Privacy Policy

PHYSIOATHLETX is operated by TECHFORWARD SOLUTIONS LIMITED, a company registered in Hong Kong under company number 76317223, with its registered office at Unit 2A, 17/F Glenealy Tower, No.1 Glenealy, Central, Hong Kong. We are the business responsible for the personal information described in this policy.

For any privacy question, request or complaint, email support@physioathletx.com. That address reaches the people who handle privacy matters directly.

We collect only what the app needs to work. Almost all of it comes from you: you type it in, or the app records what you did inside it. We do not buy personal information about you from data brokers and we do not build profiles from your activity on other sites.

• Account information — your email address, authentication records held by our auth provider, your plan tier, and the referring store code if you arrived from one of our partner stores (used for attribution only). We never see or store your password in readable form.
• Self-reported wellness inputs — the training goal, focus areas, self-selected conditions, available equipment and diet preference you choose during onboarding, plus your answers to the red-flag safety screen that gates recovery content. This is health-adjacent information about you, and we collect it only with the explicit consent you give at signup (see section 4).
• Activity and logs — workouts you complete and your per-exercise feedback, your nutrition profile and calculated targets, food and water logs, wellness check-ins, sleep entries, habit records, step counts you enter, and your XP, streak and achievement records. This is what makes progress tracking possible. A meal photo you submit for a nutrition estimate is handled differently: it is sent for that one estimate and is never written to our storage, database or logs — only the food entry you choose to save stays in your log.
• AI coach messages — the messages you send to the AI coach and the replies you receive are stored in your account so the conversation persists between sessions.
• Subscription and payment status — your plan, trial status, renewal date and whether your last payment succeeded. Payments run through Airwallex hosted checkout: your card number, expiry and security code are entered on Airwallex's payment page and never reach our servers. We receive a customer reference and the status of your subscription, not your card details.
• Technical and analytics data — IP address and device or browser information observed by our hosting providers when you connect, security and error logs, and first-party product analytics about which screens are used and where people drop off. If you turn on reminders, we also store the push subscription your browser issues so notifications can reach your device.

• To provide what you signed up for — creating your account, building and adapting your training and nutrition content, saving your logs, showing progress, running the AI coach and sending the reminders you enable. This is performance of our contract with you.
• To take payment — to start, renew, change or cancel your subscription and to keep the records a paid subscription requires.
• To keep the service safe and working — authentication, abuse and rate-limit protection, debugging, monitoring and backups.
• To improve the app — aggregate, screen-level analytics that carry no health values (see section 6).
• To meet legal obligations — tax and accounting records, and responding to lawful requests or legal claims.

We do not use your personal information for advertising, and we do not use your health-adjacent inputs, logs or coach conversations to target you with marketing.

Your goal, self-selected conditions, safety-screen answers, check-ins, sleep, nutrition entries and workout feedback describe your body and how you feel. All of it is sensitive, and we handle it that way. We collect it only because you choose to enter it, and only with the explicit consent you give at signup — the app asks before this information is stored, and nothing is collected until you agree.

This information is used to select and adapt educational content for you and to show you your own history. It is never sold, never shared for advertising, and never disclosed to the stores you may have bought from.

You can withdraw consent at any time. Because the app cannot select or adapt content without this information, withdrawal is done by deleting your account in Account > Danger Zone. Export your data first if you want a copy. Washington, Nevada and Connecticut residents should also read our Consumer Health Data Privacy notice.

Two features are AI-assisted: the coach chat and food-photo meal estimates. Both are processed by Anthropic (Claude) acting as a data processor for us. AI features are optional — you choose whether to use them, and the rest of the app works fully without them. Both produce general educational information only, and neither replaces assessment, guidance or care from a qualified healthcare professional.

• What is sent — for the coach: the message you type and the recent turns of that same conversation (up to the last 20), plus your goal, the titles of your training programs and upcoming sessions, your recent workout feedback and your subscription plan tier. For meal estimates: the photo you choose to submit. Because you type the coach messages yourself, they may contain whatever you put in them — including health details — so treat the chat box accordingly.
• What is never sent — your selected conditions, safety-screen answers, daily check-ins and nutrition history never leave the app's database.
• Messages we answer without calling the AI — if your message contains pain, injury or crisis wording, the app detects it and replies with a fixed, pre-written safety response. No API call is made, so that message is not transmitted to Anthropic at all.
• Your chats — coach conversations are stored in your account, included in your data export, and deletable: you can delete them at any time, and they are erased with your account.

We use PostHog for first-party product analytics: which screens are used, which flows are completed, where people drop off. Events are engineered to carry no health information — no goal names, no condition names, no onboarding or safety-screen answers, no check-in scores, no weights and no calorie targets. Only neutral event names such as "onboarding_completed" are recorded.

Health-adjacent parts of a URL are masked before a page view is sent: a path such as a specific condition page is generalized to a placeholder, and query strings are never transmitted. The result is screen-level funnel data with no condition names in it.

The app contains no advertising pixels and no third-party ad trackers on any authenticated screen. Ad measurement is only ever possible on public marketing pages; none is installed today, and we will update this policy and our Cookie Policy before that changes.

