How Athlyst handles training, nutrition, health, location, account, and social data.
Effective July 15, 2026
Athlyst can store workouts, set logs, planned sessions, nutrition entries, saved meals, endurance activities, GPS route points, readiness check-ins, body metrics, progress photos, feedback, coach relationships, and crew posts.
Most data is stored locally on your device. Account features can send selected records to Athlyst's Cloudflare-hosted services when you sign in and use backup, coach, crew, media, or AI features.
Denying a permission does not prevent use of unrelated app features.
Data is used to provide logging, analysis, account backup, subscription access, monthly AI limits, coach sharing, crew features, food lookup, meal estimation, support, abuse prevention, and service reliability. Athlyst does not sell personal data or use HealthKit data for advertising.
Athlyst uses Apple for App Store purchases and subscription status; Cloudflare for application hosting, database storage, private media, email delivery, security, and Workers AI; and Open Food Facts, USDA FoodData Central, and FatSecret for food searches. FatSecret-linked nutrition is refreshed from FatSecret and only its food and serving identifiers are retained long term. Meal-photo estimation may use Cloudflare Workers AI or another configured AI provider. Information is sent only when needed for the feature you invoke.
Apple processes subscription payments. Athlyst does not receive full payment-card details. Athlyst stores a random App Account Token and verified product, transaction, purchase, expiration, grace-period, renewal, upgrade, and revocation metadata to provide access and restore purchases.
Athlyst stores monthly AI allowance, successful-use, refund, provider, model, and idempotency records. Meal-photo bytes are processed for the estimate you request and are not stored in Athlyst's D1 usage ledger.
Coach and crew content is shared only with the audience you select. Community plans marked Public can appear in discovery and be saved or shared by other members. Unlisted plans are available to people who receive the link or file. Private plans are not listed publicly.
Route names, notes, landmarks, and maps can reveal sensitive locations. Review all content before publishing and do not include home addresses, private health details, or other identifying information. GPS routes and progress media stay private unless you explicitly export, back up, upload, or share them.
Local data remains until you delete it, reset the app, or remove the app. Cloud account data remains until you delete your account through Settings, subject to short operational backup and security-log retention. Settings provides local export, import, reset, and permanent account deletion controls.
Athlyst uses platform security controls and encrypted network transport, but no system can guarantee absolute security. The service is not directed to children under 13. Material policy changes will be posted on this page with a new effective date.
For privacy questions or deletion requests, email auth@joinrebook.com with "Athlyst Privacy" in the subject.