Mainstay — Privacy Policy

Effective Date: August 16, 2026 · Policy Version 1.1

Mainstay ("the App") is a personal AI fitness coach for iOS and Apple Watch, operated by ALC SFR LLC, a Wyoming limited liability company, doing business as Mainstay ("we," "us"). This policy explains what data we collect, how we use it, and your rights. The short version: your data is used to coach you, never to advertise to you, and never sold.

1. Health & Fitness Data (Apple HealthKit)

The App reads and writes the following HealthKit data types with your explicit permission:

• Read: Heart rate, active calories burned, resting heart rate, heart rate variability, sleep, workout history, and body mass.
• Write: Workout sessions (type, duration, calories burned), heart rate samples recorded during workouts, and workout routes for outdoor cardio (see Section 2).

HealthKit data is used solely to personalize your workout plans, track your fitness progress, and display performance metrics within the App. We do not use HealthKit data for advertising, marketing, or similar services, and we do not sell, share, or transfer it to any third party for advertising, marketing, use-based data mining, or data brokerage purposes. Summary health metrics derived from HealthKit (such as sleep duration, resting heart rate, heart rate variability, and body weight) are stored securely on our servers to personalize your coaching, and are permanently deleted when you delete your account. Raw HealthKit samples remain on your device and in Apple Health.

2. Location & Workout Routes (Outdoor Cardio)

If you record an outdoor run, walk, or hike, the App uses your device's GPS to measure distance, pace, and your route, with your explicit location permission.

• Route maps (GPS coordinates) are stored in Apple Health on your device. We do not upload your GPS coordinates or route maps to our servers.
• Our servers receive only summary metrics for each cardio session: activity type, duration, distance, average pace, heart rate summary, and calories. These power your workout history, progress, and coaching.
• Location is used only while recording an outdoor workout. We do not track your location outside of workouts, and we never use location for advertising or profiling.

3. Account Information

When you sign in with Apple, we receive your Apple-provided user identifier and, optionally, your name and email address. This information is used to create and authenticate your account.

4. Workout & Training Data

Your workout plans, exercise logs, sets, reps, weights, and messages you send to the AI coach are stored on our servers to enable AI-powered coaching, progression tracking, and cross-device sync. This data is associated with your account and is not shared with other users.

5. AI Coaching

When you use the AI coach feature, your training history, profile (such as goals, experience level, and injury notes you provide), and messages are sent to our servers to generate personalized advice. We use Anthropic's Claude API to power these responses. Your data is processed under Anthropic's commercial API terms, which prohibit using customer data for model training. Do not include information in coach chat that you do not want processed for coaching purposes.

6. Notifications

With your permission, we send push notifications through Apple's notification service (for example: your weekly plan is ready, a personal record celebration, or a coach check-in). Notification delivery uses a device token that identifies your device, not your health data. You can turn notifications off anytime in iOS Settings.

7. Analytics & Crash Reporting

We use the following third-party services to improve app quality:

• Sentry — Crash reports and error diagnostics. Configured to exclude personal health values.
• PostHog — Usage analytics (screen views, feature usage, funnel events such as "workout completed"). Events describe what you did in the App, not your health measurements. Configured to exclude personal health values such as weights lifted, heart rate, or body metrics.

We do not use third-party advertising SDKs, and we do not track you across other companies' apps or websites.

8. Service Providers

We share data only with the service providers needed to run the App, under their commercial terms:

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

9. Data Storage & Security

Account and training data is stored on servers hosted by Railway (cloud infrastructure). All communication between the App and our servers uses HTTPS encryption. Authentication tokens are stored in your device's Keychain.

10. Data Retention & Deletion

Your training data is retained as long as your account is active. You can delete your account directly in the App: go to Profile > Delete Account. This permanently deletes your account and all personal data (profile, workouts, progress, health snapshots, and coach history) from our servers immediately. Aggregate analytics events (see Section 7) are anonymized and disassociated from your identity rather than individually deleted. Deleting your account does not cancel an active Apple subscription — manage subscriptions in iOS Settings > Apple ID > Subscriptions. You may also request deletion at any time by contacting us.

11. Your Rights

Depending on where you live (including California), you may have the right to know what personal information we hold about you, to access it, to correct it, and to delete it. You can exercise access and deletion directly in the App (Profile > Delete Account), or by contacting us at the address below. We will not discriminate against you for exercising these rights. Because we do not sell personal information or share it for behavioral advertising, there is nothing to opt out of.

12. Beta Testing (TestFlight)

If you use a beta version of the App through Apple TestFlight, Apple provides us with beta feedback you choose to send (including screenshots and crash logs) under Apple's TestFlight terms. Beta builds may collect additional diagnostic detail to help us fix problems. Beta data handling otherwise follows this policy.

13. Children's Privacy

The App is not directed at children under 17, and our beta program is limited to adults 18 and older. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the App or via email, and the version number and effective date above will change.

15. Contact

If you have questions about this privacy policy or your data, contact us at: andrew.collins188@gmail.com