Privacy Policy

What we collect

Account. Your email address and a password. Sign-in is handled by our auth provider (Supabase); your password is stored hashed — we never see it.

Athlete profile. Name, birthday, sex, height, weight, sport background, and training history — the details that let programs fit you instead of a generic user.

Training data. Workout logs, daily check-ins (sleep, mood and energy, and anything sore or hurting), test results (with an optional video if you choose to record one), and your body-weight history.

Nutrition logs. The foods you log, with calories and macros. When you scan a barcode or search for a food, the barcode or search text is sent to our server, which looks it up with our food-data provider (FatSecret or the Open Food Facts database, depending on configuration). Only the barcode or text is sent — never your name, email, or anything that identifies you — and we don't keep a history of your lookups.

You can also log food with a photo. Snap a meal sends a photo of your food to our server, which asks FatSecret what foods are in it and how much; you check the portions before anything is logged. Scan a label sends a photo of a Nutrition Facts label to our server, which asks Anthropic's Claude to read the numbers off it. A photo is sent only when you take one, and only the photo goes — never your name, email, or account — so point the camera at the food, not at people. We don't store the photo. What you then log is saved like any other food. If you scan a label because we didn't know its barcode, the barcode is saved with your entry, so your next scan of it finds your numbers. We count how many photos you send each day, because there's a daily limit, and keep that count for 30 days.

Chats. The messages you send and receive in the app — with an AME coach, with a team coach, in a team chat, or, as a linked parent, in your child's chats — and any photos or videos attached in a chat with an AME coach. Team chats and chats with a team coach are text only.

Billing. If you pay, or have paid, for anything here, a customer and subscription reference from our payment processor so we know whether your subscription is active. Your card details go to the processor, not to us.

Booking a call. If you book the free 30-minute call, in the app or on this site, we collect your name, email, phone number and your answers to the booking questions (like what you train for and your current vertical), so the call can happen and the coach comes prepared.

Survey answers. Now and then the app asks a short survey — about how the app is working for you, or what coaching should look like. You can skip any of them. The answers you give are saved with your account, and we use them to decide what to build and what, if anything, should cost money later.

Affiliate program. Everyone has an invite code. We record who joined with yours, with their name as it was then, and what that has earned you (nothing is earned on free accounts). The person whose code you used sees how many people joined with it — never your name. If you set up earning in the app, we also keep a copy of your name and email as they were at the time, how you want your balance used, your payout method and handle (like your PayPal email address), and whether we have your tax form. The tax form itself never goes into the app and never goes by email: before your first payout you upload it on your account page on this site. The file is stored privately and only the owner of Athlete Made Easy can open it; our database records only which form it is, where the file is and when it arrived. We never store a Social Security or tax ID number anywhere but inside that file.

Notifications. There are two kinds. Training reminders are scheduled on your own device and never reach our servers. We also send push notifications from our server — for example when you get a message in the app, a team invite or a request to join a team, a parent linking to your account, your monthly progress card, a nudge when a session is waiting, a survey, or an announcement — and for account notices. To deliver those, your phone gives us a push token: an address for that one device, handled by Expo's push service and Apple. It says nothing about you beyond which account it belongs to, and it goes when your account goes. The app asks for notification permission during onboarding, and you can turn notifications off anytime in Settings or in your phone's settings.

Email updates. If you joined the email list on this site, we have that email for updates. Every message has an unsubscribe link that works.

Why we collect it

The main reason is to run the product. Your profile shapes your programs, your logged sets set your next weights, your tests and check-ins show how you are doing, your food log is counted against your daily targets, your history draws your progress charts, and your chat connects you with your AME coach (or, on a team, your team coach). Your email is used to sign you in and for service messages that matter — password resets, or changes to these terms or this policy.

We also use your training data to improve the product — refining our programs and training framework. Connor may review your identified data for this (the same access described under "Who can see it"); any analysis across athletes, and anything shared or published outside Athlete Made Easy, is de-identified. This research use is on by default, and you can turn it off anytime in the app under Settings → Data use. (Collecting your data to run the app and your training isn't optional — that's what makes the service work — but this improvement use of it is yours to decline.)

