Privacy Policy

1. What This Covers

This policy explains what information PEAK collects when you use the app, how we use and store it, who we share it with, and the choices you have — including deleting it entirely.

2. Information We Collect

Account info: your email address, used for magic-link sign-in and account identification.

Health and fitness data: information you provide during onboarding and afterward — race goals, current training volume, strength training details and goals, injury notes, height, weight, body fat percentage, dietary approach, wake time and schedule constraints. This is used directly to calculate your training plan and nutrition targets (via Katch-McArdle based formulas) and is sensitive information we treat with particular care — see Section 5.

Training data: your generated training plans, individual workout sessions, completion status, RPE (perceived exertion) ratings, and notes you log against sessions.

AI coaching conversations: your messages to the AI coach and its responses, stored so the coach has context across your conversation and can reference your plan and recent training history.

Payment information: if you subscribe, payment is processed by Stripe. We do not store your full card number — Stripe handles that directly and shares with us only what’s needed to manage your subscription (e.g. subscription status).

Usage and device data: basic product analytics (which screens you use, feature engagement) via PostHog, and error/crash reports via Sentry, to help us fix bugs and improve the app.

3. How We Use Your Data

We use your data to: generate and adapt your personalized training plan and nutrition targets; power the AI coaching chat with relevant context; process your subscription and payments; send you transactional emails (magic-link sign-in, account notices); diagnose bugs and improve the app; and enforce reasonable usage limits (e.g. monthly chat message limits on the free tier). We do not use your health or fitness data for advertising, and we do not sell your data to third parties.

4. Third-Party Service Providers

We rely on the following third parties to operate PEAK. Each processes a subset of your data solely to provide their service to us, under their own privacy policies:

• Supabase — database, authentication, and file storage
• Anthropic (Claude) — generates your training plans and powers AI coaching chat; your profile and conversation data is sent to Anthropic’s API to generate responses
• Stripe — subscription billing and payment processing
• Resend — delivers transactional email (magic-link sign-in)
• PostHog — product usage analytics
• Sentry — error monitoring and crash reporting
• Vercel — application hosting

5. How We Store and Protect Your Data

Your data is stored in Supabase (PostgreSQL) with row-level security policies that restrict each user’s data to that user, accessible only via authenticated requests or through our backend using a privileged service key. We use HTTPS for all data in transit. No system is perfectly secure, and we can’t guarantee absolute security, but we take reasonable, industry-standard measures to protect your information and encourage you to use a unique, secure email account for sign-in.

6. Data Retention

We retain your data for as long as your account is active, so the app continues to work correctly. If you delete your account (Settings → Danger Zone), we permanently delete your profile, training plans, session logs, chat history, and push notification subscriptions from our active database. Some records (e.g. billing history) may be retained longer where required for legal, tax, or fraud-prevention purposes, or as retained independently by our payment processor.

7. Your Rights and Choices

You can review and correct most of your profile information from within the app. You can delete your account and all associated data permanently, at any time, from Settings → Danger Zone — no need to contact support.

If you’d like a copy of your data, or have questions about what we hold, email us at privacy@peak.training and we’ll respond within a reasonable time.

8. Children’s Privacy

PEAK is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has created an account, contact us and we’ll delete it.

9. Cookies and Tracking

We use minimal cookies/local storage required for authentication and app functionality (e.g. keeping you signed in, caching your plan for offline-ish access), plus PostHog analytics to understand product usage. We don’t use third-party advertising trackers.

10. Changes to This Policy

We may update this policy as the product evolves. Material changes will be reflected by updating the “Last updated” date above; significant changes affecting how we handle health data will be communicated more directly (e.g. via email).

11. Contact

For privacy inquiries or data requests, contact us at privacy@peak.training.