Privacy Policy

4.1 Information you provide to us

When you create an Account and use the Services, you may provide:

• Identity and profile information: name, username, email address, date of birth, sex assigned at birth (if you choose to provide it), profile photo, banner image and bio, height, weight, body measurements (such as waist, hip and chest), body type and frame size, and dominant hand.
• Contact information: your email address. We do not collect your phone number.
• Authentication information: password (stored as a salted, irreversible hash), third-party sign-in tokens (Sign in with Apple, Google), and, if you enable two-factor authentication, your authenticator-app secret and hashed recovery codes. Biometric unlock (Face ID, Touch ID or fingerprint) is handled entirely by your device; PX never receives your biometric data.
• Health and lifestyle information: your training history and activity level; injuries, recent surgery, movement restrictions and pain patterns; diagnosed conditions you tell us about (for example epilepsy or seizures, heart conditions, high blood pressure, glaucoma, panic disorder or other chronic conditions); allergies and intolerances; accessibility needs; typical sleep hours; dietary pattern, food preferences and nutrition goals; stress levels; goals and life context; and any other context you provide during onboarding or in ongoing conversation with the AI Coach.
• Reproductive and menstrual health information, where you choose to provide it or enable cycle tracking: cycle dates and cycle length, symptoms and notes you log, pregnancy and breastfeeding status, contraception type, menopause stage and menopausal hormone therapy status. Your day-to-day cycle log (period dates and the symptoms and notes you log each day) is stored on your device and mirrored to your Account, so that it survives a new phone or a reinstall; it is kept as a rolling window of your most recent 180 days of daily reports, and older reports are removed automatically. The profile fields and your current cycle phase are stored in your Account so that the AI Coach can adapt your training and nutrition. You can delete the cycle log at any time with “Reset cycle log” in the app, which removes it from your device and from your Account.
• Socio-demographic and life context: occupation, cultural background, life circumstances, household type, caregiving responsibilities, work-stress level, long-term vision, your “one-sentence why”, stage of change and preferred communication style.
• Schedule information: time zone, wake and bed times, preferred training times and days, and quiet hours.
• Logged activity: workouts (including heart rate, effort, calories, a location description and notes), meals and photos of meals, hydration, planned meals, recipes and shopping lists, quick logs (including any photos or videos you attach), protocols and supplements, mind sessions, mood, journal entries, quick flags (such as sick, travelling or overwhelmed), life events (such as races, weddings or surgery), and any other activity you record in the Services.
• Body scans (opt-in): progress photos you take, stored on your device by default or in your private cloud storage if you choose cloud sync, and the body-composition snapshot derived from them. See Section 6.7 for the optional AI narration of a scan.
• Documents you upload for the AI Coach to read, such as blood-test results, physiotherapy reports, doctor’s letters or training programmes. The text or image is processed transiently and used only to contextualise your coaching (see Section 6).
• Saved training places: the name, precise map coordinates, map link and available equipment of the training locations you choose to save.
• Conversation content: messages you send to the AI Coach, including voice transcripts where you use voice features, together with the conversation summaries PX generates and your ratings and comments on individual AI Coach messages.
• Community content: posts (text, photos and videos), comments, likes, reposts, saves, follows and follow requests, blocks, mutes, reports, and sessions you share with other members. Media you attach to posts and your profile photo are stored in publicly readable storage so that other members can see them.
• Payment information: where you subscribe through Apple or Google, they collect your payment details directly. We receive transaction confirmation, subscription status, purchase history and a token identifying the transaction (via RevenueCat); we never see or store your card number.
• Support information: any information you provide when contacting our support team, reporting a bug or requesting a feature, together with basic device details attached to the request.
• Account lifecycle feedback: the reason you give when pausing, cancelling or deleting your Account or subscription, and any notes you add.
• Your consents and preferences: your acceptance of the Terms, AI data consent, health-data (intake) consent, marketing preference, privacy settings and notification preferences.

