This Privacy Notice explains what information ReFuel Athletics collects when you use our website at refuelgel.com, how we use it, who we share it with, and what choices you have. We've tried to keep it plain.
We are based in the United States. Our service is currently in pre-launch. Most personal data we hold today is from waitlist signups and free-account users.
- Email address (required)
- Name (optional)
- An automatically-generated unique discount code tied to your email
- The date you joined, and whether your code has been redeemed
- Full name
- Email address
- Password — hashed by our auth provider; we never see or store the raw password
- Profile information you choose to add (avatar image)
- Account history: gel formulas you save, community posts and comments you make, products you've viewed
The text of your questions is processed by Anthropic (Claude) to generate responses. We do not store chat history beyond the active session by default.
- Standard server logs: IP address, browser type, pages visited, referrer URL, and timestamps. Used for security and basic diagnostics.
- Cookies and local storage: small bits of data your browser remembers, used to keep you signed in, remember your cart, and store interface preferences. We do not use third-party advertising cookies.
We use the data above to:
- Operate the website and the features you use (signing you in, showing your saved formulas, sending your discount code)
- Send you transactional emails — your waitlist welcome email, your discount code, future order confirmations
- Notify you about our launch and important account-related updates
- Detect and prevent abuse, fraud, and security incidents
- Improve the site based on what's working and what isn't
We do not sell your personal information. We do not share it with advertisers. We do not use it to train AI models.
Your data is stored with the following service providers:
- Supabase — our database and authentication provider. Stores your account information, waitlist signup, saved formulas, community content, and order history when checkout opens. Supabase data is hosted on Amazon Web Services.
- Vercel — our hosting provider. Serves the website and may collect basic request logs.
- Gmail (Google Workspace) — used to send transactional emails like waitlist confirmations.
- Stripe — payment processor. When checkout opens, Stripe will handle payment information directly; we do not store credit card numbers ourselves.
- Anthropic — provider of the Claude AI used by our support chat. Messages sent through the chat are processed by Anthropic per their terms.
Each provider has its own privacy policy and security practices, which apply in addition to ours.
We protect your information using:
- HTTPS encryption for all traffic between your browser and our servers
- Password hashing via Supabase Auth — your raw password never touches our servers
- Row-Level Security on our database, restricting who can read or modify which rows
- Rate limiting on signup and login endpoints to prevent automated abuse
- Service-role keys stored as encrypted server-side environment variables
No system is 100% secure. While we take security seriously, we cannot guarantee absolute protection. If we ever experience a breach affecting your data, we'll notify you and the relevant authorities as required by law.
- Waitlist data: until you ask us to remove it, or until 90 days after the public launch ends (whichever comes first).
- Account data: as long as your account is active, plus any period required for legal or tax reasons.
- Server logs: typically 30–90 days.
- Banned accounts: deleted automatically based on the ban's expiration date.
You can:
- Update your account info from your account page
- Delete your account by emailing us at the address below
- Remove yourself from the waitlist by emailing us
- Unsubscribe from marketing emails using the unsubscribe link in any email we send (transactional emails like order confirmations are not optional)
- Disable cookies through your browser settings — note that doing so may break features like staying signed in or keeping items in your cart
Depending on where you live (for example, California, Virginia, Colorado, the EU/UK), you may have additional rights — including the right to access, correct, delete, or port your data, and to opt out of certain processing. Email us and we'll respond. We do not sell personal data and do not engage in targeted advertising.
ReFuel is intended for users 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
ReFuel is operated from the United States. If you use the Service from outside the U.S., you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
We may update this Privacy Notice from time to time. When we do, we'll update the "Last updated" date and, if the changes are material, give you reasonable notice (such as by email or a banner on the site).
For privacy questions, data requests, or to remove yourself from our records:
Email: haydenh.refuel@gmail.com
Subject line: Privacy Request
This Privacy Notice is a template appropriate for our pre-launch waitlist phase. It accurately reflects current data practices but has not been reviewed by counsel. It will be replaced with a fully-reviewed Privacy Policy before launch.