Privacy Policy

What we collect

Account information (your email, and identity details if you sign in with Google or Apple). Profile details you provide: height, weight, age, sex, goals, injuries, allergies, supplements, and whether you're on a GLP-1 medication. Data you log: workouts, food, body weight and measurements, and daily check-ins (mood, energy, hunger, sleep, stress). Photos you choose to add, both progress photos and meal photos. If you use form check, the photo or short clip you record is sampled into a few still frames and those frames are sent for analysis; neither the clip nor the frames are stored afterwards. If you use voice logging, your device's own speech recognition turns what you say into text. Depending on your browser and operating system that recognition may run on the device or at your platform vendor, which on an iPhone means Apple. Either way the audio never reaches our servers and we never store it.

If you connect Apple Health, we read (and only read) your sleep, heart rate variability, resting heart rate, workouts, and active energy. We never write anything back to Apple Health, and we only read the categories you allow. You can disconnect at any time in iOS Settings → Privacy & Security → Health.

If you turn on notifications, we store the push subscription your browser or device issues so we can deliver them. Turning notifications off removes it.

Apple Health data specifically

Health data is held to a stricter rule than everything else here. We never use it for advertising, never sell or share it, and never send it to analytics. It stays on our own infrastructure, where it adjusts your readiness score and your daily training volume.

It is not routinely sent to Anthropic. The one exception is an action you take deliberately: if you ask the Coach to explain your daily card, the summary shown on that card is sent for that request. That summary can include last night's sleep hours. Nothing is sent if you don't ask.

How we use it

To calculate your calorie and macro targets and generate your training and nutrition plan. Your numbers are computed deterministically from published formulas, not invented by AI. See the Pledge. We use Anthropic's Claude API to write plan explanations, coach conversations, food-photo analysis, and form check, which requires sending relevant profile and logged data to Anthropic for that request. For the photo features that means the image itself: a picture of your meal, or, for form check, a few still frames of you performing the movement.

Who we share it with

Anthropic (Claude API), for the AI features above. Supabase, our database, authentication, and file storage provider. Vercel, who host the app and serve every page you load. Resend, who deliver our account emails (confirmation and password reset) and so receive your email address. For payments: Stripe on the web, and on iOS, Apple together with RevenueCat, our subscription manager. RevenueCat receives your TrakPeak account identifier so your subscription can be matched to your account. In no case do we receive or store your card details. None of these receive your data for any purpose beyond operating TrakPeak on your behalf.

Delivering a notification sends it through a push service run by whoever makes your phone or browser: Apple on iPhone and in Safari, Google for Chrome and other Chromium browsers, Mozilla for Firefox, and Microsoft for Edge. On iPhone the text is readable by Apple, so a nudge can mention what it is nudging you about (that you have not logged today, or how far you are from a target), and that much reaches them. In a browser the text is encrypted with keys only your browser holds, so the service carrying it can see that something was delivered and when, but not what it said. Either way we never put your weight, measurements, or anything you logged into a notification beyond that.

Looking up a food reaches two public food databases, and sends them nothing that identifies you. A search sends the words you typed to USDA FoodData Central; scanning a barcode sends that barcode to Open Food Facts. Neither receives your account, and what you go on to log stays with us.

If you connect a third-party AI assistant (e.g. Claude, ChatGPT) using a token you generate yourself in Profile, that assistant can read your data on your behalf until you revoke the token.

If you join a partner or group challenge, only derived progress percentages are shared with the people you connect with, never your raw food, weight, or measurement entries.

What we don't do

No ads. We don't sell your data, and we don't send health data to analytics. The limited, first-party product analytics we keep are coarse milestones (e.g. that a plan was generated), never the content of what you logged.

Your controls

Export everything you've logged at any time, free on every plan, from Menu → Settings → Export my data. Delete your account at any time from Menu → Settings → Delete account. This permanently removes your profile, logs, and photos.

Data retention

We keep your data while your account is active. Deleting your account removes it, as described above.

Children

TrakPeak is not intended for children under 13, and signing up requires an age of 13 or over. If you believe a child under 13 has given us data, write to us at the address below and we will delete it. Some countries set a higher age for consent to data processing; where that applies, the local minimum governs.

Changes to this policy

When this policy changes we revise the date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app before it takes effect. You will not have to re-read this page to find out.

Contact

TrakPeak is operated by Core Techitect, LLC. For any question about this policy, about the data we hold on you, or to ask us to delete it, write to support@coretechitect.com.