Privacy

This page covers the Midline website and the Midline web app at app.midlineplan.com. It’s short because we collect very little.

Who we are

Midline is a product of Aayla Secura LLC (dba Sarvixo), 1500 N Grant St Ste N, Denver, CO 80203. Contact: ryan@sarvixo.co.

What we collect

• App launch list. If you join the list we store your email address, the date and time you signed up, the campaign tag in the link you came from (the src value, if there was one), and the fact that you ticked this box: “Email me when the Midline iPhone and Android apps launch. No spam, unsubscribe any time.”
• Anonymous analytics. We use Vercel Web Analytics to count page views, which pages are read and roughly where visitors come from (country, browser, device type). It does not use cookies and does not follow you across sites or build a profile of you.
• Subscriptions. If you subscribe to Midline on the web, Stripe collects your email and card details for us. See the Midline web app below.
• The calculator. What you type into the calculator stays in your browser. It is not sent to us or stored.

We do not run ads, and we do not use advertising or tracking cookies. To limit abuse, the launch-list form checks how often one network address submits it. That check is held briefly in the server’s memory and is not saved with your email.

Why we collect it

The launch-list email is used to tell you when the iPhone and Android apps launch, and for nothing else. Billing data is used to run your subscription: charging you, letting you manage or cancel it, answering your emails and handling refunds. Analytics tells us which pages are useful so we can improve them.

Who handles it

We don’t sell your email or share it for advertising. Three service providers process data for us: Stripe handles payments, Supabase stores the app launch list, the anonymous step counts and a record of each new subscription start (the day, the plan, where you came from and any campaign tags); and Vercel hosts the site and the web app and provides the analytics. They may only use the data to provide those services.

How long we keep it

We keep your launch-list email until you unsubscribe or ask us to delete it. We delete it within 30 days of a request. Billing records are kept as long as tax and accounting law requires. Analytics is kept in aggregate form.

The Midline web app

• Your plan stays in your browser. Your answers, plan, schedule and ticks are saved in your browser on your device. We don’t get a copy. Clearing your browser data removes them. If you save a backup file from the app, it stays with you. We never receive it.
• Payments. Stripe processes payments for us. When you subscribe, Stripe gets your email and card details. We never see your card number. Stripe’s handling of your data is covered by Stripe’s privacy policy.
• What the app sends us. The subscription token, sent to midlineplan.com to check your plan is active and to open the page where you manage it. The token holds your Stripe customer and subscription IDs, your plan and its dates, and a random ID the app made on your device. When you start checkout, the app also sends that random checkout ID and, if you arrived from a link with campaign tags, those tags. We pass that ID to Stripe with your checkout so the payment can be matched to this browser. And it sends the anonymous counts in the next point. Your answers, plan and ticks are never sent.
• A few anonymous counts. The web app sends a handful of counts, like “setup finished” or “opened on day 8”. Each is just a step name and where you first came from, like TikTok. No answers, no ID, nothing about your health.
• What we see in Stripe. Your email, your plan and your payment history. We use them to run your subscription and answer your emails.

Your choices

You can ask us to see, correct or delete your launch-list email, or withdraw your consent, at any time by emailing ryan@sarvixo.co. We will respond within 45 days. Every email we send will also have an unsubscribe link.

Washington My Health My Data Act: consumer health data

Midline is a health and habits product, so we treat your launch-list email, and your email and plan if you subscribe, as consumer health data. Here is how that works, in plain terms:

• What we collect. Only the launch-list data listed above and, if you subscribe, the billing data Stripe holds for us (email, plan and payment status). We don’t collect health information: no weight, measurements, conditions, medications or goals. The web app keeps your answers in your browser, and the calculator’s numbers stay in your browser too.
• Why. To email you when the iPhone and Android apps launch, and to run your subscription if you have one. Nothing else.
• Consent. We collect the launch-list email only after you tick the consent box, and billing data only when you choose to subscribe. You can withdraw consent at any time by emailing us. We’ll delete your launch-list email, and keep billing records only as long as the law requires.
• Who we share it with. Only our processors, Stripe, Supabase and Vercel, described above. We do not sell consumer health data, and we do not share it with anyone else, including advertisers and data brokers.
• Your rights. If you are a Washington resident, you can ask to confirm we collect your data and to access it, withdraw consent, and have it deleted. We will respond within 45 days. If we say no, you can appeal by replying to our answer, and if you are still not satisfied you can contact the Washington Attorney General.
• No geofencing. We do not use location data to target you or to send you notices.

Children

This site is for adults. We do not knowingly collect information from children under 13.

Changes and contact

If this page changes in a way that matters, we will update the date above. Questions or requests: ryan@sarvixo.co.