Privacy Policy

This policy describes how Grit (“Grit”, “we”, “us”) collects, uses, and shares information when you use the Grit mobile application and related services (the “Service”).

Information we collect

• Account information — your email address and, optionally, display name, provided via Sign in with Apple or Sign in with Google. If you use Apple’s “Hide My Email” relay, we receive only the relay address.
• Profile information you enter — biological sex, age, height, weight, training experience, goals, focus areas, equipment access, training days per week, session length, and any joint concerns or exclusions you opt to share. All of this is supplied by you during onboarding.
• Training data — workouts you log, sets, reps, weights, perceived difficulty, mood, and check-in responses.
• Apple Health data (optional, iOS only) — if you choose to connect Apple Health and grant permission in iOS, we read: sleep duration and sleep stages, heart-rate variability (HRV), resting heart rate, heart rate during a workout, respiratory rate, step count, active energy, and workouts recorded by other apps. See Apple Health data below for exactly how this works.
• Device data — standard logs (crash reports, error messages, device model, OS version) used to keep the Service running.
• Purchase and subscription information (only if you subscribe) — which Grit Pro plan you have, when it started and when it renews or ends, whether it is in a welcome period or a store trial, which store it was bought in, and the store’s transaction identifiers. Your card and bank details are handled by Apple or Google and never reach us.

Apple Health data

Connecting Apple Health is entirely optional. The coaching features work without it — connecting simply lets your coach see objective recovery signals instead of relying only on how you say you feel.

• Summaries only. Your phone computes one summary per day (for example, “7 h 12 m sleep, resting heart rate 55, 9,200 steps”), and — when you train with a device that measures heart rate, such as an Apple Watch — one summary per workout. Only these summaries are uploaded to your private Grit account. Detailed raw recordings — such as minute-by-minute heart-rate samples — never leave your phone, and neither does the identity of the apps that recorded your workouts: a workout logged by another app is uploaded as its activity type, duration and distance only.
• Workout heart rate. While a Grit workout is running, your heart rate is shown live in the app. When the workout ends, we upload four numbers for that session: your average, highest and lowest heart rate, and how many readings those are based on. The individual beat-by-beat readings stay on your phone. Your coach uses the summary to judge how hard the session actually was and how well you recover between sets. If nothing is measuring your heart rate — an iPhone on its own has no heart-rate sensor — nothing is recorded, and the session simply has no heart-rate data.
• Separate consent for AI coaching. Before any Apple Health data is uploaded or used for coaching, the app shows a dedicated consent screen naming our AI provider. If you decline, Apple Health data stays on your phone and is displayed in the app only.
• What it is used for. Personalising your training program, coaching reviews, and diet targets — for example suggesting a lighter week when your recovery metrics have been consistently below your own baseline. Readiness calculations are performed by our own code; the AI provider receives derived daily summaries and trends, never raw sensor streams.
• What it is never used for. We do not use Apple Health data for advertising or marketing, we do not sell it, we do not share it with data brokers, and we do not use it to train AI models. We do not store Apple Health data in iCloud.
• Withdrawing. Disconnect Apple Health at any time in Settings. Syncing stops immediately, and your withdrawal is also recorded on our server, so your coach stops using the summaries already stored — they are not read again unless you reconnect and consent afresh. Deleting your account deletes all stored health summaries outright. You can also revoke Grit’s access in iOS Settings → Privacy & Security → Health.

How we use information

• To generate your personalised training program and coaching recommendations, including recovery-aware adjustments when you have connected Apple Health.
• To save your progress across devices and sign-ins.
• To diagnose crashes and improve the Service.
• To contact you about critical service updates (we do not send marketing email).

