Privacy Policy

1. What information do we collect?

Information you provide. We collect information you voluntarily provide when you create an account, use the app, join a waitlist or beta, contact us, or otherwise interact with the Services. Depending on the features you use, this may include:

• Name, email address, authentication identifiers, account settings, and communication preferences;
• Training goals, experience level, equipment, program settings, and workout preferences;
• Workout logs, exercise history, sets, repetitions, load, RIR/RPE, completion and adherence information, training volume, and derived strength estimates;
• Running and endurance data, including distance, duration, pace, heart-rate summaries, route data, and derived training-load information;
• Body weight and other body-related measurements you enter;
• Recovery, readiness, fatigue, soreness, sleep, injury, pain, and limitation information you voluntarily provide;
• Nutrition and dietary information, including foods, meals, calories, macronutrients, micronutrients, custom foods, barcode-scanned food information, and nutrition goals;
• Stimulant tracking data you voluntarily log;
• Progress photos or other media you choose to upload;
• Support messages, feedback, and other information you choose to send us; and
• Referral, waitlist, beta-interest, marketing opt-in, and campaign-attribution information.

Sensitive information. Health, fitness, workout, nutrition, injury, recovery, location, and wearable-related information may be personal or sensitive information under applicable law. We process it to provide requested features, with consent where required, or as otherwise permitted by law.

Information collected automatically. Depending on your settings and use, we may collect:

• Cookies and similar technologies. Strictly necessary website storage is used to operate the site and remember preferences. Non-essential analytics or marketing cookies are used only where permitted and, when required, with consent. See our Cookie Policy.
• Precise geolocation. When you enable GPS-based running or route features, we may collect real-time coordinates and route information.
• Crash and diagnostic data. Device, operating-system, app-version, error, and crash data may be processed through providers such as Firebase Crashlytics to maintain reliability.
• Camera and photo access. With device permission, we may access the camera or photo library for features such as food-barcode scanning, profile/progress photos, and saving workout cards.
• Usage and analytics data. Firebase Analytics or similar services may collect app events, screens viewed, feature interactions, session activity, device information, and approximate location to understand product usage. We do not intentionally send the content of health, workout, or nutrition logs to general product analytics solely for analytics purposes.
• Push notification tokens. If notifications are enabled, we may store a device token so notifications can be delivered.

Information from integrations. If you connect Apple Health/HealthKit, Google Health Connect, WHOOP, Strava, or another integration, we may receive categories you authorize, such as activity, steps, heart rate, sleep, workouts, pace, distance, route, or recovery information. You control platform permissions and may revoke them through the relevant service or device settings.

Derived information. We may calculate scores, trends, estimates, workload metrics, estimated strength, athlete-state signals, prediction errors, and similar derived information from eligible data.

2. How do we use your information?

We may use information for the following purposes:

• To create, authenticate, maintain, and secure accounts;
• To provide, personalize, generate, adapt, display, and save requested training, running, recovery, nutrition, and progress features;
• To provide Personalized Coaching by identifying within-athlete response patterns across training, nutrition, sleep, and recovery as described in Section 3;
• To apply deterministic training algorithms, progression rules, exercise selection, deload logic, recovery rules, and other app logic;
• To synchronize information across authorized devices and integrations;
• To provide support, waitlist, beta-access, product-update, billing, and other requested communications;
• To operate, secure, debug, test, measure, and improve the website and app;
• To perform aggregate or de-identified analysis, quality review, algorithm testing, safety review, and product research;
• To develop, train, test, validate, calibrate, or evaluate internal statistical or machine-learning models for the population research purposes described in Section 4, subject to the separate consent and data-source restrictions in that section;
• To measure website and campaign performance where applicable tracking is permitted;
• To prevent fraud, abuse, unauthorized access, or misuse; and
• To comply with legal, regulatory, platform, tax, accounting, security, and recordkeeping obligations.

3. Personalized Coaching and Individual Response Analysis

Mass in Motion includes an integrated capability called Personalized Coaching. With your affirmative consent, Personalized Coaching analyzes your historical training, nutrition timing, sleep, recovery, body, and performance information to understand how you individually respond and deliver tailored coaching insights and contextual notes back to you.

Automated statistical analysis and machine learning. Mass in Motion may use automated statistical analysis, including machine-learning methods, to identify empirical patterns and dose/timing relationships in your information for the purpose of providing Personalized Coaching to you.

Coaching vs. population research separation. Personalized Coaching analyzes your data exclusively to coach you. It is governed by a separate, independent permission (Permission A) and does not enroll your information in broader population research or cross-user model development (Permission B), which remains separate, optional, and subject to its own consent.

