Privacy Policy

Apex Zone · Operated by Andrew Klein · Last updated 2026-07-03

Apex Zone ("Apex Zone", "we", "us") is a hybrid-athlete training app operated by Andrew Klein, an individual. This policy explains what we collect, why, and your rights over your data.

What we collect

• Account: the email address you sign up with, plus a password (stored as a salted hash by AWS Cognito — we never see it).
• Workout data: the workouts, plans, sessions, sets, body weights, heart-rate samples, and GPS samples you record in the app. Synced to our server so you can switch devices, restore from backup, and receive AI insights.
• Heart rate & GPS: read from Apple HealthKit (when you grant permission) or from a paired Bluetooth heart-rate monitor. Used to compute zones, time-in-zone, distance, and pace.
• Apple Health metrics: when you grant permission, we read steps, resting heart rate, heart-rate variability, active energy, exercise time, VO₂ max, body mass, and sleep to inform your daily briefing and coaching. You can see exactly what's captured in Settings → Apple Health.
• Google Health / Fitbit (optional, only if you connect it): if you link your Google Health (Fitbit) account in Settings, we read your activity & fitness (steps, distance, active calories, exercise time), health metrics (resting heart rate, heart-rate variability, body composition), and sleep (stages and totals), and store them alongside your Apple Health data to show you trends and to ground your AI coaching. We also write your own completed Apex Zone workouts back to Google Health so your activity stays in sync across apps — we never modify or delete data we did not create, and we never write your health metrics or sleep. Disconnecting deletes the access tokens and stops further sync; existing rows are purged when you delete your account.
• Optional profile context: body weight, lift PRs, available equipment, units. Used to tailor AI coaching responses.
• Diagnostic logs: minimal, non-PII server logs (request paths, response codes). Not tied to your account beyond the duration of a single request.

What we don't collect

• We don't collect contacts, photos, or files outside the app.
• We don't use third-party analytics SDKs.
• We don't share data with advertisers.

How AI features use your data

The AI features — coach chat, workout insights, plan/program generation, daily and weekly briefings, body-composition photo analysis, and food logging — are powered by third-party AI providers. When you use one of these features, the app sends the relevant slice of your data to our AI server, which forwards it to our AI provider — Anthropic (Claude) or Google (Gemini) — to generate the response, then returns the text. Depending on the feature, the data sent includes: your stored profile and training preferences (age, body stats, goals, equipment, injuries); your recent workouts; connected Apple Health metrics (heart rate, sleep, activity); and, for body-composition and food logging, the photos you submit. These providers process the data under their API terms solely to generate your response and do not use it to train their models; we do not train models on your data either, and we do not sell it or use it for advertising.

We ask for your permission before sharing any data with these AI providers. AI data sharing is off until you explicitly enable it (a consent step is shown in the app), and you can turn it off at any time in Settings → Privacy → AI data sharing. While it is off, none of the AI features send your data and they simply stop working until you turn it back on.

Connecting your own AI assistant (MCP)

Apex Zone Pro lets you connect an outside AI assistant — such as ChatGPT, Claude, Claude Code, or Cursor — to your Apex Zone account, using the open Model Context Protocol. This is different from the AI features above: the AI provider is chosen by you, not by us, and your data is handled under that provider's privacy policy and terms once it leaves Apex Zone. We have no control over, and no visibility into, what that assistant does with the data after we hand it over.

Nothing is shared until you create a connection, and we ask you to confirm this specifically when you do — the general AI data-sharing consent described above does not cover it. When you create a connection you choose whether it is read-only or read and write, and whether it can see your own training or (for coaches) your client roster.

Through a connection, the assistant you connect can read: your workouts, plans and schedule; your completed sessions and set-by-set history; personal records; body weight, measurements and body-composition scores; heart rate, HRV, sleep and step data; and your nutrition log. With write access it can also create workouts and plans and add log entries. No connection can delete your data, and a coach connection can only reach athletes on that coach's active roster.

We keep a log of every change made through a connection for 90 days so you can see what an outside assistant did, and you can revoke any connection at any time in Settings → Connect your AI (or, for coaches, in the trainer portal). Revoking takes effect immediately.

Sharing with a trainer

Apex Zone lets you link your account to a human trainer — a real person you choose to work with, not Apex Zone staff and not the AI coach. If you accept a trainer's invite, that trainer can see your training and health data, including: workouts & sessions, heart rate, sleep & recovery, body weight/measurements, and goals. A linked trainer can also assign you workouts and programs, which will appear on your calendar.

This is opt-in and revocable. A trainer only gains access once you accept their invite — nothing is shared before that. You can end the relationship at any time in Settings → Your trainer; revoking stops the trainer's access to your data immediately. Revoking does not delete any data that already exists — it only ends future visibility.

We do not sell data shared with a trainer, and a trainer's access is limited to the categories listed above for as long as the link is active.

Google user data

When you connect Google Health (Fitbit), Apex Zone's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features described above — showing you your own data, powering your AI coaching, and syncing the workouts you complete in Apex Zone. We do not sell it, do not use it for advertising, do not transfer it to others except as needed to provide these features, and do not use it to train AI or machine-learning models.

Storage & retention

Account identity is managed by AWS Cognito. Your training and health data is stored in a Postgres database on servers we operate, located in the United States. Data is retained for as long as your account is active.

Deleting your account

You can delete your account at any time from Settings → Account → Delete account inside the app. This removes your account and all associated workout data from our servers (including backups) within 30 days. You can also request deletion by emailing [email protected] from the address tied to your account.

Your rights

You can export your data, correct it, or request deletion at any time. Use the Settings → Account section in the app, or email us at [email protected].

Children

Apex Zone is not intended for children under 13. We don't knowingly collect data from anyone under that age.

Changes to this policy

If we materially change this policy we'll notify you in-app before the changes take effect.

Contact

Email [email protected].