Privacy Policy
The short version: Antaeus is local-first. Your training data lives in a database on your phone. There are no accounts, no feed, and no server of ours that stores your log. The only times data leaves your device are the specific, optional features described below — and you can use the core app without any of them. This website is the one exception, and only if you ask it to be: if you join the beta list we store the email address you type. That is section 1.
1. This website and the beta waitlist
Browsing this site sets no cookies and stores nothing on your device. Nothing that identifies you is recorded unless you submit the beta form.
We do count page views, using Cloudflare Web Analytics. It is cookieless and does not fingerprint you or follow you between sites: it records the page, referrer, country, and general browser and device type, and nothing that identifies a person. There is no cross-site tracking and no advertising network involved. We use it to see which pages people find useful — mostly the free tools.
If you do submit it, we store exactly three things in Cloudflare Workers KV:
- The email address you entered, lowercased.
- A signup number — your place in the queue, used to send invites in order.
- The date and time you signed up.
We do not store your IP address alongside your email. Your IP is used only for a temporary abuse counter that limits how many signups can come from one connection, and that counter deletes itself after one hour. It is never linked to your address.
What you get: a confirmation email when you sign up, and one email when the beta opens. Nothing else — no newsletter, no drip sequence, and your address is never sold, shared, or given to an advertiser. Confirmation and invite emails are delivered by Resend, our email provider, which processes your address solely to deliver them.
Getting off the list: reply “stop” to any email from us, or write to [email protected]. Your entry is deleted outright — we keep no suppression copy of it.
The waitlist is entirely separate from the app. Joining it creates no account, and it is never connected to your training data.
2. Data the app collects, and where it goes
- Your training log — sessions, sets, reps, weights, RPE, notes, programs, templates, records.
- Body metrics — body weight, tape measurements, strength goals.
- Pain check-ins — region, symptoms, severity. Treated as sensitive; stored only on your device (and in your optional iCloud sync, below).
- Form-check videos — recorded, analyzed, and stored entirely on your device. Videos are never uploaded, never synced, and are deleted when you delete the form check or reset the app.
- Apple Health (HealthKit) data — with your permission the app reads body weight, workouts, heart rate, sleep, and active energy, and writes finished workouts. It is never used for advertising and never shared with third parties. Two honest qualifications: body weight imported from Health is stored in your training log, so it rides iCloud sync if you switch that on, and a body-weight figure is included in the numbers sent to our AI provider when you use AI coaching. Heart-rate summaries are device-local: they are excluded from sync and never sent anywhere.
- Menstrual cycle data — read only if you turn on Cycle awareness, used only to stop a normal luteal phase reading as under-recovery. It is never synced, never sent to our AI provider, and never leaves your device. Our test suite includes a check that scans the app's source for any reference to cycle data outside the feature itself.
3. Optional iCloud sync
Sync is off by default. If you turn it on, your training data is stored in your own private iCloud database (Apple CloudKit), tied to your Apple ID. We operate no sync server and cannot read your iCloud data. Apple processes this data under Apple’s privacy terms. Form-check videos are excluded from sync by design.
4. AI features and what they send
Some Pro features use Claude, an AI model by Anthropic. Requests go through our stateless proxy (Cloudflare Workers) — we keep no copy of the content, and no account identifier is attached (there are no accounts). The app asks for your consent before the first AI call, and each feature sends only what it needs:
| Feature | What is sent |
|---|---|
| Form-check coaching | Derived pose metrics and scores (numbers and short labels) — never the video. |
| AI program generation & import | Your goal, constraints text, and — for import — the photo/PDF/text of the program you choose to import. |
| Coach chat & weekly review | Your messages and a summary of recent training numbers. |
| Meal scanning | The meal photo or description you submit, for nutrition estimation. |
Anthropic processes this data as our service provider and, under their commercial terms, does not use it to train models. Requests are rate-limited per device and per IP; our workers store only transient per-IP counters for abuse prevention.
Barcode scans query the public Open Food Facts database with the barcode number only — no personal data is sent.
5. Purchases
Pro subscriptions are processed by Apple and managed through RevenueCat, which receives purchase receipts and an anonymous app-instance identifier to validate your subscription. We never see your payment details.
6. Diagnostics and analytics
Crash reporting (Sentry) and anonymous usage counts (Aptabase) are built in but only active when configured for a release, and analytics can be turned off in Settings → Privacy at any time. Neither receives your training content; analytics events are feature-use counts with no identifiers.
7. Retention and deletion
- Everything lives on your device until you delete it — per item, via Settings → “Reset local data”, or by deleting the app.
- iCloud sync data can be removed by resetting local data with sync on, or via Apple’s iCloud management tools.
- Our AI proxy retains nothing after a request completes.
- Waitlist emails are kept until the beta opens and invites have gone out, or until you ask to be removed — whichever comes first. Removal is a deletion, not a flag.
8. Your rights
Your training data is on your device, so access, export (Settings → Backup), correction, and deletion are all in your hands, immediately, without asking us.
The beta waitlist is the one set of data we hold, so the usual rights apply to it: write to [email protected] to see what we have on you, correct it, or have it deleted. Depending on where you live you may also have the right to object to processing, to receive your data in a portable form, or to complain to your local data-protection authority. We respond within 30 days and we do not charge for any of it.
9. Children
Antaeus is not directed at children and is intended for users 16 and older.
10. Changes
If this policy changes materially, the app’s update notes and this page will say so, with the new effective date above.
11. Contact
Antaeus · [email protected]