How we share information

We do not sell your personal information. We share limited information only with these categories of service providers, solely to operate the Service:

• Supabase (hosting, authentication, database) — stores your account, profile, training data, and — if you connect Apple Health — your daily health summaries and per-workout heart-rate summaries.
• Apple (Sign in with Apple, Apple Health on-device APIs) and Google (Sign in with Google) — authenticate you at sign-in; Apple Health data is read on-device under iOS permissions you control.
• Anthropic (Claude), routed via the Zenmux gateway — our AI provider, used to generate your training programs, coaching reviews, and diet targets. Prompts contain your de-identified profile, training data and — only while your separate in-app consent is on record — derived daily health summaries and trends. Your name, email, and raw identifiers are not included in prompts. We use commercial API terms under which prompt data is not used to train AI models.
• Sentry — crash reporting (configured to exclude personal data from reports).
• Amplitude — app-usage analytics during the beta period (native app only; no health data is sent to analytics).
• Expo / EAS — build and deliver the app itself.
• Apple (App Store) and Google (Google Play) — process your payment when you subscribe to Grit Pro, under their own privacy policies.
• RevenueCat (subscription management) — receives your Grit account’s random identifier (not your name or email) and the purchase records the App Store or Google Play sends, and tells us whether your subscription is active. It receives nothing else from your account.

We may also disclose information if required by law, subpoena, or to protect the rights, safety, or property of Grit or its users.

Data retention

We retain your account, training, and health-summary data as long as your account is active. You can request deletion at any time (see “Your choices” below), after which we delete your data within 30 days, except where retention is required by law or for routine backups that age out on a standard rotation. Deleting your account also deletes the subscription records we hold; Apple, Google and RevenueCat keep their own purchase records under their policies, and a store subscription keeps renewing until you cancel it in the store.

Security

Data is transmitted over TLS and stored encrypted at rest by our hosting provider. No system is perfectly secure — please use a strong passcode on your device and enable two-factor authentication on your Apple ID or Google account.

Your choices

• Access or export — use “Export my data” in Settings (the export includes your health summaries), or email us and we will provide a copy of your data in a portable format within 30 days.
• Correction — edit your profile directly in the app.
• Deletion — delete your account from the Profile screen, or email us and we will remove your data, including all stored health summaries.
• Disconnect Apple Health — any time in Settings; syncing stops immediately and you can also revoke access in iOS Settings → Privacy & Security → Health.
• Opt-out of cycle-syncing features — this is opt-in only during onboarding; you can toggle it off in Profile settings.

Children

Grit is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

International users

Grit is operated from Asia-Pacific and uses providers in the United States and the European Union. By using the Service, you consent to the transfer of your information to these jurisdictions.

Changes to this policy

We will post updates to this page and update the “Last updated” date above. Material changes will be announced in the app.

August 8, 2026: added the Apple Health data section (optional health-data collection, daily-summary-only uploads, separate AI-coaching consent, withdrawal and deletion); named Anthropic (Claude) explicitly as our AI provider, and Sentry and Amplitude as diagnostics/analytics providers; noted that data export includes health summaries. This page also moved from Notion to this address.

August 8, 2026 (later the same day): narrowed what Apple Health data is collected — we no longer collect VO₂max, REM-sleep minutes, per-workout calories, or the identity of the apps that record your workouts, because nothing in the coaching used them. Added workout heart rate to the read list (shown live in the app, never uploaded), and clarified that withdrawing consent now also stops the coach using summaries already stored.

August 10, 2026: we now upload a heart-rate summary for each workout — average, highest and lowest heart rate, and the number of readings behind them — where before, workout heart rate was shown live and then discarded. This is a widening of what we collect, and it reverses the “never uploaded” statement in the entry above, so we are stating it plainly rather than folding it into a list of tidy-ups. The individual beat-by-beat readings still never leave your phone. Your coach uses the summary to judge session intensity and between-set recovery. Nothing changes for you if no device is measuring your heart rate: an iPhone on its own has no heart-rate sensor, and those sessions simply carry no heart-rate data.

September 25, 2026: added purchase and subscription information to what we collect, which applies only if you subscribe to Grit Pro; named Apple and Google as payment processors and RevenueCat as our subscription-management provider, and described exactly what RevenueCat receives; noted that deleting your account deletes our subscription records but does not cancel a store subscription.

October 5, 2026: changed the support and privacy-request email address to team@getgrit.today.

Contact

Questions or requests: team@getgrit.today