4.2 Information we collect automatically

When you use the Services, we automatically collect:

• Device information: device model, platform, operating system and version, app version and build, language and locale settings, time zone, when your device was last seen, and your push notification token and permission state.
• Usage information: features you use, sessions you start and complete, screens you view, in-app actions you take, the times you open and close the app (used to predict when a coaching nudge is most useful to you), and which Community posts were shown to you (impressions).
• Diagnostic information: error logs, crash reports and performance traces, collected through Sentry under a random identifier rather than your name or email, with authentication details stripped.
• AI usage telemetry: for each AI request, the model used, token counts, cost and latency, so that we can monitor reliability and cost. This telemetry is disconnected from your user ID when your Account is deleted.
• Security events: sign-in and two-factor authentication events, used to protect your Account.
• Network information: IP address and general location derived from it (city or region level only). We do not collect precise location unless you use a location-based feature, namely: weather-aware planning (your coordinates are sent to Apple WeatherKit and, as a fallback, rounded to roughly 1 km before being sent to Open-Meteo); saved training places (precise coordinates you choose to save); place search (your search text and approximate location are sent to OpenStreetMap’s Nominatim service); and commute-time estimates (used transiently and not stored).
• Referral attribution: on Android, the Google Play install referrer, so that a referral invite can be credited to the member who sent it.
• Subscription events: when you subscribe, renew, cancel or receive a refund through Apple or Google, we receive the corresponding event from RevenueCat and store it against your Account.
• Cookies and similar technologies: on the website, we use cookies as described in Section 17.

4.3 Information from third parties

With your explicit permission, we receive information from Wearable Integrations and other third-party services you connect:

• Apple HealthKit (read-only — PX never writes to Apple Health): steps, walking and running distance, active energy, heart rate, resting heart rate, heart rate variability, sleep analysis, respiratory rate, height, weight, dietary energy, protein, carbohydrates and fat, water intake, mindful sessions, and — only where you identify as female or enable cycle tracking — menstrual flow. You choose which of these to grant when you connect Apple Health.
• Google Health Connect (read-only — PX never writes to Health Connect): steps, distance, active and total calories, exercise sessions, heart rate, resting heart rate, heart rate variability, blood pressure, blood glucose, blood oxygen (SpO₂), body temperature, respiratory rate, weight, height, body fat, nutrition, hydration, sleep, and menstruation. You choose which of these to grant when you connect Health Connect.
• Terra: data from wearables and health apps that you connect through the Terra aggregator — including WHOOP, Garmin, Fitbit, Polar, Withings, Oura, Coros, Suunto, Ultrahuman, Strava, TrainingPeaks, Zwift, Wahoo, MyFitnessPal, FatSecret, MapMyFitness, RideWithGPS, Decathlon, Dexcom and others. Terra delivers activity, sleep, daily, body, menstruation and hormone data types. We keep the raw data payloads Terra sends us for 30 days, after which they are redacted, and delete them after 90 days; the structured metrics extracted from them remain in your Account.
• Bluetooth heart-rate monitors: live heart rate and a calorie estimate during a session from a chest strap or a watch in broadcast mode. This works only while the app is in the foreground, and PX stores nothing about the monitor beyond its Bluetooth identifier.
• Calendar integrations: where you connect Google Calendar, Outlook (via Microsoft Graph), or Apple Calendar, PX reads your calendar events — including their name, start and end time, busy/free status, and location — to display your schedule in the app and to plan PX sessions around your existing commitments. PX processes this on your device and does not read attendees or event notes/description. This information is not transmitted to PX’s servers, is not used to train or prompt the AI Coach, and PX never accesses event attendees, notes, or descriptions. Data minimisation is enforced at the network layer so attendees, notes and descriptions are never even returned to the device. Our use of Microsoft Graph calendar data is likewise limited to reading the same event details to display your schedule and plan sessions, consistent with Microsoft’s API terms, and Apple Calendar data is read on-device via EventKit.
• Authentication providers: where you sign in with Apple or Google, the provider tells us your verified email address and (with your permission) basic profile information.

You can disconnect any Wearable Integration or third-party connection at any time in Settings. Doing so will stop new data flowing from that source. If you add the PX home-screen widget, the title and time of your next calendar event may be shown in the widget on your device.

4.3.1 Writing PX sessions to your calendar

When PX adds a session (workout, meditation, or recovery block) to your calendar, PX does so directly through your device’s calendar or your calendar provider — PX’s servers are not involved in creating the event. PX can add sessions you choose to save; it cannot edit or delete your existing calendar events.

• For Apple Calendar: PX uses Apple’s native EventKit on your device. The system calendar sheet opens, and you save the event to your local calendar yourself.
• For Google Calendar and Outlook: PX builds a standard “create event” link (Google Calendar / Outlook deep-link) and opens it on your device. The event is created by your Google or Microsoft account directly; PX’s backend has no role in writing the event.