Deterministic programming authority. Personalized Coaching may identify patterns and relationships in your data, but machine-learning systems do not independently generate your workout prescriptions. Mass in Motion’s deterministic programming algorithms remain responsible for exercise selection, sets, repetitions, loads, progression, running prescriptions, and scheduling.

Permanent library and contextual delivery. Qualified learned insights are stored permanently in your Coach Learning Profile ("What Your Coach Has Learned") and contextually surfaced via Coach's Notes on relevant screens.

Notice and withdrawal. For full details, see our Personalized Coaching and Data Use Notice. You can manage or withdraw consent at any time in the app under Settings > Privacy & Data > Personalized Coaching. Withdrawal stops new personalized processing and clears active personalized response models while preserving core deterministic app functionality.

4. Help Improve Algorithms (Population Research and Model Development)

Mass in Motion may use machine learning and statistical modeling internally to research and improve training and recovery systems for the broader athlete population. Depending on the model and your consent, this work may include:

• Detecting plateau and performance trends;
• Estimating recovery, fatigue, readiness, or athlete-state trends;
• Evaluating training-load, adherence, progression, and response patterns;
• Improving exercise-selection, progression, deload, recovery, and other deterministic algorithm thresholds;
• Comparing predictions with later observed outcomes;
• Testing model calibration, reliability, drift, bias, and error rates; and
• Producing research signals that may inform Mass in Motion's deterministic programming algorithms.

Default approach. Where reasonably practical, we use aggregated, de-identified, anonymized, or pseudonymized data for model development and algorithm evaluation instead of directly identifying information such as your name or email address.

Separate consent for optional health-data research ML. If identifiable or reasonably linkable consumer health data will be used for optional population research or model-development processing that is not necessary to provide a feature you requested, we obtain separate affirmative consent (Help Improve Algorithms) where required by applicable law. Acceptance of the general Terms of Service, Privacy Policy, or Personalized Coaching Notice does not constitute consent for population research.

Data sources. Data obtained from Apple Health/HealthKit, Google Health Connect, or another third-party health platform remains subject to that platform's current developer rules and permissions. Your consent to Mass in Motion does not override those restrictions. We exclude third-party platform health data from a model-development use when the applicable rules, permissions, or legal requirements do not permit it.

Third-party model providers. We do not authorize an external AI or machine-learning provider to use identifiable Mass in Motion health or fitness data to train that provider's own general-purpose, foundation, or customer-shared models. A provider may process eligible data on our behalf only for a disclosed Mass in Motion purpose and subject to applicable contractual, security, consent, and platform requirements.

Programming remains deterministic. Unless we clearly disclose a different product behavior in the future, machine learning may estimate athlete state or produce research signals, but it does not independently generate your workout program.

Withdrawal. If optional research ML processing relies on consent, you may withdraw that consent for future covered processing through available in-app privacy controls or by contacting us. Withdrawal does not affect processing lawfully completed before withdrawal. Where reasonably feasible and legally required, we remove or exclude linkable source data from active optional model-development datasets after a valid withdrawal is processed.

Barcode scanning and other on-device ML. We may use on-device machine-learning technologies to provide features such as barcode recognition. Camera images processed solely for barcode recognition are not used to train Mass in Motion's athlete-state, recovery, training, or other research models unless we separately disclose that use and obtain any consent required by law.

5. When and with whom do we share information?

We may disclose information to service providers and processors that perform services for us, which may include Firebase/Google Cloud for authentication, hosting, databases, cloud functions, storage, crash reporting, analytics, notifications, or model infrastructure; RevenueCat for subscription management; app stores and payment platforms; support or email providers; and integrations you choose to connect.

Providers process data subject to their role, our instructions and agreements, applicable law, and any platform restrictions. We seek to limit disclosure to information reasonably necessary for the service.

When you use map or route features, third-party map providers such as OpenFreeMap, OpenStreetMap, or Esri may receive your IP address and the requested map area to deliver map tiles. We do not intentionally provide those map-tile providers with your account identity or the content of health, workout, or nutrition logs.

We may also disclose information during a merger, acquisition, financing, reorganization, or sale of assets; to comply with legal obligations; to enforce agreements; or to protect rights, safety, security, and integrity.

We do not sell personal information, including consumer health data, to data brokers or advertisers. We do not share consumer health data for third-party advertising.

6. Cookies, consent, and communication preferences

Non-essential website analytics and marketing cookies are off by default where consent is required. You may accept, reject, or change cookie categories through available Cookie Preferences controls. If your browser sends a recognized Global Privacy Control signal, we honor it where required by applicable law.

Marketing email is optional. You may unsubscribe using the link in our emails or by contacting us.

