Privacy Policy

Who we are

Athlyon is an iPhone app for following training plans written by your AI. It's built and run by an independent developer ("we", "us"). Questions about this policy go to [email protected].

What we collect

Account. Your email, your name, and a password. The password is handled by our authentication provider and stored only as a hash.
Training data. Your plans, workouts and exercises; the sets you log (reps, weight, time, distance); workout summaries (duration, how hard it felt, notes); where you are in each plan.
Preferences. Units and which notifications you want.
AI connection. When you connect an AI client, which client it is (Claude, ChatGPT or other), when you connected and when it was last used. Personal connection links are stored only as a hash.
Plan sharing. When you share a plan, the recipient's email and the plan's name. The recipient sees your first name.
Notifications. Your device's push token, so we can send the notifications you turned on.
Feedback. Anything you send through Send feedback, with your app version and platform.
Launch list. Your email, if you ask to hear when Athlyon launches.

We don't use advertising, third-party analytics or tracking. We don't access your contacts, location, photos or Health data. We don't sell your data.

How we use it

To run Athlyon: sync your plans and logs, show your progress, keep your settings.
To let your AI client read and update your plans and training data, only when you ask it to.
To send the notifications you turned on, like when your AI creates a plan or someone shares one with you.
To answer feedback and support requests, and to keep the service secure.
To email you once at launch, if you joined the launch list.

Your AI client

Athlyon connects to Claude, ChatGPT and other clients through the Model Context Protocol. When you ask your client to do something with your training, it calls Athlyon's tools and receives the plans and training data those tools return.

What you type into your AI client, and what it does with the data it receives, is governed by that provider's own terms and privacy policy. You can disconnect a client at any time from the app.

Only the service providers that run Athlyon, each limited to what it needs:

Supabase: database, sign-in and the server that talks to your AI client.
Expo and Apple: delivering push notifications.
Apple: App Store distribution and purchases.
Cloudflare: hosting this website.

We share data with anyone else only if the law requires it.

How long we keep it

We keep your data while your account exists. Delete your account from Profile → Delete account and your account, plans, logs, shares, connections and push tokens are deleted. Feedback you sent is kept, unlinked from you. Provider backups may hold deleted data for a short time before it expires.

Your choices and rights

You can see and edit your data in the app, turn notifications off, disconnect your AI client and delete your account at any time. To get a copy of your data, correct it or ask anything about it, email [email protected]. Depending on where you live, you may have further rights under local law, and we'll honor them.

Security

Data travels over encrypted connections. Each account can reach only its own data, and connection links are stored as hashes, not in plain text. No system is perfectly secure, so keep your password private.

Children

Athlyon isn't meant for anyone under 13, and we don't knowingly collect their data. If you think a child has an account, email us and we'll delete it.

Changes

If this policy changes, we'll update this page and the date above. For significant changes, we'll let you know before they apply.