We use a small number of providers to run the service. Each one processes personal information on our instructions under a written agreement, and each receives only what its job requires.

• Supabase — database, authentication and file storage. Receives your account record, wellness inputs, logs and coach messages. This is where your data lives. Meal photos are not among it — they are never written to storage.
• Vercel — application hosting and delivery. Processes connection data such as IP address and request logs when you use the app.
• Airwallex — payment processing and subscription billing. Receives your email, the plan you chose and the card details you enter directly on its hosted checkout. Airwallex is the PCI-DSS compliant processor for those card details; we never receive or store them.
• Anthropic — the AI coach and food-photo estimates. Receives the coach messages you write and the recent turns of that conversation, your goal, your program and session titles, your recent workout feedback, your plan tier and any photo you submit. It never receives your conditions, safety-screen answers, check-ins or nutrition history. Our agreement with Anthropic forbids using this content to train models.
• PostHog — first-party product analytics. Receives neutral event names, masked screen paths and a pseudonymous identifier. No health values.
• Web push services (Apple, Google, Mozilla) — delivery of the reminders you enable. Each receives the push endpoint your browser issued and the notification payload, which is always neutral (a short title, a short body and an in-app link) and never contains conditions or any health value.

We may also disclose information where the law requires it, to establish or defend legal claims, or to a successor entity in a merger or acquisition — in which case this policy continues to apply to the information transferred.

We do not sell your personal information for money or other valuable consideration, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months, including for anyone we know to be under 16. There are no ad pixels on authenticated screens.

Because there is nothing to opt out of, our Do Not Sell or Share My Personal Information page exists to state that plainly and to tell you how to raise a request anyway.

We operate from Hong Kong. The providers listed above run infrastructure that may process and store your data in the United States and the European Union, and their support teams may access it from other locations to keep the service running.

Wherever your data is processed, it stays covered by the written agreements we hold with each provider: processing limited to our instructions, confidentiality obligations, security requirements, and the standard contractual protections used for international transfers. If you are in a country whose law restricts transfers, you can email us for details of the safeguards that apply to your data.

We keep your account data, wellness inputs, logs and coach conversations for as long as your account exists, so your history stays available to you.

When you delete your account, the deletion cascades across your records — profile, onboarding answers, safety-screen answers, workout, nutrition, wellness and gamification data, coach conversations and push subscriptions. If you still have a paid subscription, it is cancelled with our payment provider as part of the deletion, so no further charge is taken. The billing records the provider holds are not erased: they are kept for as long as tax and accounting law requires, as described below. Encrypted backups are kept on a rolling schedule for disaster recovery and are overwritten as that schedule cycles, so deleted data disappears from backups as they roll off; it is never restored into the live service.

Billing and transaction records are kept for as long as tax and accounting law requires, even after an account is deleted. Those records contain the transaction, not your health-adjacent inputs.

Access to your data is restricted at the database level so that your records are readable only by your account. Traffic is encrypted in transit, data is encrypted at rest by our infrastructure providers, card data never touches our servers, and administrative access is limited to the people who need it. No service can promise perfect security; we describe what we actually do, and what we do not claim, in our Security Statement. If you believe you have found a vulnerability, email support@physioathletx.com.

Whatever jurisdiction you are in, you can:

• Access and export — download everything we hold on your account yourself, at any time, from Account > Download my data. No support ticket needed. The export includes your coach conversations.
• Correct — edit your profile, goal, equipment, diet preference, nutrition profile and logged entries directly in the app; email us if something you cannot edit is wrong.
• Delete — delete your account from Account > Danger Zone. Deletion is permanent and cascades as described in section 10.
• Withdraw consent — withdraw consent for health-adjacent information by deleting your account, since the app cannot operate without it.
• Object or restrict — ask us to stop or limit a particular use, and opt out of reminders at any time in the app or in your browser's notification settings.
• Complain — raise a complaint with us first, and, if you are still not satisfied, with your local data protection or consumer protection authority. In the United States you may also contact your state Attorney General.

To make any request that is not self-service, email support@physioathletx.com from the address on your account. We reply within 45 days and will tell you if we need longer. Requests are free, and making one never changes the service you receive. If you cannot email from your account address, we will ask for enough information to confirm the account is yours before we act. An authorized agent may submit a request on your behalf with written permission from you.

PHYSIOATHLETX is not for people under 18. Accounts are for adults, we do not knowingly create accounts for minors, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email support@physioathletx.com and we will delete it.

Separately, calorie and macro targets are blocked in the app for anyone who reports being under 18 or reports a history of disordered eating. That gate runs before any target is calculated or shown.

• Consumer Health Data Privacy — for consumer health data rights, including Washington, Nevada and Connecticut.
• California Consumer Privacy Act (CCPA) Policy — for California residents.
• Cookie Policy — what we store in your browser and how to control it.
• Security Statement — how the service is protected.

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect. Continuing to use PHYSIOATHLETX after that point means the updated policy applies to you.

TECHFORWARD SOLUTIONS LIMITED
Unit 2A, 17/F Glenealy Tower
No.1 Glenealy, Central
Hong Kong
Company number 76317223
support@physioathletx.com