Privacy Policy

01 · Overview

This Privacy Policy explains how 21 Media LLC (“21 Media,” “we,” “us”) collects, uses, and protects your information when you use the STATE app and the statechange.app website. We built STATE to keep your data private by default.

02 · Information we collect

Account information. When you sign up with Sign in with Apple, Google, or email, we receive an identifier and, if you provide it, your name and email address.

Profile and goals. Information you enter to personalize the app, such as age, biological sex, height, weight, activity level, dietary preferences, allergies, and your health and fitness goals.

Health and activity you log. Meals (including food photos you capture), calories and macros, workouts, steps, water, sleep, body weight, and measurements.

Apple Health data. With your permission, STATE reads activity data such as steps, active energy, workouts, and sleep from Apple Health to display and track your progress. You can turn this access off in the Health app at any time.

Purchases. Your subscription status. Payments are processed by Apple; we do not receive your full payment card details.

Device and technical data. Basic device information, app version, and diagnostic or crash information (via Apple's MetricKit) used to keep the app stable. If you enable notifications, we store a push token to deliver them.

Social features. If you connect with friends or join a shared goal, we process the connections and the progress you choose to share.

03 · How we use your information

We use your information to provide and personalize your daily plan, coaching, and tracking; to recognize food from photos or descriptions and estimate nutrition; to sync your data securely across your devices; to operate subscriptions and provide support; to send notifications you have enabled; to keep the Service secure and diagnose problems; and to comply with legal obligations. We do not use your health data for advertising.

04 · Sharing and disclosure

We do not sell your personal data. We share information only with service providers who help us run STATE, under contractual safeguards, including: Apple (sign-in, App Store payments, push notifications, and iCloud sync); Cloudflare, which hosts our backend and provides the AI models that process your food descriptions, photos, and coaching requests; and Google, if you choose to sign in with Google.

We may also disclose information if required by law or to protect the rights and safety of our users and the public. If ownership of the business changes, data may be transferred as part of that transaction, subject to this policy.

05 · Data retention

We keep your information for as long as your account is active or as needed to provide the Service. You can delete individual entries in the app, and you can delete your entire account and associated data at any time from within the app or at statechange.app/delete-account. After deletion we remove or anonymize your data, except where we must retain limited records to meet legal, security, or accounting obligations.

06 · Your choices and rights

You can view and edit most of your information directly in the app, control Apple Health access in the Health app, manage notifications in your device settings, and manage your subscription in your Apple Account. Depending on where you live (for example, under the GDPR in the EEA and UK, or the CCPA in California), you may have rights to access, correct, export, delete, or restrict the processing of your personal data, and to withdraw consent.

To exercise these rights, contact us at admin@21media.to. You may also complain to your local data protection authority.

07 · Security

We protect your information with encryption in transit, access controls, and reputable infrastructure providers. Health and personal data synced to our backend is stored on secure Cloudflare infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you of significant incidents as required by law.

08 · Children’s privacy

STATE is not directed to children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect their personal data. If you believe a child has provided us personal information, contact us at admin@21media.to and we will delete it.

09 · International transfers

21 Media LLC is based in the United States, and our providers, including Apple and Cloudflare, may process your information in the United States and other countries. Where we transfer personal data from the EEA, UK, or other regions, we rely on appropriate safeguards such as standard contractual clauses.

10 · Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version here and revise the date above, and where appropriate notify you in the app.

11 · Contact us

Questions or requests about your privacy? Contact 21 Media LLC at admin@21media.to.