← Dashboard

Privacy Policy & Terms

Last updated 19 October 2026

100 Days of Sweat (100daysofsweat.com) is a personal, non-commercial project. It tracks one person's 100-day fitness challenge (17 October 2026 – 24 January 2027): a daily workout and a daily Instagram Reel / TikTok. Only the site owner can sign in, log entries or connect accounts. Everyone else can only view the public dashboard.

Data the site collects

The site only collects the owner's own data:

• Entries the owner logs: workout type and duration, intensity, mood, energy, weight, resting heart rate, notes, Reel links, benchmark test results and photos.
• Instagram and TikTok: statistics about the owner's own posts and account (views, likes, comments, shares, saves, reach, follower counts, captions and links). These are read through the official APIs with the owner's permission.
• Apple Health: steps, workouts, active calories, resting heart rate and weight. The owner sends these from their iPhone through an Apple Shortcut.
• Google Health API (Fitbit / Pixel Watch): if the owner connects their Google account, the site reads:
  • daily step count
  • daily active calories burned
  • exercise sessions (type, date and duration)
  • daily resting heart rate
  It requests read-only access, and only to two scopes: googlehealth.activity_and_fitness.readonly and googlehealth.health_metrics_and_measurements.readonly. It never writes to, changes or deletes anything in the Google account. It doesn't read location, sleep, nutrition, ECG or reproductive-health data, and it doesn't read profile information beyond what is needed to sign in.

Visitors: the site has no visitor accounts, analytics, advertising or tracking cookies. The only cookie is the owner's login cookie. To block password guessing, the IP address of a failed login attempt is stored for at most 24 hours. Cloudflare, which hosts the site, processes standard technical request data (such as IP addresses) to deliver and protect it.

How the data is used

The data is used only to show the challenge's progress on this site:

• Shown publicly on the dashboard: the day counter and streak, workout type and minutes, daily steps, Reel status and post statistics, benchmark results and photos the owner marks as public.
• Visible only to the owner when signed in: mood, energy, weight, resting heart rate, active calories, notes and private photos.

Data from Google Health only fills in the daily step count, workout minutes, calories and resting heart rate described above. Anything the owner logs by hand takes priority.

Google API Services: Limited Use

The use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data from the Google Health API:

• is used only to provide the features described on this page;
• is not sold, and not used for advertising, credit-worthiness checks or lending;
• is not used to train artificial intelligence or machine learning models;
• is not transferred to anyone, except as needed to run the site (hosting on Cloudflare), to comply with the law, or as part of a merger or acquisition with the owner's consent;
• is not read by any human other than the owner.

Sharing

No personal data is sold, rented or shared with third parties. The data is stored with Cloudflare (Workers, D1 database and R2 storage), which acts only as the hosting provider.

Storage and security

All traffic uses HTTPS. Access tokens for Google, Instagram and TikTok are kept server-side in the database. They are never sent to the browser or shown on any page. Editing requires the owner's password.

Retention and deletion

• Data is kept for as long as the owner keeps the project running. The owner can delete any entry, photo or all stored data at any time.
• Choosing Disconnect for Google Health on the log page revokes the site's Google access and deletes the stored tokens. Access can also be removed at any time at myaccount.google.com/permissions. Either way, syncing stops immediately.
• Instagram and TikTok access can be removed the same way in each platform's app settings.

Terms

The site is provided as is, for personal use. No one other than the owner can sign in or connect accounts.

Changes

If this policy changes, the new version will be posted on this page with a new "last updated" date.