Porthos is a personal fitness diary built and operated by Yasuho. This page describes exactly what the application stores, why, and what you can do about it. It is written to be accurate rather than exhaustive — if something is not listed here, Porthos does not collect it.
What is stored
Everything below is data you enter yourself, or that follows directly from using the app:
Account: your email address and a password hash, both held by Supabase Auth. Porthos never sees your password in plain text.
Profile: display name, username, avatar choice, date of birth, height, weekly training goal, preferred weight unit and preferred language.
Training: workouts you create, sessions you log, the sets, reps and weights in them.
Body weight: the entries you log, always stored in kilograms and converted for display.
Diet: meals, foods, recipes and daily targets, if you use that part of the app.
Coaching: if you accept a coach's invite, the link between the two accounts, and the workouts they assign you.
Feedback: anything you send through the in-app feedback form, together with the page you were on and the app language at the time.
What is NOT stored
Porthos has no analytics, no advertising, no tracking pixels and no third-party scripts. There is no cookie banner because there is nothing to consent to beyond what makes the app work.
No behavioural analytics of any kind.
No IP addresses or device fingerprints in the application database.
No location data. The browser is never asked for it.
No health data beyond what you type in — nothing is read from Apple Health, Google Fit or any wearable.
Cookies
Two, both strictly necessary:
A Supabase session cookie, which is what keeps you logged in.
A language cookie, which remembers whether you chose English or Portuguese.
Who else sees it
Porthos uses two service providers, and nobody else:
Supabase — hosts the database and handles authentication. Your data lives there.
Resend — sends password-recovery email. It receives your address only when you ask to reset your password.
What other users can see
Your workouts, weights and diet are private by default. Three things can make something visible to another person, and all three are actions you take deliberately:
Creating a share link for a workout. Anyone holding that link can view that one workout until you revoke it.
Accepting a coaching invite. Your coach can then see your training and assign workouts to you.
Being a coach. Your students can see your name, username and avatar.
Your rights
Under the LGPD (Brazil) and the GDPR (EU) you can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Deleting your account deletes everything listed above, including your feedback — the database is set up to cascade, so nothing is left behind.