The only thing PX stores locally is an optional on-device session cache that allows PX to rehydrate the workout detail when you return to it. PX does not record on its servers which calendar events you have created.

4.4 Information about other people

If you invite a friend to PX, refer someone using a referral link, or interact with another user in the Community, we receive Personal Information about those individuals (such as their email address or username). We use that information only for the limited purpose for which you provided it.

4.5 Special category data

Some of the information you provide or that we collect is “special category personal data” under the GDPR and UK GDPR, “sensitive personal information” under the CPRA, and “sensitive information” under the Australian Privacy Act. This includes:

• Health Data, including mental-health information you share (such as mood, stress and journal entries)
• Reproductive and sexual health information (cycle tracking, pregnancy, breastfeeding, contraception, menopause and hormone therapy), where you choose to provide it
• Body images (body scans), where you opt in. PX does not use body-scan images to identify you and does not process them as biometric identifiers.
• Information that reveals racial or ethnic origin, cultural background, religious beliefs, or sexual orientation (where you choose to disclose this — for example in your profile’s cultural-background field, in conversation with the AI Coach, or in Community content)

We process special category data only where (a) you have given us your explicit consent, (b) it is necessary for the provision of the Services you have requested, or (c) another lawful basis under applicable law applies. You can withdraw consent at any time by adjusting your settings or by contacting us.

4.6 Children

The Services are intended for people aged 18 years and older. We do not knowingly collect Personal Information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it as soon as practicable. If you believe we have collected information about a person under 18, please contact support@pxmembership.com.

5.1.1 To deliver the Services

• Create and manage your Account.
• Authenticate you when you sign in.
• Deliver personalised coaching across Move, Mind and Fuel through the AI Coach.
• Generate, adjust and remix workouts, meal plans, mindfulness sessions and recovery protocols.
• Compute scores (PX Score, longevity metrics, healthspan capture, biological age direction) from the information you provide and receive.
• Synchronise data with Wearable Integrations you connect.
• Process subscriptions, payments and refunds (via Apple, Google and RevenueCat).
• Send coaching nudges and reminders as push notifications, generated on our servers on the schedule and quiet hours you configure.
• Send service-related communications (account confirmations, billing receipts, security alerts).
• Provide customer support and respond to your requests.

5.1.2 To personalise and improve

• Adapt coaching to your patterns, preferences and goals over time.
• Maintain a persistent memory of insights about you that improves the quality of the AI Coach over time (you can review, edit and delete these insights at any time in Settings → What PX knows about you).
• Detect behavioural patterns across your data (for example, how sleep affects your mood the next day) and predict when a coaching nudge is most useful, so that coaching arrives when it helps.
• Compute analytics to understand which features are working and which are not.
• Detect and prevent abuse, fraud, security incidents and violations of our Terms of Use.

5.1.3 To communicate with you

• Send transactional emails (account, billing, security).
• Send product updates, coaching tips, educational content, offers and reminders to finish setting up your Account, as described in Section 13.
• Conduct optional surveys, research and product testing.

5.1.4 To comply with the law and protect rights

• Comply with legal obligations, including responding to lawful requests from authorities.
• Enforce our Terms of Use and other agreements.
• Establish, exercise or defend legal claims.
• Protect the rights, property and safety of PX, our users, and the public.

5.2 Lawful bases (EU / UK)

If you are in the EEA or the UK, we rely on the following lawful bases under the GDPR and UK GDPR:

Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to the processing — see Section 11.

5.3 We do not sell your Personal Information

We do not sell your Personal Information for money, and we do not “sell” or “share” your Personal Information for cross-context behavioural advertising as those terms are defined under the CPRA and other US state laws. We do not use your Health Data or AI Coach conversations to train any general-purpose AI model. Our third-party AI providers are engaged on their commercial, business or paid API tiers, under terms that — with the limited exception of our voice provider (see Section 6.4) — do not permit them to use your prompts or our outputs to train their general-purpose models, and never permit the use of your data for advertising.