We never use your data for advertising, and we don't run third-party analytics or tracking SDKs in the app. Our marketing website counts page views with Vercel Web Analytics, which uses no cookies and can't identify you. It also sets its own cookies: ame_attr (90 days) remembers how you first got here — the campaign tags on the link you clicked, an ad click id if you came from an ad on Facebook, TikTok or Google, the site that referred you, and the first page you landed on; ame_vid is a random id for this browser (180 days); and ame_lt remembers the last link of ours you clicked (30 days). With them we keep a log of which of our pages this browser visits, and which post or link led to each visit, booked call and purchase. With each visit we also record which app's built-in browser you were in, if any (Instagram's, for example), and whether you were on a phone, a tablet or a computer. We don't store your IP address or any other details of your browser; to stop abuse we keep a scrambled code made from your IP address, which changes every day, for two days. When you book a call or pay, the random id and the id of the last link you clicked go along to Cal.com, which runs our bookings, and Stripe, which takes our payments, so we can match the booking or payment back to that link. They aren't shared with anyone else, and nothing about it is sold. To connect a booked call or a purchase to the link that brought you, we also use a one-way code made from your email address, never the address itself. If you give us your email on this site, we save how you got here with your account, so we can tell which post or link actually brought people in. The log keeps the random id for 400 days, and then the id is removed from it. Clearing cookies for this site gives your browser a new random id from then on; it doesn't delete what was already logged.

Where your data lives

Database and accounts — Supabase, hosted in the United States.

Photos and videos — Cloudflare R2 (a storage service), in the United States. Media links are signed and short-lived; there are no public URLs to your videos.

Email delivery — a transactional email service sends account emails (like password resets) on our behalf.

Payments — if you pay for anything here, our payment processor (Stripe) runs the transaction and holds your billing details; we only receive a customer and subscription reference, never your full card number.

Booking a call — Cal.com runs our call booking. When you book the free call, Cal.com receives your name, email, phone number and your answers.

Affiliate cash payouts — if you are ever paid cash through the affiliate program, PayPal sends it. PayPal receives the payout address you gave us and the amount.

App updates — the app checks for over-the-air updates through Expo (EAS Update). At launch it sends your device platform, the app and update version, and a random per-install identifier — no account or profile data.

Except for food photos (below), these providers process data only to provide their service to us — they don't get to use it for their own purposes.

Food photos — Snap a meal sends your photo to FatSecret, the food database behind search and barcodes, which finds the foods in it. Scan a label sends your photo to Anthropic, whose Claude model reads the label. They get the photo and nothing that names you. Anthropic says it doesn't train its models on what is sent through its API, and that it deletes it within 30 days unless its safety systems flag it or the law requires keeping it longer. FatSecret's terms for developers don't say how long it keeps a photo it receives or what else it may do with one; its own privacy policy covers that. If that matters to you, search for the food or scan its barcode instead: those send only the text or the barcode.

Who can see it

You. Everything you put in is visible to you in the app.

Connor and Athlete Made Easy's coaches. Training data (profile, logs, readiness, tests, nutrition, and your chat with an AME coach) is visible to Connor and Athlete Made Easy's coaches — that's how coaching and product improvement work. If someone reports a message in any chat, Connor sees that message.

Your team, if you join one. Joining a team shows its team coach, its other members and any parent linked to a member your name, your photo, your goal and your sport background, and anything you post in the team chat is visible to all of them. Connor can also read every team chat, to keep it safe for the athletes in it, and can remove a message that breaks the rules. He never posts in a team chat, and Athlete Made Easy's other coaches cannot read one. The team coach also sees your training — your program, sessions, bests, tests and whether you trained. That includes body tests and measured weight: a body-weight test, and the weight a bodyweight exercise like a chin-up is logged at. The team coach has a one-to-one chat with you of their own, and cannot read or post in your chat with our coaches. They do not see your food, your day-to-day weigh-ins or your daily check-ins. Leaving the team ends the team coach's access and takes you off the roster; anything you already posted in the team chat stays there.

