, and coach notes. Under its commercial terms, Anthropic does not use this data to train its models. |
| Lemon Squeezy | Payments, taxes and receipts, as Merchant of Record. Lemon Squeezy handles your payment details under its own privacy policy. |
| Vercel | Hosting of the website and the web app. |
| Brevo | Sending our e-mails: password links, short reminders when a step of your day is still open, and notice before your free days end. You can turn reminders off in the app (Account → Your details). |
| Meta | Measuring our ads on the website and on the app’s sign-up screen (Meta Pixel). See section 9. |
| Microsoft | Understanding how the website is used (Microsoft Clarity: clicks, scrolling and page recordings, typed text masked). See section 9. |
We may also share information if the law requires it.
5. Where your information goes
Our main storage is in the EU. Some providers (such as Anthropic and Vercel) process data in the United States or other countries. When information leaves South Africa or the EU, we rely on the safeguards the law requires, such as the providers’ data processing agreements and standard contractual clauses.
6. How long we keep it
- Account data: for as long as your account exists. When you delete your account, we delete your data within 30 days, except backups, which are overwritten within a further 30 days.
- Earlier early-access list: if you joined it before it closed, until you ask us to remove you.
- Payment records: kept by Lemon Squeezy and by us for as long as tax law requires.
- Guarantee requests: for 2 years after the decision, in case of disputes.
7. Your rights
You can ask us to: give you a copy of your information; correct it; delete it; restrict or object to how we use it; or give you your data in a portable format. You can withdraw consent at any time. Write to hello@100kmethod.com — we reply within 30 days.
If you’re not happy with our answer, you can complain to the Information Regulator of South Africa (inforegulator.org.za) or, if you live in the EU, to your local data protection authority.
8. Security
Your data is encrypted in transit, each account can only see its own data, meal photos are stored in a private folder per user, and only a small number of authorised people can access the admin tools. No system is perfectly secure; if a breach affects you, we’ll tell you and the regulator as the law requires.
9. Website, app sign-up, cookies and ad measurement
We use the Meta Pixel (provided by Meta Platforms Ireland) to measure our ads in two places: on 100kmethod.com, and on the sign-up and sign-in screen of the app at app.100kmethod.com. It records that you visited the page, that you tapped to start, and that an account was created, together with the ad or page you came from. It uses cookies and sends this to Meta with technical data such as your IP address and browser. We don’t send your e-mail address, body data, food or anything else from inside the app to Meta. The rest of the app does not load the Pixel.
You can decline in the notice at the bottom of the website, or with “Don’t measure me” under the sign-up form in the app (your choice is stored in your browser), or block it in your browser settings.
We also use Vercel Web Analytics, which counts visits without cookies and without identifying you. Fonts are loaded from Google Fonts, which means your browser connects to Google’s servers. If you arrive from an ad, the link may contain a short campaign name, which we store with your account if you sign up.
On 100kmethod.com we also use Microsoft Clarity (provided by Microsoft Ireland) to see how the page is used: where people tap, how far they scroll and where they leave, including anonymous recordings of the visit. Text typed into fields is masked and not recorded. Clarity uses cookies and sends this, with technical data such as your IP address and browser, to Microsoft; see Microsoft’s privacy statement. It is not used inside the app. Declining in the notice at the bottom of the website turns it off too.
10. Children
100k is for adults aged 18 and over. We don’t knowingly collect information from anyone younger.
11. Changes
We’ll update this policy when our practices change and show the new date at the top. For important changes, we’ll tell you in the app or by e-mail.