Privacy Policy

What you write. The text of your training pages, and the sets, exercises, loads, reps and times the app reads out of that text. This is the log. It is the whole product.

Your email address, only if you sign in. The app works fully without an account. You need to sign in with your email address to back up your journal, to subscribe to Mark-1 Premium, or to use coaching. Your email address identifies your account, receives your sign-in codes, and lets a subscription be linked to your account. We do not use it for marketing.

Your settings and training profile, such as units and rest target, and, if you set them, your goal, experience, session length, available equipment, excluded exercises, weight increment and training days.

Subscription records, only if you subscribe. Described under Mark-1 Premium below.

The app does not ask for your name, date of birth, gender, height or weight. No location, of any kind, at any time. No contacts, photos, microphone or camera. No health data from Apple Health or any other service. No advertising identifiers and no tracking across other apps or websites. No analytics or behavioural telemetry. There is no third party analytics software in the app.

Your journal lives on your phone, in a database only the app can read. If you have not turned on backup, your journal is not copied to our servers. Coaching is the exception: if you choose to use it, parts of your training data are sent off the phone with each request, as described under Coaching below.

If you have turned on backup, a copy is also stored on servers operated by Supabase, our database provider, in the United States. Access is restricted so that only your own account can read or write your rows. Data is encrypted in transit.

Mark-1 Premium is an optional auto-renewing subscription sold through the App Store. Apple handles the purchase and the payment. We never receive your card details or your Apple Account password. Apple's handling of your purchase is covered by Apple's own privacy policy.

You must be signed in to subscribe. When you buy, the app attaches your Mark-1 account identifier to the purchase so that the subscription belongs to your account and cannot be claimed by another one.

When coaching needs to confirm your subscription, the app sends our server the signed transaction record that Apple gave your phone. Our server checks its signature against Apple's public certificate and asks Apple's App Store Server API for the subscription's current status. We then store your account identifier, the subscription's original transaction ID, the product, whether it was a live or test purchase, its expiry or revocation date, and when we last checked it.

Anthropic, which provides coaching replies, receives none of this: no payment details, no transaction records and no account identifier.

Coaching is an optional feature that proposes a workout or a change to your week. It is currently a limited early rollout and is not available to every account. Replies are written by Claude, an AI model made by Anthropic. Coaching only proposes; nothing is saved to your journal unless you approve it.

Consent comes first. The first time you use coaching, the app explains what will be sent to Anthropic and asks before sending anything. If you choose Not now, nothing is sent. Your answer is remembered on your phone, and deleting the data on your phone resets it.

What each request sends. Each coaching request goes to our coaching service and is passed to Anthropic. It contains:

• your message, and the recent messages in that coaching conversation;
• today's date and your time zone;
• your recent completed working sets, with exercise, load, reps and date, the effort you recorded for those sessions and whether you reported discomfort;
• a summary of your history for those exercises, and which muscles you have trained recently;
• this week's schedule, including your plan, session and routine names, and your saved routines' names and exercises;
• the names of the exercises you use, including ones you typed yourself, and the title of a workout in progress;
• any proposal you are asking the coach to revise;
• your training profile: goal, experience, session length, equipment, excluded exercises, units, weight increment and training days.

A request does not include your email address, your account identifier, your subscription details or the full text of your pages.

Names and messages are sent as you wrote them. Your messages, routine and plan names, workout titles and exercise names you type yourself go to Anthropic exactly as written. If you put personal details in them, such as a name, an injury or where you train, those details are sent too. Please leave out anything you would not want shared.

What we keep.

• Coaching replies are stored so the app can show a reply again if a request is repeated. A daily job deletes each reply 30 days after it was written.
• Your messages and training context are not stored as text. For each request we keep a one way fingerprint, which lets us recognise a repeated request but cannot be turned back into what you wrote.
• Accounting records, holding your account identifier, the request identifier, that fingerprint, the cost of the request, when it was made and whether it failed, are kept while your account exists and deleted when you delete your account.
• Usage counters, the number and cost of your requests per day and per month, are deleted 400 days after they were last updated, or immediately when you delete your account.
• Subscription records are kept while your account exists and deleted when you delete your account.

What Anthropic keeps. Anthropic processes each request to write the reply. How long Anthropic retains API requests, and what it may use them for, is set by Anthropic's own commercial terms and privacy policy, not by us.

We do not sell your data, we do not share it with advertisers, and we do not provide it to third parties for their own purposes.

These service providers process data on our behalf and only on our instructions:

• Supabase hosts our database, backups, account sign-in and coaching service.
• Resend delivers the emails that carry your sign-in codes.
• Anthropic writes coaching replies, only if you use coaching.
• Apple distributes the app, processes App Store purchases and reports subscription status. If you have chosen to share analytics with app developers, or are testing through TestFlight, Apple also provides us with crash reports and any feedback you choose to send.

We may disclose data if we are legally required to, and we will tell you unless we are prohibited from doing so.

Backed-up data is kept until you delete it. There is no expiry and no archive. When you delete your account, your rows are removed from our database. Backups held by our hosting provider roll off within 30 days.

Coaching and subscription records are kept for the periods set out under Coaching above.

These are three separate actions. Doing one does not do the others.

Delete your account. In the app: open Settings, then Account, then Delete account. This permanently deletes your account, every workout backed up to it, and your coaching replies, accounting records, usage counters and subscription records on our servers. It cannot be undone. It does not remove the copy on your phone, and it does not cancel an Apple subscription.

Delete the data on your phone. In the app: open Settings, then Delete local MARK-1 data. This removes your workouts, routines, plans and preferences, including your coaching consent, from the phone. It does not touch backups you exported, your account and its cloud data, or any Apple subscription. Deleting the app also removes the data on the phone.

Cancel your subscription. Subscriptions are managed by Apple. Use Manage subscription in the app, or open your iPhone's Settings, then your Apple Account, then Subscriptions. Cancelling stops the next renewal. It does not delete your account or any data.

If you used the earlier Mark-1 app, a backup made before you signed in with an email can be removed separately under Settings, then Account, then Manage workout data.

By email: write to us and we will delete your account within 30 days.

You can also export a backup of your journal, or your lift history as a CSV file, at any time from Settings, without asking us.

This website is separate from the app and it does collect analytics.

We use the Meta Pixel, which sets cookies and reports your visits and actions on this site back to Meta. Meta uses that information to measure and target advertising, including advertising shown to you elsewhere. This is standard advertising measurement and it is not connected to your training log in any way.

If you place an order, checkout is handled by Shopify, which processes your name, address, contact details and payment information in order to fulfil it. Payment card numbers are handled by Shopify and its payment processors and are never stored by us.

You can limit this tracking through your browser's cookie settings, an ad blocker, or your Meta ad preferences.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to how it is processed. For the app, the export and delete options above are the fastest route. For anything else, email us.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under California law.

Mark-1 is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

If we become aware of a breach affecting your data, we will notify affected users and any regulator we are required to notify, without undue delay.

If this policy changes in a way that affects you, we will update the date at the top. Changes affecting the app will also be announced in the app.

Mark-1 Performance LLC

bryan@mark1performance.com