Privacy policy

Your account

Your email address and name from Google or Apple sign-in, or your email address and a password you choose. Passwords are stored only as a one-way hash. For the iPhone app, Polaris also stores your Apple user ID and the email Apple shares, which may be a private relay address.

Apple Health (iPhone app only)

If you allow it, the app reads these from Apple Health: active and resting energy, step count, body weight, body fat percentage, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, walking and running distance, cycling distance, swimming distance, sleep, and workouts. The app asks only to read. It does not ask to write to Apple Health. You can change or remove this access at any time in the iPhone’s Health settings.

What you tell Coach

Your messages, the photos of food you send, your answers to Coach’s questions, and the notes Coach keeps from your chats (facts and preferences). You can review or delete these notes on the web, in Settings.

Your records

Food, weigh-ins, pain check-ins, workouts, training plans, goals and targets. Coach records something only after you confirm it, and you can also log some of these yourself in the console.

Other fitness sources

If your profile has other sources turned on, such as Oura or Strava, their data appears in your records and Coach can read it.

Your iPhone

A device name, a token that identifies this iPhone to Polaris (stored only as a hash), the push-notification token Apple gives the app, when the app last connected and last synced, your notification choices and quiet hours, and crash and hang reports from Apple’s MetricKit with the app and iOS version. These reports describe app crashes and hangs, not health data.

Using the website

Polaris counts page views and a few button presses, each with the page path, a device class (phone, tablet or desktop) and a random session ID kept in your browser session. Signed-in visits are tied to your profile. Signed-out visits, including this page, are recorded as anonymous. Polaris records this itself and does not use a third-party analytics service.

Cookies

A session cookie that keeps you signed in, and an invite cookie that lasts two hours while you accept an invitation. A cookie also remembers which profile an administrator is viewing.

Emails and notifications

A record of the emails and push notifications Polaris sends you, so it does not send the same one twice and respects your notification choices.

• To show you your data and to let Coach suggest training, food and recovery.
• To sync Apple Health, sign you in, and send the emails and notifications you receive.
• To find and fix mistakes in Coach. Polaris runs an automated review of Coach conversations and its operators read conversations when they investigate a problem.
• To keep the service running and secure, and to count which parts of it are used.
• Polaris does not sell any of your data, and does not use Apple Health data for advertising.

Polaris keeps your data on servers it operates in the United States. Conversations, notes, photos, sign-in and device records, and notification settings are in Polaris’s database. Your health data and records are in your personal data store, which Polaris keeps separately for each member.

When the iPhone app syncs, it sends Apple Health data to Polaris, and Polaris passes it to your personal data store without storing the upload itself. Traffic to Polaris’s servers passes through Cloudflare.

Polaris makes an encrypted backup of its database every night and keeps it in Cloudflare R2. Daily backups are kept for 15 days and monthly backups for 400 days.

Polaris uses these services to run. Each handles data under its own terms.

OpenAI

Coach’s replies are written by OpenAI language models. To answer you, Polaris sends OpenAI your messages, photos you attach, recent conversation and the parts of your records Coach needs, which can include Apple Health data. OpenAI models also write other Coach text, such as morning notes, and run the automated review of Coach conversations. Under OpenAI’s API terms, the data Polaris sends is not used to train OpenAI’s models.

Resend

Sends Polaris’s emails, including the access-request form on the welcome page. It receives the email address and what the email says.

Apple

Sign in with Apple in the iPhone app, and the Apple Push Notification service, which receives the app’s push token and the text of each notification.

Google

Sign in with Google on the website.

Cloudflare

Carries traffic to Polaris’s servers and stores the encrypted nightly backups.

TypeSafe

A decision-support service. Polaris may send it coded training information, such as a readiness band, the day’s session type and your goal, without your name, your messages or your profile ID. It may also send short summaries of Coach quality problems found in conversations.

GitHub and Slack

Polaris’s operators track Coach quality problems in private GitHub issues and Slack alerts. A problem report can include a short excerpt of a conversation. Test cases built from real conversations have names replaced first. When they are turned on, automated coding agents (Cursor) read these problem reports to propose fixes.

Polaris may also disclose information when the law requires it.

Polaris’s operators use an administrator console that shows members’ conversations, records, usage and technical logs. It is limited to administrator accounts. They use it to support you, fix problems and improve Coach. Members see only their own profile.

• Get a copy. In the iPhone app, open Settings, then Your data, then Request a copy. Polaris emails a download link to your sign-in address. The link works for 7 days. The copy does not include food photo images, and it holds only the most recent records from your personal data store.
• Delete your account. In the iPhone app, open Settings, then Delete account, and type DELETE to confirm. This cannot be undone. Polaris erases your Coach conversations and notes, your sign-in, push settings and crash reports from its own database at once. Your confirmed logs (food, weigh-ins, pain, workouts) and the health data Polaris copied from Apple Health are held on the Polaris data server and are erased within 7 days. Apple Health on your iPhone is not touched. Polaris also asks Apple to disconnect Sign in with Apple. If that cannot be done, the email confirming your deletion tells you how to remove Polaris yourself in your iPhone’s Settings. If the app says it cannot delete your account, or you use Polaris only on the web, email us and we will delete it.
• Backups and service providers. Copies in Polaris’s encrypted backups are removed when those backups expire (see Where it is kept). Copies held by the services listed above follow their own policies.
• Apple Health. You can stop Polaris reading Apple Health at any time in the iPhone’s Health settings.
• Notifications. In the iPhone app you can turn each kind of notification off and set quiet hours.
• Sign out. Signing out of the iPhone app revokes that iPhone’s token at once.

• Your conversations, notes, logs and synced health data are kept until you delete your account. After that, Polaris’s database is cleared at once and the data server within 7 days.
• Crash and hang reports from the iPhone app are deleted after 90 days.
• A code that connects your iPhone expires after 10 minutes.
• A data-copy link works for 7 days.
• Backups are kept for 15 days (daily) or 400 days (monthly).

• The keys that connect Polaris to your personal data store and your health sync stay on Polaris servers, and are never sent to your iPhone or browser.
• Passwords are stored only as a one-way hash. iPhone tokens and connect codes are stored only as hashes.
• Polaris checks your access on every request, and a person who is not signed in, or has no access, sees no member data.
• Backups are encrypted before they leave the server.
• If a security breach affects your data, Polaris will tell you as the law requires.

Polaris is for people aged 18 and over. It is not meant for children, and Polaris does not knowingly collect data from anyone under 18. If you believe someone under 18 is using Polaris, email us and we will delete their account.

When this page changes, the date at the top changes with it. Questions about privacy or your data, or a request to see, copy or delete it: [email protected], or by post to All Great Things Inc., 2297 Prospect Drive, Frisco, TX 75036.