How Athlyst handles training, nutrition, health, location, account, and social data.
Effective September 7, 2026
Athlyst can store workouts, set logs, planned sessions, nutrition entries, saved meals, endurance activities, GPS route points, readiness check-ins, body metrics, progress photos, feedback, coach relationships, and crew posts.
Most data is stored locally on your device. Account features can send selected records to Athlyst's Cloudflare-hosted services when you sign in and use backup, coach, crew, media, or AI features.
Denying a permission does not prevent use of unrelated app features.
Data is used to provide logging, analysis, account backup, subscription access, monthly AI limits, coach sharing, crew features, food lookup, meal estimation, support, abuse prevention, and service reliability. Athlyst does not sell personal data or use health, fitness, meal, workout-history, or HealthKit data for advertising.
Progress photos and written updates are shared with an active coach only after you enable progress sharing and deliberately send selected content. Photo location metadata is removed. Turning off that permission or disconnecting stops access and queues the shared copies for deletion; original device photos are kept. Previously downloaded or captured copies on another person’s device cannot be recalled.
Athlyst uses Apple for App Store purchases and subscription status; Cloudflare for application hosting, database storage, private media, security, and Workers AI; Resend for sign-in email delivery; and Open Food Facts, USDA FoodData Central, and FatSecret for food searches. FatSecret-linked nutrition is refreshed from FatSecret and only its food and serving identifiers are retained long term. Meal-photo estimation may use Cloudflare Workers AI or another configured AI provider. Information is sent only when needed for the feature you invoke.
Apple processes subscription payments. Athlyst does not receive full payment-card details. Athlyst stores a random App Account Token and verified product, transaction, purchase, expiration, grace-period, renewal, upgrade, and revocation metadata to provide access and restore purchases.
Athlyst stores monthly AI allowance, successful-use, refund, provider, model, and idempotency records. Meal-photo bytes are processed for the estimate you request and are not stored in Athlyst's D1 usage ledger.
The Free app can show clearly labeled Athlyst promotions, sponsored campaigns, and approved affiliate offers. Pro and Elite remove these ads. Selection uses the current ad placement, broad country inferred from the network request, app language, campaign availability, and daily frequency limits. It does not use your health or fitness information, meal photos, body measurements, workout history, precise location, contacts, or advertising identifier.
A random identifier rotates each UTC day for frequency control. The campaign service stores its daily hash, ad placement, campaign, short-lived delivery receipt, and whether an ad was displayed, clicked, dismissed, reported, or used to open membership. Raw delivery records are eligible for deletion after seven days; cleanup runs in bounded hourly batches. Aggregated campaign counts remain for reporting. These counts are not proof of a purchase or subscription. We do not send your account or health profile to advertisers.
Live ad artwork is hosted by Athlyst. Opening a brand link takes you to that site's own privacy practices. You can inspect why an ad appears, dismiss it, or report it from the ad's menu.
Coach and crew content is shared only with the audience you select. Partner-coach applications store the profile and qualifications you submit for owner review. Your approved profile can be public; account email and private review records are not included in the public directory. Consultation messages are shared with the coach you contact. Appointments and daily plans are accessible to their participants. An inquiry or booking does not grant access to health records. Clients choose training, nutrition, body and readiness sharing separately and may revoke it. Clients separately approve whether a coach may record or correct workouts, nutrition, measurements or readiness on their behalf. Shared edits retain an author, time and revision history. Imported Health measurements keep their original source; coaching corrections are separate records. Coach communities have their own membership and public/private visibility and never automatically publish a client diary or progress photo. Exporting a client’s shared comparison requires separate client-approved export access; downloaded copies cannot be recalled. In-app update preferences control eligible events, muted connections, quiet hours and digest timing. Community plans marked Public can appear in discovery and be saved or shared by other members. Unlisted plans are available to people who receive the link or file. Private plans are not listed publicly.
If coach payments are enabled, checkout and coach payout verification are handled by Stripe. Athlyst stores payment references, amounts, currencies and status, not full card details or payout identity documents. The founding-coach pilot collects no platform subscription or referral charge. Future fees must be shown and accepted before checkout.
Route names, notes, landmarks, and maps can reveal sensitive locations. Review all content before publishing and do not include home addresses, private health details, or other identifying information. GPS routes and progress media stay private unless you explicitly export, back up, upload, or share them.
Local data remains until you delete it, reset the app, or remove the app. Cloud account data remains until you delete your account through Settings, subject to short operational backup and security-log retention. Settings provides local export, import, reset, and permanent account deletion controls.
Athlyst uses platform security controls and encrypted network transport, but no system can guarantee absolute security. The service is not directed to children under 13. Material policy changes will be posted on this page with a new effective date.
For privacy questions or deletion requests, email auth@joinrebook.com with "Athlyst Privacy" in the subject.