Your data.
Your call.
A little clarity about what happens when you explore Underline.
Last updated 16 September 2026
The signup form
Email collection is currently turned off. The form checks the address in your browser, clears it and shows a confirmation. Your address is not sent to us or saved by this website, and no subscription or email is created.
Creator invitations and accounts
If an Underline administrator invites you, we store the invited name or email address, the administrator’s Telegram ID and the invitation’s issue, expiry and use dates in Supabase. The private link is returned to that administrator in Telegram for them to share with you. Telegram also processes messages sent to the bot under its own privacy policy.
Accepting a Creator invitation creates a Supabase Auth account using your name, personal email address and chosen password. For a named invitation, you provide the email during signup; an invitation sent for a specific email keeps that address. We store your Creator membership with your account. Supabase handles password hashing; passwords are not stored in our membership or invitation tables. The invitation expires 30 days after it is issued and cannot be used again after account creation.
When you sign in to the mobile beta, essential session cookies keep you signed in. They are inaccessible to page scripts and are cleared when you sign out. We store your onboarding choices and progress with your account so your preferences are available when you return. We do not put passwords or health data in the installation QR code.
Account information is kept while your account is active. Invitation records help us manage access. To request help or removal, contact the Underline administrator who invited you. This account flow does not subscribe you to marketing emails.
Member activity notifications
We notify authorised Underline administrators through our Telegram bot when you accept an invitation, sign in, first open the installed app, start or complete setup, open Apple authentication, or connect or disconnect Apple Health. These notifications include your full name, action, IP address and browser/device type. We store the activity and delivery records in Supabase to manage access and retry failed notifications. For connection updates received from our CRM, we use your most recently recorded app details, rather than the CRM server’s details. Telegram processes these notifications under its own privacy policy. Contact the administrator who invited you for help or a removal request.
Optional device notifications
If you enable notifications, we store your device's push subscription, encryption keys and delivery records in Supabase, linked to your account. An essential device cookie lets us manage that subscription. Apple or Google's push service delivers the messages. Alerts cover connection updates, setup and beta announcements from Underline administrators, with welcome and test messages. Automated alerts do not include your name or health measurements. We retain broadcast messages, the sending administrator and aggregate delivery counts for our admin history.
You can decline notifications without affecting setup, turn them off from your profile or change permission in your device settings. Signing out stops new alerts on that device; a message already sent may still arrive. Subscription and delivery records are removed when your account is deleted. Contact the administrator who invited you for help or removal.
Your health data
The beta links you to our external connection and authentication flow using your account ID. Our CRM can confirm whether Apple Health is connected or disconnected. We store that connection status with your account; this site does not currently import health measurements.
Browsing this website
Our hosting provider may process technical information, such as IP addresses and request logs, to deliver and protect the website. We haven't added advertising trackers or marketing analytics. The signup form does not use cookies or browser storage to retain your email.
When signup opens
We'll update this notice before we begin collecting email addresses, with details of how they're used and how to leave the list.