Privacy notice

What this is

I'm Michael, and I run this dashboard on a simple and humble Azure server, for the people I invite. This page says what it keeps about you, who can read it, and for how long.

Who can read your data

Other people on this dashboard cannot see your data. Sign-in is Microsoft Entra; every request is checked against who you are before it reaches anything of yours.

I run the server, so I could open the databases. I won't look at or use your data unless I ask you first and you agree — including when fixing a problem. Nightly backups and restore checks run without anyone reading the contents.

Your data sits on one Azure VM in West US 2. The disk is encrypted with keys Microsoft manages (protects a disk that leaves the data centre, not against Azure or me).

Signing in, and on the way here

Cloudflare Access and Microsoft Entra handle sign-in, so they see your address and when you sign in. This dashboard stores no password.

Every request passes through Cloudflare, which decrypts it at its edge to check who you are before sending it on.

What each part keeps

• Dietician: your food log, nutrition targets, a profile for setting goals, and photos of nutrition labels. This is health data, with its own policy and its own consent.
• Investments: your accounts, transactions and the statements you upload, account numbers included. Statements are kept for up to 12 months; a batch held for review keeps its files until it is released.
• Chef: your receipts, household inventory, recipes and shopping list. Receipt photos are deleted 30 days after you review the receipt, or 90 days after you upload one you never review; the lines read from them stay.
• Media: what you read and watch, and what you write about it. Your ratings decide what it suggests next from your list.
• Experience: your work history, skills and the evidence for them. Need a resume? This will make one for you.
• Market: prices you submit are pooled with the store, date and amount, with nothing that links them to you, and cannot be withdrawn.

The activity log

Every request is recorded with your address. A record is kept for 90 days, and yours are deleted when you leave.

Backups

Everything is backed up nightly, encrypted to a key only I hold. Seven nights stay on the server; an off-site copy in the same region is kept for up to 180 days.

When a release changes how a module stores data, it keeps a copy of that data as it was for at least 14 days, until the next such change.

AI clients

An AI client you connect acts as you: it sees and changes what you can, and what it does is recorded under your name. No AI runs inside this dashboard. What your client sends to its own provider is between you and that provider.

Cookies

The only cookie is Cloudflare Access's sign-in session. There is no tracking and no analytics.

Leaving

Leave, in Settings, deletes your data from every part of this dashboard at once. Backups taken before then are kept until they expire, as above.

Questions

To ask what is kept about you, or to have it corrected or deleted, write to me at [email protected].

If what this page says changes, you will be asked to agree again.