Your recovery data, yours.

• Account: email address and (optionally) Google profile name and avatar for sign-in.
• Recovery history you enter: surgery details, PT status, symptoms, goals, ROM measurements, progress photos.
• Daily inputs: check-in answers, mood, completed routines, exercise feedback.
• If you enable Athlete Mode: sport, position, competition level, return-to-play phase data.

Data is stored in the app's managed backend (Lovable Cloud, built on Postgres) with row-level security policies that restrict every row to the account that created it. Photos live in a private storage bucket — only signed URLs scoped to your session can read them.

Provider report links use a random 32-byte token. Anyone with the link can view the report until it expires; we never expose the underlying database to anonymous readers.

• We don't sell your data.
• We don't share data with insurers or employers.
• We don't run third-party advertising trackers in the app.
• We don't make medical diagnoses or claim HIPAA compliance — this is an educational tool, not a medical device.

You can export everything we have on you as JSON from Settings → Export my data. To delete your account and all associated rows, email us from the same address you signed up with — we'll process within 30 days.

AthletesCare uses your recovery history to organize your routine and track what you have already tried. It does not replace your surgeon, doctor, or physical therapist. If a symptom worsens, stop the routine and contact a qualified provider.