Health-data, integration, device, Personalized Coaching, and optional research ML consents are separate from marketing consent and may be managed through the relevant app, device, platform, or privacy controls.

7. How long do we keep information?

We retain personal information for as long as reasonably necessary for the purposes described in this notice, to provide the Services, maintain accounts, honor preferences, satisfy legal or platform obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

When an account is deleted, eligible personal information is deleted or de-identified from active systems generally within the period described in our Account Deletion and Data Deletion Policy, subject to legally permitted retention and backup cycles.

Data that has already been lawfully and irreversibly de-identified or aggregated may no longer be capable of being associated with a specific user. Completed trained models generally contain learned statistical parameters rather than retrievable copies of each person's records, so it may not be technically possible to isolate or reverse the mathematical effect of one person's lawfully processed de-identified data. We may retain de-identified data, aggregate statistics, evaluation results, and trained model parameters where permitted by law, but we do not rely on this provision to retain identifiable or reasonably linkable source data when applicable law requires deletion.

8. How do we protect information?

We use reasonable technical and organizational safeguards designed to protect the information we process, which may include encryption in transit and at rest, authentication, access controls, logging, environment separation, and processor restrictions. No electronic transmission or storage system can be guaranteed to be completely secure.

9. Minors

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13 without any consent required by law. Users under 18 must have a parent or legal guardian review and agree to applicable terms where required.

Known users under 18 are excluded from optional general ML/model-development datasets unless Mass in Motion has implemented the additional parental or guardian consent, age-assurance, platform, and legal safeguards required for that processing.

10. Your privacy rights

Depending on where you live, you may have rights to access, know, correct, delete, export, restrict, object to, or opt out of certain processing, and to withdraw consent where processing is based on consent. You may also have rights relating specifically to consumer health data.

You can review or update certain information through account settings. To exercise other rights, contact brandon@massinmotionapp.com. We may verify your identity before completing a request.

Authorized agents. Where applicable law permits an authorized agent to submit a privacy request for you, the agent may contact us at the address above. We may request signed authorization from you and take reasonable steps to verify your identity and the agent's authority before acting on the request.

11. California privacy rights

California residents may have rights under the CCPA/CPRA, subject to applicability and exceptions, including rights to know, access, delete, correct, and receive information about certain disclosures of personal information.

• Right to Know/Access. You may request information about categories and specific pieces of personal information we collect, sources, purposes, and disclosures.
• Right to Delete. You may request deletion subject to legal exceptions.
• Right to Correct. You may request correction of inaccurate personal information.
• Sale/Sharing. We do not sell personal information or share it for cross-context behavioral advertising.
• Sensitive personal information. We use health and fitness information for disclosed fitness-service purposes, Personalized Coaching, optional consented research/model-development purposes where applicable, and other uses permitted by law.
• Non-discrimination. We will not unlawfully discriminate against you for exercising applicable privacy rights.

12. Consumer health data rights

If you are covered by the Washington My Health My Data Act or another applicable consumer-health privacy law, additional rights and disclosures may apply. Review our Consumer Health Privacy Notice, which includes information about Personalized Coaching, optional population ML/model-development processing, withdrawal of consent, access, deletion, sharing, and appeal rights where applicable.

13. EEA, UK, and Swiss privacy rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, we rely on one or more lawful bases depending on the processing:

• Performance of a contract. To create and maintain an account and provide Services and features you request.
• Explicit consent. Where required for processing special-category health or fitness information, including Personalized Coaching and optional population ML/model-development uses of such information that are not necessary to provide a requested feature, and for other processing where consent is the appropriate legal basis. Consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.
• Legitimate interests. For ordinary security, fraud prevention, debugging, service reliability, and certain product or business operations where our interests are not overridden by your rights. We do not rely on legitimate interests to bypass explicit-consent requirements for special-category data.
• Legal obligation. To comply with applicable law, lawful requests, tax, accounting, and recordkeeping requirements.

Subject to applicable law, you may have rights to access, rectify, erase, restrict, object, and obtain data portability, and to withdraw consent. You may also lodge a complaint with your local data-protection authority.

14. International data transfers

Mass in Motion LLC is based in the United States, and we and our service providers may process information in the United States and other countries. Where required, we use appropriate transfer mechanisms or safeguards, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism.

15. Updates to this notice

We may update this notice as our practices, Services, vendors, or legal obligations change. We will update the date above and provide additional notice where required. If applicable law requires affirmative or renewed consent for a new category of sensitive data or a new processing purpose, continued use alone will not substitute for that required consent.

16. Contact us

Mass in Motion LLC
Registered Agent Address: 6545 Market Ave. North Suite 100, Canton, Ohio 44721
Email: brandon@massinmotionapp.com
Website: massinmotionapp.com