6.1 Our AI providers

PX uses a small number of third-party AI providers to deliver coaching. We use them on their commercial, business or paid API tiers — never their free consumer products. When you use AI features, the following data is sent solely to generate your result:

• Anthropic, PBC (Claude) — our primary provider, used for all generative coaching: chat with PX, session and plan generation, your daily briefing, food-photo analysis, body-scan narration where you opt in for a scan, and reading documents you upload (for example blood-test results or a training programme). We send your messages, any images or documents you attach, and the context PX assembles to personalise the response (your goals, profile, health conditions and cycle phase where relevant, and the training, nutrition, sleep and health data you have shared). PX uses Anthropic’s commercial API. Under Anthropic’s Commercial Terms your inputs and outputs are not used to train Anthropic’s models; Anthropic deletes API inputs and outputs within 30 days, except where a longer period is required to investigate a policy violation or by law.
• OpenAI, L.L.C. — a fallback provider, used only for short, structured tasks — for example extracting memory insights from your check-ins, journal entries and conversations, detecting the intent of a message, predicting when to send a nudge, parsing a food description or a simple food photo, and translating a plan — when Anthropic is unavailable, or, where we enable it, for such structured tasks that are cheaper and have been shown to be equally accurate. OpenAI receives only the specific structured request and the minimal context needed to complete it — not your full conversation. This fallback is currently switched off in our production builds. PX uses OpenAI’s API. Under OpenAI’s API terms, data submitted through the API is not used to train OpenAI’s models by default; OpenAI retains API data for up to 30 days for abuse monitoring and then deletes it, except where a longer period is required by law.
• Google LLC (Gemini API / Google Cloud) — a second fallback provider for the same short, structured tasks as OpenAI, likewise currently switched off in our production builds. Google receives only the specific structured request and the minimal context needed to complete it. PX uses the paid tier of Google’s Gemini API (and/or Vertex AI) — never the free tier. On the paid tier, Google does not use your prompts or responses to train or improve its models; Google retains data only transiently for abuse monitoring (up to 55 days on the Gemini API, or up to 90 days on Vertex AI and only where content is flagged for review) and then deletes it.
• ElevenLabs, Inc. — text-to-speech for the voice coach, breathwork and meditation. We send only the text to be spoken (the AI Coach’s reply); ElevenLabs returns audio. Important: unlike our text providers above, ElevenLabs’ standard terms allow it to retain submitted content and to use it to improve its services. See Section 6.4.

Speech-to-text (converting your spoken words to text) uses your device’s built-in Apple or Google speech recognition, governed by your device permissions. Your voice recordings are not sent to PX or to our AI providers; depending on your device settings, Apple or Google may process the audio on their own servers under their own terms. You can withdraw AI consent at any time in Settings → Privacy, which disables AI coaching features.

6.1.1 What we send to our AI providers

When you interact with the AI Coach, we transmit the following categories of personal information to our AI providers to generate a response. Anthropic, as the primary provider, may receive all of these; the OpenAI and Google fallbacks receive only the subset needed for the specific structured task they perform:

• the message you send (text or voice transcript);
• images and documents you attach (for example food photos, a photo of a gym programme, or a file such as blood-test results);
• relevant parts of your PX profile (your goals, preferences, training context, dietary context, cycle phase where you track it, and the health constraints you have shared with us);
• recent conversation history with the AI Coach;
• structured insights we have extracted from your prior conversations and logs (the “memory” the AI Coach references — see Section 6.6);
• your current biosignals where available (e.g., HRV, sleep score, recovery readiness, training load);
• context PX assembles to plan around your day (local weather and the training places you have saved);
• system context required for the response (which agent is being addressed, current scoring state, active coaching flags).

What we do not share with our AI providers

• your name, email address, payment information, postal address, or any other directly identifying personal information that is not required for the response;
• your account credentials;
• your raw calendar event content (see Section 4.3);
• any content from third-party services that is not required for the response.

6.2 Explicit consent obtained before any AI processing

PX obtains your explicit consent to the data sharing described in this Section 6 through a dedicated AI Consent screen presented during onboarding, before any personal data is sent to any AI provider. You must grant this consent before any AI processing takes place, and you cannot interact with the AI Coach until you have done so. You may withdraw your consent at any time in the app — in Settings → Privacy, by ceasing to use the AI Coach, or by deleting your Account. Withdrawing consent disables the AI features and stops further AI processing of your data; it does not affect the lawfulness of processing carried out before the withdrawal.

