Your health data
never leaves your phone.

Who we are

CARGA is made by Brandon Alvarez, doing business as CARGA, based in New York City. This policy covers the CARGA iOS app and this site, carga.run. Questions, requests, corrections — write to balvarez325@gmail.com.

Your health data stays on the phone

Workouts, heart rate, and weight come from Apple Health with your permission, and they stay on your phone. The fuel model runs on the device. Your health data is never transmitted to any server — ours or anyone else’s. It is never used for advertising or marketing, never sold, and never shared.

There are no accounts to create, no ads, no tracking SDKs, and no advertising identifiers. Because your health data never reaches us, we cannot read it, share it, sell it, or lose it. That is the architecture, not a promise bolted on.

Food descriptions and AI parsing

When you type or dictate a food description, CARGA can send that text to an AI parsing service to structure it into food items. This happens only when you ask, and only after you have agreed to it in the app — the app names the service and asks before anything is sent. Today that service is Anthropic Claude; where an on-device Apple path is available, CARGA prefers it, and nothing leaves the phone at all.

The text is processed transiently to return your food items. It is not logged and not retained, and nothing else from your device rides along — no health data, no identity. You can withdraw this consent in the app at any time.

The waitlist email

carga.run collects exactly one thing: the email address you give the waitlist. We use it for launch and founding-cohort updates — that is the whole purpose. It is stored durably, and we delete it when you ask (section 10).

Every email we send names CARGA as the sender and includes a working unsubscribe link — use it and the emails stop. When the waitlist has done its job, we delete the list.

No cookies, no trackers

This site sets zero cookies and runs zero analytics, pixels, or trackers. There is no cookie banner because there is nothing to consent to.

No other party collects data about you through this site — there are no third-party scripts here to do it. And this site does not change its behavior in response to a browser Do Not Track or Global Privacy Control signal, because there is no tracking to turn off: every visitor already gets what those signals ask for.

Analytics in the app

The app may collect privacy-first usage analytics through TelemetryDeck — usage signals only: no personal data, no IDFA, nothing that identifies you. If and when that ships, this policy and the app’s privacy label will say so plainly.

Subscriptions and payments

Subscriptions arrive at launch and are purchased through Apple’s App Store. Apple processes the payment; CARGA never sees your payment details. Manage or cancel anytime in your Apple ID subscription settings.

What we share

We do not sell personal data, and we do not share it for advertising. Data reaches service providers in exactly two places, both described above: the AI parsing service, transiently, when you ask it to structure food text; and the infrastructure that durably stores waitlist emails. Each processes data on our instructions and for no other purpose. If the law ever compels a disclosure, we comply as narrowly as the law allows.

How we protect it

carga.run is served over HTTPS, and the waitlist email lives in a managed database with access limited to the founder. We keep administrative, technical, and physical safeguards reasonable for what we hold — one email address per person, nothing more. If a breach ever touches your data, we will tell you as New York’s SHIELD Act and other applicable laws require.

Your rights

Email balvarez325@gmail.com to access, correct, or delete your waitlist data — the only personal data we hold. We honor requests promptly, no forms, no ceremony.

Your health data never reaches us, so there is nothing to request on a server: it lives on your phone under Apple Health permissions you control in iOS Settings, and deleting the app removes what CARGA stores on the device.

Children

CARGA is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has given us an email address, write to balvarez325@gmail.com and we will delete it.

Changes to this policy

When this policy changes, the effective date above changes with it. For material changes we post a plain notice on this page before they take effect. We will not quietly rewrite what you agreed to.

Contact

Brandon Alvarez, doing business as CARGA · New York City · balvarez325@gmail.com