Privacy Policy

This policy describes the data practices of the Performance mobile application, Performance's public website, and the backend services used to provide the product.

Performance is intended for people age 18 or older. The current app requires an adult date of birth before onboarding can complete.

Depending on the features you use, you may provide:

• Account and profile information such as name, email address, date of birth, height, weight, sex or gender fields, goals, and training experience.
• Training preferences, Program choices, workout logs, completed sets or runs, schedule information, Journal answers, and subjective check-ins.
• Nutrition targets, foods and meals you log, dietary preferences, and saved meal-plan information.
• Food photos and voice recordings you choose to submit for Nutrition photo or voice logging, food search terms, and barcodes you scan.
• Polaris questions, photos you attach to a Polaris question, and Polaris notes you choose to save.
• Training-preference text you type into Edit program.
• Trip details you add in Travel, such as destination, dates, available equipment, and any hotel, gym, or restaurant you pick.
• Regimen records you choose to enter, including medications, prescriptions, supplements, peptides, hormone/TRT entries, or performance compounds.
• Bloodwork values and PDF lab reports that you explicitly attach to Bloodwork.
• Support requests, feedback, and data-export requests you send to us.

Apple Health access is optional and controlled by Apple's permission system. Availability depends on your device, operating-system version, enabled features, and the permissions you grant. Performance does not assume that an empty Health result means you denied access.

With the corresponding Apple Health permissions, Performance may read the following data to support the fitness, recovery, sleep, nutrition, profile, Journal, and workout features you choose to use:

• Heart and recovery measurements: heart rate, resting heart rate, heart rate variability (HRV / SDNN), heartbeat series, one-minute heart rate recovery, walking heart rate average, respiratory rate, oxygen saturation, and sleeping wrist temperature.
• Sleep and wellbeing: sleep analysis, mindful sessions, and State of Mind records.
• Activity and cardio fitness: active energy burned, step count, workouts, workout routes, cardio fitness (VO2 max), physical effort, workout effort scores, and estimated workout effort scores.
• Running measurements: running power, running speed, running stride length, running ground contact time, and running vertical oscillation.
• Cycling measurements: cycling power, cycling speed, cycling cadence, and cycling functional threshold power.
• Profile and body measurements: height, body mass (weight), body fat percentage, lean body mass, body mass index (BMI), waist circumference, date of birth, and biological sex.
• Nutrition and intake: dietary energy, dietary protein, dietary carbohydrates, dietary fat, dietary fiber, dietary sugar, dietary sodium, dietary caffeine, dietary water (hydration), and alcoholic beverages.

On supported systems, Performance may also read medications tracked in Apple Health and their medication dose events after you select the medications to share in Apple's separate medication permission picker. This access does not let Performance prescribe medication, change your Apple Health medication list, or write medication dose events.

Writing to HealthKit requires the corresponding write permission. When you choose a supported logging or workout feature, Performance may write workouts, active energy burned, walking or running distance, workout routes, body mass, sleep analysis, mindful sessions, State of Mind, dietary energy, protein, carbohydrates, fat, fiber, sugar, sodium, caffeine, water, and alcoholic beverages. Importing a HealthKit-originated record does not require you to log an identical copy in Performance.

Apple Health data is read only with your permission. Performance never uses it for advertising or marketing and never sells it. Apple Health data is shared with an AI provider only after you allow AI processing, and then only the evidence needed for the Polaris question you ask (see section 6). Nutrition photo and voice logging, food search, and Program preference AI do not send Apple Health data to their providers.

Outdoor Run uses location for distance, pace, and route handling. Raw route coordinates remain on the iPhone or Apple Watch in the current product; Performance's server-side workout records store derived workout facts rather than the route polyline. Background location is used only when needed to continue an outdoor run while the app is backgrounded or the phone is locked.

When you ask for nearby gyms, food, or hotels in Travel or Nutrition, Performance uses your location while the app is in use, or an area you type, to run an Apple Maps search from your device. Apple receives the search and a search area around that point. Trip details you save, including the destination, dates, and any hotel, gym, or restaurant you pick with its map location, are stored with your account so Performance can show your trip and adapt your training. Polaris does not receive your device's GPS coordinates; a Polaris travel question can include the trip destination or the area you name.

Bluetooth access is optional and is used for compatible heart-rate monitors. Performance Watch uses HealthKit workout sessions and sensors when you authorize them. You can review or change Health permissions in Apple's settings.

In the current iOS release, connected health-history imports come from Apple Health / HealthKit. Performance does not offer new Oura or WHOOP connection, synchronization, or model-analysis flows in this release.

Historical WHOOP rows from earlier versions may remain associated with an account until they are deleted under the applicable account-deletion and retention rules.

Native iOS subscriptions are purchased through the Apple App Store and may be reconciled through RevenueCat. Where web billing is offered, Stripe processes payment information. Performance stores subscription status and provider references needed to verify access; full payment-card numbers are not stored by Performance.

Deleting a Performance account does not cancel an App Store subscription. Apple continues to manage App Store billing. A live web subscription must be canceled or proven inactive before Performance can safely delete the account identity.

AI features are off until you allow them. One consent in the app covers the AI providers named in this section, with the option to turn off any of them in Privacy and Data. Information already sent for an earlier request cannot be recalled by Performance. Performance does not give any AI provider authority to change your account directly. AI-generated answers are labelled in the app and may be inaccurate.