6.3 How our AI providers handle and protect your data

We engage our AI providers as Sub-processors under data-protection terms. On the commercial and paid tiers we use, our providers:

• process the data we send only to generate your result and for limited abuse-monitoring, security and legal-compliance purposes;
• do not use your prompts or our outputs to train or improve their general-purpose models — this applies to Anthropic, OpenAI and the paid Google tier we use; the position for our voice provider is described in Section 6.4;
• retain your inputs and outputs only for a limited period and then delete them — by default up to 30 days for Anthropic and OpenAI, and, for Google, only transiently for abuse monitoring (up to 55 days on the Gemini API, or up to 90 days on Vertex AI where content is flagged) — except where a longer period is required by law or to investigate a policy violation;
• do not sell your data and do not use it for advertising;
• are engaged under a Data Processing Addendum (DPA) or equivalent written data-protection terms, with appropriate international-transfer safeguards (see Sections 7 and 9).

Where a provider offers a zero-data-retention or equivalent arrangement, we will adopt it and update this Policy to say so. Unless this Policy states otherwise for a given provider, the default retention periods above apply.

6.4 Voice features (ElevenLabs)

Voice features are delivered by ElevenLabs, Inc., a US-based voice-synthesis provider. When you use voice mode, only the AI Coach’s response text (the words to be spoken) is sent to ElevenLabs to generate audio; your own messages and your profile data are not sent to ElevenLabs, although the reply itself may refer to details you have shared with the AI Coach. Unlike our text AI providers, ElevenLabs’ standard terms permit it to retain submitted content and to use it to improve and train its models, and you should assume that ElevenLabs may retain and use the text sent for voice features in accordance with its own privacy policy (elevenlabs.io/privacy-policy). We minimise what we send — never your own words, only the reply — and if we adopt ElevenLabs’ zero-retention or training opt-out arrangements we will update this Policy to say so. You can use PX without voice features; turning voice off stops any further data going to ElevenLabs.

6.5 Health and fitness data in AI coaching context

Your health and fitness data — including data you log (workouts, meals, hydration, mood, biometrics) and data from Apple Health / Apple HealthKit, Google Health Connect, and connected wearables via Terra (such as heart rate, HRV, sleep, recovery, steps and other metrics) — may be included in the context PX sends to its AI providers when it is relevant to answering your request. This data is used only to generate your coaching response and to keep the service reliable. It is never sold, never used for advertising, and never used to build advertising or marketing profiles. Health data obtained through Apple HealthKit is handled in accordance with Apple’s HealthKit requirements: it is not used for advertising or marketing, is not sold or disclosed to data brokers, and is used only to provide health and fitness services to you. You control which health sources are connected and can disconnect any of them at any time in Account settings (see Section 4.3).

6.6 The AI Coach memory

The “memory” the AI Coach references in your conversations is stored only on our own infrastructure (see Section 8). It is generated by extracting structured insights from your check-ins, conversations, journal entries, quick logs and session notes using the same AI providers described above, under the same terms — on the tiers we use, your data is not used to train their models (subject to the voice-provider position in Section 6.4). PX also detects routine patterns across your data statistically (for example, that low sleep tends to lower your mood the next day) and stores those as insights. You can review everything the AI Coach has stored about you at any time in Settings → What PX knows about you, search it, edit it, add to it, or delete any or all of it. Deleting an insight removes it from future coaching context.

6.7 What the AI Coach does not receive

For clarity and completeness:

• PX reads event names, times, busy/free status, and locations to show your schedule on your device. This calendar data is never transmitted to Anthropic, OpenAI, Google, ElevenLabs, or any other AI provider. See Section 4.3.
• Payment information, account credentials and contact details are never transmitted to AI providers.
• Body-scan images are stored on your device by default and are not sent to any AI provider unless you choose otherwise. If you turn on cloud sync and additionally opt in to AI narration for a specific scan, that image is sent to Anthropic to generate a neutral written description of the scan. The narrator is instructed never to estimate body fat, weight, age, ethnicity or health status from the image. You can delete any narration, any scan, or all of your scans at any time in the body-scan privacy settings.

6.8 AI providers at a glance

The table below summarises how each AI provider is used and whether it uses your data to train its models. The final column links each provider’s current data-usage terms (shown as plain text); we review these periodically. For the authoritative list of all Sub-processors, see Section 7.

6.9 Limited Use of Google API data

PX’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. PX uses Google Calendar data solely to display your schedule in the app and plan around your commitments; it does not transfer or sell this data, does not use it for advertising, and does not allow humans to read it. Google Calendar data is processed on-device only and is never transmitted to PX’s servers or any third party.