Your parent, if you link one. An athlete under 18 can link a parent or guardian, and a parent can ask to link to their kid. It is optional, either side can start it, the other side confirms it, there is nothing to sign, and it can happen at any time. A linked parent sees the athlete's training the way a team coach does, and reads and posts in the athlete's one-to-one chats with an AME coach or a team coach. They can read the chat of any team the athlete is on, but not post in it. The same window as a team coach, plus the athlete's day-to-day weigh-ins: body tests, measured weight and weigh-ins are in it, and food and daily check-ins are not. The link can be removed by the athlete once they turn 18. A linked parent's name and photo are visible to the athlete and to the team coach of any team the athlete is on, and what a parent posts in a one-to-one chat is seen by everyone in that chat.

Nobody else. We don't sell your data, share it with advertisers, or hand it to data brokers. Program outcome stats may be shown in anonymous aggregate only (for example, "average improvement across athletes who finished this program") and only once enough athletes have completed it that no one can be identified. Beyond those public aggregates, improving our training is a core purpose of the product: Connor may review your identified training data (the same operator access noted above) to refine our programs, and any cross-athlete analysis or anything shared or published outside Athlete Made Easy is de-identified. This improvement use is on by default and you can turn it off in Settings → Data use; it never means selling your data or identifying you to anyone outside Athlete Made Easy.

The only exception: if the law genuinely requires us to disclose something, we will — and we'll tell you unless we're legally barred from doing so.

How long we keep it

While your account is active — we keep your data as long as your account exists, so it's there when you come back.

When you delete it — your access closes immediately and you're signed out. For 30 days you can restore the account by emailing us; after that, the next steps are permanent. We remove your identifying details (name, birthday, and the like) and keep your training data only in anonymized form — no longer linked to you — because de-identified training data helps us make programs better for everyone.

Your one-to-one messages (with your AME coach or a team coach) are kept for a 90-day review window (so an account can be looked into if there's ever a concern) and then permanently deleted, media included. Under-13 accounts are the exception — they're fully deleted with nothing retained (see "Kids").

Posts in someone else's chat stay there. Anything you posted in a team chat stays in that team chat after your account is deleted. So does anything you posted in an athlete's one-to-one chat as their parent or their team coach. Those posts go when that chat does. An under-13 account is the exception here too: its posts go with it.

Affiliate payout and tax records — who earned what, what was paid, and the name and email it was paid to — are kept after an account is deleted, because payment and tax records have to be.

Photos and videos are purged from storage by our cleanup process within about a day of the record that references them being removed. Residual copies in our database provider's routine encrypted backups expire on the provider's standard schedule.

Your rights and controls

See it — your data is in the app, on your account, not hidden in a warehouse.

Delete it — fully self-service: in the app under Settings → Delete account, or on the web at athletemadeeasy.com/account. It takes effect immediately; what we keep afterward, and the 30-day window to restore, are described in "How long we keep it" above.

Everything else — want a copy of your data, a correction, or have any other request (including rights under laws like GDPR or the CCPA)? Email support@athletemadeeasy.com and we'll sort it out.

Opt out of the research use — using your de-identified data to improve our programs is on by default, but you can turn it off anytime in the app under Settings → Data use, with no effect on your training. (Collecting your data to run the app and your training is required to use the service — that part isn't optional.) If you also want us to stop using sensitive information for anything beyond running the app, or to exercise any other right under laws like GDPR or the CCPA, email support@athletemadeeasy.com.

Kids

Athlete Made Easy is for ages 13 and up, and the app enforces that at sign-up. We don't knowingly collect personal information from children under 13; if we learn an account belongs to a child under 13, we'll delete it and its data (as the U.S. COPPA law requires). If you believe a child under 13 has an account, email support@athletemadeeasy.com.

Changes to this policy

If this policy changes, the new version is posted here with a new effective date. If a change meaningfully affects how your data is handled, we'll email account holders before it takes effect.

Contact

Connor Barth · Athlete Made Easy · Clearwater, Florida — support@athletemadeeasy.com.