This Privacy Policy describes how Summit Training ("we", "us", "our") collects, uses, and shares information when you use the Summit Training iOS application and the Summit web application, including this website (collectively, the "Services").
By using the Services you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information. When you create an account we collect your name, email address, and authentication identifiers. If you sign in using Apple or Google, we receive a unique identifier and the email address associated with that provider.
Training Data. We collect training data you enter or that your coach assigns, including programs, exercises, sets, weights, repetitions, rate of perceived exertion, bodyweight, readiness logs, personal records, and coach notes.
Apple Health Data. With your permission, Summit reads sleep, heart-rate variability (HRV), resting heart rate, step count, and active energy from Apple Health to calculate your daily training readiness, and writes completed workouts back to Apple Health. Health data is used solely to provide these training features. We never use Apple Health data for advertising or marketing, never sell it, and never share it with third parties or data brokers. You can revoke Health access at any time in iOS Settings without losing other app functionality.
Media. If you upload videos or voice messages, we store those files on our behalf using Supabase Storage. Audio recordings are associated with your account and the recipient.
Device Information. We collect basic device information (model, operating system version, app version, locale) and diagnostic events to keep the Services working. Crash reports may be sent to Sentry for the sole purpose of diagnosing software defects.
Subscription Information. Apple processes all in-app purchases. We do not receive your payment card details. We do receive a transaction identifier and the current status of your subscription so we can unlock paid features.
Website and Waitlist. When you join the waitlist on our website we collect your email address, the page section you signed up from, and your IP address (used for rate limiting and abuse prevention). Our website uses Vercel Analytics to collect anonymized, aggregated page-view statistics; it does not use cookies and does not track individual visitors across sites.
2. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Services.
- Enable coach-athlete communication and program delivery.
- Calculate training statistics, personal records, and analytics.
- Process subscriptions and manage entitlements.
- Detect, investigate, and prevent fraud, abuse, or security incidents.
- Respond to your support requests.
- Comply with legal obligations.
We do not sell your personal information.
3. How We Share Information
Coach and Athlete. If you connect to a coach using an invite code, your training data, check-ins, bodyweight logs, videos, and messages are shared with that coach. Coaches can export roster data.
Service Providers. We share data with vendors who help us operate the Services under written data-processing agreements:
- Supabase (database, authentication, storage, edge functions)
- Apple (Sign in with Apple, push notifications, StoreKit)
- Google (Sign in with Google, optional Google Sheets import)
- Anthropic (AI-assisted parsing of spreadsheets you choose to import — the selected sheet's contents are processed to build your program and are not used to train AI models)
- Sentry (crash and error reporting)
- Vercel (website hosting and anonymized website analytics)
Legal. We may disclose information when required by law, subpoena, or court order, or to protect the rights, property, or safety of Summit Training, our users, or the public.
Business Transfers. If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
4. Data Retention
We retain your information for as long as your account is active. When you delete your account we delete or anonymize your personal data within 30 days, except where a longer retention period is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).
5. Your Rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your account and personal data. You can do this inside the app under Settings → Delete Account, or by emailing legal@summittraining.app.
- Export your training data in a machine-readable format on request.
- Object to or restrict certain processing of your data.
California, Virginia, Colorado, Connecticut, and Utah residents have additional rights under state law, including the right to opt out of targeted advertising. We do not engage in targeted advertising.
European Economic Area, United Kingdom, and Swiss residents have additional rights under the GDPR / UK GDPR. Our lawful basis for processing is performance of a contract and your consent.
6. Children
The Services are not directed to children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact legal@summittraining.app so we can remove it.
7. Security
We use industry-standard security measures including encryption in transit (TLS 1.2+) and at rest, row-level security policies in our database, and access controls on service provider systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
8. International Transfers
Our services are hosted in the United States. If you access the Services from outside the United States your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version in the app and update the "Effective" date. Material changes will be announced with a notice in the app at least 7 days before they take effect.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Summit Training
legal@summittraining.app