Privacy Policy

1. Information the app accesses

SweatlyAI accesses the following categories of data, always with your permission and only to provide the app's features. This data stays on your device and your private iCloud unless noted otherwise.

• Profile information you provide: your preferred sports, fitness level, training days, and session duration, plus optional details such as birth year, weight, resting heart rate, and maximum heart rate. This powers your training programs and heart-rate zones.
• Health and fitness data (Apple Health / HealthKit): with your permission, the app reads workouts, workout routes, heart rate, active energy, distance, resting heart rate, and heart-rate variability to track your progress and personalize training. Workouts you record with the app are written back to Apple Health so they appear there.
• Location data: with your permission, your location is used to record GPS routes for runs, rides, hikes, and open-water swims. Background location lets recording continue while your screen is off during a workout. Routes are stored on your device and in your private iCloud.
• Bluetooth: with your permission, the app connects to Bluetooth heart-rate monitors (such as chest straps) to display your heart rate during workouts tracked from your iPhone.
• AI processing: training programs and workout feedback are generated on-device using Apple Foundation Models (Apple Intelligence) where available, or expert-designed templates and rule-based feedback otherwise. Your data is not sent to any server for AI processing.

2. Strava (optional)

If you choose to connect Strava, SweatlyAI imports your activities into your local history. This integration is import-only — your workouts are never uploaded to Strava, and no Strava data is written to Apple Health.

• The app requests read-only access (the activity:read_all scope) via Strava's official OAuth sign-in.
• Imported details may include activity name, sport type, dates, duration, distance, elevation, heart rate, cadence, speed, and route map data.
• Your Strava access tokens are stored securely in the device Keychain and are never shared with us.
• You can disconnect Strava at any time from the profile screen, which removes the stored tokens.

Your use of Strava is also governed by Strava's own privacy policy.

3. How your data is stored and synced

• All of your data is stored on your device and synced across your own Apple devices through your private iCloud account (Apple CloudKit private database).
• SweatlyAI does not operate any backend server and never receives a copy of your personal data.
• The only public data the app reads is a read-only monthly challenge catalog — it contains no personal information about you.
• Progress such as streaks, goals, and challenge completion is recomputed from your own activities on your device, not stored on any server.

4. What we do not do

• We do not require an account or sign-up.
• We do not run analytics, tracking, or advertising SDKs.
• We do not sell, rent, or share your personal data with data brokers or advertisers.
• We do not send your health, location, or workout data to any SweatlyAI server — there is none.

5. Data sharing

Because there is no SweatlyAI server, we do not receive or share your data. Data only moves within services you control and have authorized:

• Apple: Apple Health, iCloud, and CloudKit store and sync your data under Apple's privacy protections and your iCloud settings.
• Strava: only if you connect it, and only as a one-way import into the app.

6. Your controls and choices

• You control every permission (Health, Location, Bluetooth) and can change or revoke it anytime in the iOS Settings app.
• Health permissions are requested only when first relevant, not during onboarding.
• You can disconnect Strava at any time from within the app.
• You can turn off iCloud sync for SweatlyAI in iOS Settings.

7. Data retention and deletion

• Your data remains on your device and in your iCloud for as long as you keep the app installed and iCloud sync enabled.
• Deleting the app removes its on-device data. To remove synced data, delete the app's data from your iCloud storage in iOS Settings.
• Workouts deleted in Apple Health that were owned by Health are also removed from the app on the next sync.
• Manage or delete your Apple Health and iCloud data at any time through the Apple Health app and iOS Settings.

8. Security

Your data benefits from the security of the Apple platform: on-device storage, your private iCloud, and the device Keychain for sensitive tokens. Because we never receive your data, there is no central database of user information to breach.

9. Children's privacy

SweatlyAI is not directed to children under 13, and we do not knowingly collect data from children. Because the app has no server and collects no data centrally, any information stays on the user's own device and iCloud.

10. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new effective date. Your continued use of the app after an update means you accept the revised policy.

11. Contact us

If you have questions about this policy or your privacy, contact us at privacy@sweatlyai.app.