Polaris (OpenAI)

Some user-requested Polaris questions can use OpenAI after you allow AI processing. When enabled, Performance sends only the bounded question, up to six recent Polaris messages, and selected training, recovery, sleep, nutrition, schedule, regimen, or check-in evidence needed for that response. Recovery, sleep, heart-rate, workout, medication-dose, or other health evidence may include information Performance read from or derived from Apple Health/HealthKit. Polaris notes are included only when you chose to share them with Polaris. OpenAI receives this information only to provide the health-and-fitness response you requested.

Photos you attach are sent to OpenAI with your question only when you tap Send, and Performance does not keep them in your chat or on your device after the request. A photo can show people, places, food, your body, or health information.

Performance does not attach your name, email address, or account ID to Polaris requests, and sends them with OpenAI's response-storage option turned off. OpenAI's own API data terms govern any limited processing or retention on its side. Polaris conversations are saved on your device, not on Performance's servers.

Your AI consent applies across your Performance account.

Nutrition photo and voice logging (OpenAI, TypeSafe, FatSecret)

When you use photo or voice logging:

• Photo: the food photo you take or choose is sent to OpenAI, which recognises the foods in it.
• Voice: your recording is sent to OpenAI to be transcribed into text, and the transcript is then sent to OpenAI to recognise the foods you described.
• Food matching: the recognised food descriptions and preparation, any brand you named or that is visible, and candidate foods from the food database are sent to TypeSafe, a third-party AI service, to match each item to a database food. TypeSafe does not receive your photo, recording, transcript, or account identity.
• Food database: food search terms are sent to FatSecret, which supplies food, nutrient, and micronutrient data.

These requests do not include your profile, Apple Health data, nutrition targets, or full food diary. Performance does not store your photo, recording, or transcript on its servers; they are used for that one request. Nothing is added to your diary until you review the proposed foods and amounts and save them. Recognition requests to OpenAI are sent with its response-storage option turned off. OpenAI's, TypeSafe's, and FatSecret's own data terms govern any processing or retention on their side, including for audio transcription.

Food search and barcodes (FatSecret)

When you search for a food or scan a barcode, Performance's servers send the search text or barcode number to FatSecret to look up foods and nutrients. Your account identity is not included.

Program preference AI (TypeSafe)

Edit program can use TypeSafe, a third-party AI service, to interpret the training-preference text you enter after you allow AI processing. TypeSafe receives only that text and Performance's public list of exercise names and aliases. The request excludes your name, email, account ID, workout history, working loads, schedule, Recovery data, Apple Health/HealthKit data, and other health records. Text that mentions symptoms, injury, readiness, temporary travel windows, or identifiers such as email addresses or links is blocked and not sent. Performance computes and shows the exact Program proposal; nothing is saved until you approve it. TypeSafe's own data terms govern any processing or retention on its side.

New third-party-AI weekly meal-plan generation is disabled in the current iOS release. Saved meal plans and ordinary meal logging do not require a meal-plan AI provider.

Performance uses service providers to operate the product. These include:

• Supabase for authentication, database, file storage, and server functions.
• Apple for Sign in with Apple, App Store purchases, HealthKit, and Apple Maps nearby search; RevenueCat for native subscription and entitlement status, using your Performance account ID.
• Stripe for eligible web billing.
• Sentry for crash and reliability diagnostics.
• OpenAI for Polaris responses and Polaris photos, and for Nutrition photo recognition, voice transcription, and food recognition.
• TypeSafe for Program preference interpretation and Nutrition food matching.
• FatSecret for food search, barcode lookup, and nutrient data.
• Email or support providers used to respond to you.

We may receive ordinary technical information needed to operate and secure internet services, such as request timestamps, app version, device or operating-system information, error information, and network metadata. Performance does not use advertising identifiers or health data for behavioral advertising.

• Provide and secure your account and subscription access.
• Generate, present, execute, and maintain your training Program and workout history.
• Provide recovery, sleep, nutrition, schedule, Journal, and Health features you choose to use.
• Provide consented Polaris responses and preserve the conversation state needed for that feature.
• Recognise foods in photos and voice recordings you submit, after you allow AI processing, and show them for your review.
• Find nearby places you ask for and keep the trip details you save.
• Interpret training-preference text you submit to Edit program after you allow AI processing, then show a Program proposal for your approval.
• Respond to support, privacy, data-export, and account-deletion requests.
• Detect abuse, debug failures, maintain reliability, and comply with applicable legal obligations.

Performance does not sell personal information or Health data and does not share HealthKit data for advertising or marketing. We share data with service providers only as needed to provide the feature, process a purchase, operate infrastructure, obtain your explicit consent for a disclosed integration, or comply with applicable law.

You can manage Apple Health permissions in Apple's settings, disconnect supported providers, turn off any AI provider in Performance's Privacy and Data controls, and request a copy of your data through Support.

Delete Account is available in Performance Settings. Account deletion removes eligible account-owned application data, including saved trip details and your AI consent records, verifies Bloodwork storage cleanup, and removes the Performance authentication identity after required provider checks. Sign in with Apple accounts require a fresh Apple authorization so Performance can revoke the Apple grant before destructive deletion.

Information already sent to OpenAI, TypeSafe, or FatSecret for an earlier request cannot be recalled by Performance and is governed by that provider's terms. Store or payment-provider records and records Performance is legally required to retain may follow separate obligations. Limited backup copies may persist until routine backup expiration and are not used to recreate an active account.

Performance uses access controls, authenticated service boundaries, encrypted network transport, and provider-managed security controls appropriate to the systems involved. No internet service can guarantee absolute security.

We may update this policy as the product or legal requirements change. The public version at this URL is the current customer-facing policy.