1. Who we are
90-Ten (“we”, “us”) provides a membership programme and online hub for food habits, movement tracking,
coaching, and related tools. Contact:
info@90-ten.co.uk.
Related sites may include our programme brochure (for example 90tenprogram.co.uk) and this app at 90-ten.co.uk.
This policy focuses on the app and member services we operate.
2. What this policy covers
How we collect, use, store, and share personal data when you:
- Create an account or start a trial
- Use the member dashboard, daily log, check-ins, challenges, or food tools
- Message or video-call with an advisor
- Are managed by an advisor or the 90-Ten team
- Join a waiting list or mailing list (if that form is enabled)
3. Data we collect
Account and identity
- Email address and password (password is stored as a secure hash via our auth database; we ask for a strong password and email confirmation on sign-up)
- Full name and optional nickname
- Optional profile photo
- Membership tier, trial status, and related membership dates
- Referral codes and how you signed up (e.g. free trial, invite, brochure link)
Profile and coaching context
- Age
- Sex at birth (used to personalise coaching; we explain this at sign-up / onboarding)
- Height
- Job / typical daily activity (to understand movement context)
- Weight when you log it (usually on the daily log; required for first weekly check-in)
Health, habits, and progress (member-entered)
- Daily metrics such as steps, mood, water, calories, sleep, weight
- Weekly check-in answers (reflections, appetite, cravings, goals, help needed, etc.)
- Body measurements and progress photos when you or your advisor request them
- Food log entries and nutrition estimates (if food tracker is enabled for you)
- Challenge progress, postcards / scrapbook entries, and related stories
- Calorie targets and goals set with or by your advisor / AI tools
Support and communication
- Messages between you and your advisor (where your tier includes messaging)
- Video call requests and related notes
- Emails we send you (check-in summaries, login codes, invites, reminders, programme notices)
Technical data
- Session / authentication tokens needed to keep you logged in
- Server logs (e.g. errors, security events such as failed admin login attempts by IP)
- Basic request metadata needed to run the service securely
We do not currently run third-party advertising trackers or social media pixels on the app by default.
4. Special category (health) data
Much of what you enter (weight, food, sleep, body composition, progress photos, goals) can be
health-related data. We process this because it is necessary to deliver the programme
you request (coaching, tracking, personalisation). Where required, we also rely on your clear actions
of entering that data and using those features as consent to process it for the programme.
5. How we use your data
- To create and manage your account, trial, and membership
- To provide dashboards, daily logging, check-ins, challenges, and related features
- To personalise coaching (including AI-assisted feedback where enabled for your tier)
- To connect you with an assigned advisor or the 90-Ten team
- To send service emails (security codes, check-in copies, reminders, programme messages)
- To improve the service, fix bugs, and protect security (including rate-limiting abuse)
- To process account closure, trial end choices, and scheduled deletion where you decline membership
6. AI features
Some features (for example weekly check-in feedback or food nutrition estimates) may send relevant
content you provide to an AI provider so a response can be generated. We use that only to deliver
the feature. You should not put information in free-text fields that you would not want processed
for coaching purposes.
7. Who can see your data
- You — via your account
- Your assigned advisor — progress, check-ins, and tools needed to support you
- 90-Ten superuser / programme operators — to run the platform, support, and quality
- Developer (Webwight) — the app is built and maintained under Webwight. Technical
access may be used only as needed for security updates, bug fixes, hosting maintenance, and product
improvements. Access is limited to those purposes and is not used for marketing or unrelated use of your data.
- Service providers who host or process data on our behalf, for example:
- Hosting of the app and database (our servers / infrastructure providers)
- Email delivery (SMTP provider) for transactional mail
- AI provider(s) for coaching / food estimate features when you use those tools
- Optional email list tools (e.g. newsletter / interest list) if you sign up to them
We do not sell your personal data. Advisors should only access members assigned to them (or as otherwise
configured for programme management).
8. Lawful bases (UK GDPR — summary)
- Contract — providing the membership / trial service you signed up for
- Legitimate interests — security, service improvement, basic operations
- Consent — optional marketing lists (if offered), and certain optional features you choose to use
- Special category — health-related data as needed for the programme, with appropriate safeguards
9. Cookies and local storage
We use essential cookies / browser storage so you can stay logged in and so the site can work
(for example session tokens). We may use a short-lived access cookie if a private-access link is used.
We do not use advertising cookies on the app by default.
10. How long we keep data
- Active members — while your account is active and as needed afterwards for legal / accounting records
- Trial members — for the trial period; if you decline, we may keep the account for a short grace period (currently up to 14 days) so you can change your mind, then delete the account
- Emails and operational logs — as long as needed for delivery, security, and troubleshooting
Exact retention may be refined as the programme grows; we aim not to keep data longer than needed.
11. Your rights
Under UK data protection law you may have rights to:
- Access your personal data
- Correct inaccurate data
- Request deletion (subject to legal limits)
- Object to or restrict certain processing
- Data portability where applicable
- Withdraw consent where processing is based on consent
Contact us at
info@90-ten.co.uk.
You can also complain to the Information Commissioner’s Office (ICO) in the UK.
12. Security
We use reasonable technical and organisational measures (HTTPS, access controls, hashed passwords,
limited staff/advisor access, server hardening). No online service is perfectly secure; please use a
strong unique password and keep your login details private.
13. Children
The service is aimed at adults. Account onboarding expects age 16+. If you believe a child has provided
data inappropriately, contact us and we will take appropriate action.
14. Changes
We may update this policy as the product evolves. We will change the “last updated” date above and,
where appropriate, notify members in-app or by email for significant changes.