Your HCG coach mascot

myHCG™

Security Policy

How myHCG protects your account and your progress data.

Plain-English summary
Your progress is private by default, your password is never visible to us, and nothing is shared or posted unless you choose to share it.
Your data is yours

Your weight, measurements, food and water logs, injections, journal entries, photos and mascot are private to your account. Nobody else signing in can read them.

The only place your numbers appear next to other people is the Compete leaderboard, and it shows just your display name with pounds lost, inches lost and streak — never your journal, photos or food logs.

How your account is protected

Sign-in is handled by a dedicated authentication service. We never see or store your password, and every request the app makes is checked against your signed-in session.

Access rules live in the database itself, so a request for someone else's records is refused even if it is made outside the app.

All traffic between your device and the app is encrypted, and your data is encrypted where it is stored.

Who can see what

You: everything in your own account, any time, on any device you sign in from.

Support: only what you choose to send us through the Help page, such as your message and any screenshot you attach.

Admin: account-level activity such as sign-in counts, time in the app and which features are used, used to keep the app healthy and safe. Admins do not read your journal entries or private photos.

The coach and AI answers

When you use S.O.S. craving support, the coach search or the Help question box, the words you type are sent to an AI model to write an answer. Those answers are AI-generated and are not medical advice.

Never enter medical record numbers, payment details or other sensitive personal information in a chat box.

What we never do

We do not sell your data or share it with advertisers.

We do not post anything on your behalf. Sharing a win only happens when you tap a share button.

We do not send marketing email you did not ask for. Emails from us are about your account, such as confirming your address or resetting your password.

Your choices

You can edit or delete any entry you have logged from the page where you added it.

You can ask us to delete your whole account and everything in it — send the request from the Help page and we will confirm when it is done.

If you ever spot something that looks wrong, or think someone else reached your account, contact us through the Help page right away.

Back to sign in