Privacy

Avoid Atrophy! stores what it needs to give you a routine, remind you, and keep your history. We do not sell your information or show ads. You can delete your account and everything in it at any time from Settings. Frozen copies already provided to a client belong to that client; deleting a trainer account retains those copies with former-trainer attribution.

New private PT recording remains disabled until legal/privacy review, qualified review of the safety notice, and the maximum backup-expiry period have been recorded. When released, the recording notice displays that backup period before you consent.

Private PT records contain instructions you transcribe, your original wording and references, confirmed prescription versions, performed responses, and any optional symptom or delayed-response notes you enter. Client-recorded instructions are not verified clinician authorship. Client-recorded private instructions and symptom notes are not sent to AI or Strava. Trainer-provided assigned instructions have separate attribution and permissions described below; your private symptoms and response notes are never included in trainer activity sharing.

These records stay until you delete them or your account. You can delete a private session and its response notes, clear later-response notes, or delete a private Routine together with its versions and history. Account deletion removes them from the active database. Deleted data can remain in nightly backups until the reviewed expiry shown in your consent notice; deleting active data does not instantly erase backup copies.

An invitation identifies its sender by profile name, or sign-in email if no name is set.

Trainer assignments and sharing require a separate recorded legal/privacy, representation, retention and backup review before release. Application approval does not verify clinical credentials. There is no clinician badge, monitoring, emergency service or guaranteed response.

Each trainer must be accepted independently. We record timestamped, versioned consent and your display name. Optional activity permission covers only that trainer's assigned sessions started after your current permission: actual reps, resistance/weights, duration, and recorded/skipped/stopped outcomes. It never includes journals, intake/health answers, private ratings, PT symptoms, private response notes, unrelated workouts, another trainer's assignments or earlier activity. Messages in the separate coach-feedback field are shared only when you explicitly confirm sharing them with that relationship.

Assigned copies and instructions are frozen and client-owned. Updates require an explicit proposed version and client acknowledgement, and affect only new sessions. Revocation removes trainer access to both past and future information and stops assignment reminders; the client retains read-only copies and history. Information already seen or copied cannot be retracted.

Shared feedback and client-owned copies remain until client deletion or account deletion. Clients can delete shared feedback, archive assigned copies, and delete their owned Routines or sessions. Trainer account deletion removes master templates, not client-owned copies, which show former-trainer attribution. Deleted data may remain in nightly backups until the operationally reviewed expiry displayed in the consent notice.

• Your email address, and your name if you give one.
• Your answers to the questions about your goal, activity level, equipment, available time, and anything you tell us you need to work around. That last answer may include health information; only share what you are comfortable sharing.
• The routines you save, your reminder times, and your time zone.
• What you log: the moves, reps, weights, times, how a session felt, and your notes.
• If you turn on notifications, an address your browser gives us so we can send them to that device.

• To sign you in, by emailing you a link.
• To suggest routines, show your routine, and keep your history and streaks.
• To send the reminders and the weekly summary you have asked for.
• To see, in total, how the service is used so we can improve it.
• The site owner can see account names and emails, join dates, completed-workout counts, the last completion date, open-workout counts, and active-reminder counts in a protected administration view. This view does not display private notes, intake answers, or Strava data.

To learn which routines are useful, the site counts a few things: when a public routine page is opened, when someone uses its share, copy link, or print button, and when a sign-in link is requested or used. We do this ourselves; no outside analytics company is involved.

For published guides and worksheets, we also count guide page loads, links from a guide to the routine library, requests to print a worksheet, and successful copies of a worksheet. Those counts contain only the action, the public guide or worksheet identifier, and the time. We never collect your worksheet answers or clipboard contents. A print request does not tell us whether you printed or saved anything. These are action counts, not counts of unique people; browser settings may prevent a count from reaching us.

Each count records only what happened, which public routine it was about, and the time. When a routine page is opened, your browser also works out a broad category for how you got there, such as a search engine, a social site, email, or a direct visit, and sends only that category. The address of the page you came from never leaves your browser. The counts are not linked to your account, your email address, your IP address, or your device, and no cookie or other stored identifier is used for them. Counts older than two calendar years are removed by the scheduled daily cleanup.

If you apply to the trainer pilot on the For trainers page, we store the email address you give and your name; an approximate client-count band is optional. We also store your description of your professional background and how you would use the tools, the application status, review date and administrator, and the date and version of the notice shown with the form.

We use these details only to review your application and contact you about the trainer pilot. They are not used for workout reminders or other marketing, and they are not shared with anyone else. Only site administrators can see them. The site counts how many people apply, but that count does not include anything you entered.

Pending and declined applications are deleted automatically 365 days after submission. Approved applications are kept while trainer access is active and deleted after access is removed. An administrator can remove access; deleting an approved application also removes it. To have it deleted sooner, email [email protected].

We use a small number of outside services to run Avoid Atrophy!:

• Strava, if you connect it during the approved pilot, receives workouts you explicitly send or choose to share automatically. Connecting alone does not share a workout.
• Twilio SendGrid delivers our email. It receives your email address and the content of each message.
• Anthropic provides the software that builds a custom routine, if you ask for one. It receives your goal, activity level, equipment, available time, days per week, movement preferences and what you type in the request, together with exercise-library information. Account name and email fields are not sent, but free text can contain identifying or sensitive information. Avoid including names, diagnoses, or other sensitive details.
• Cloudflare sits in front of the website and handles the network connection, which involves your IP address.
• Your browser's notification service (run by Apple, Google, or Mozilla, depending on your device) delivers notifications if you turn them on.

The database itself is on a server we operate. We do not share your information with anyone else unless the law requires it.

Signed-in users can submit private support tickets. We store your account association, category, subject, message, ticket reference, timestamps, status changes and conversation replies. Only you and site administrators can access your tickets. Support staff see the information you deliberately enter; we do not automatically attach workout notes, intake answers, trainer records or device notification keys.

Check Feedback / Get help for replies. Tickets do not send email notifications, subscribe you to marketing, or provide medical advice or emergency monitoring. Do not include passwords, diagnoses, client names or other sensitive information. Privacy or deletion requests may need separate identity verification.

Tickets remain until you delete the ticket or your account. Deletion removes the ticket and its conversation from the active database; deleted records may remain in backups until those backups expire. Attachments are not supported.

If a support administrator deletes their own account, replies they sent to other users remain in those users' ticket conversations without the administrator's account association.

Short-window submission counters on your account limit abuse. Deleting a ticket does not reset those counters; they are reset when a new submission starts an expired window and removed when your account is deleted. Ticket contents are not added to usage analytics.

If enabled for your account, Settings walks you through authorizing Strava. We store your connected athlete identity, encrypted access credentials, sharing preferences, and delivery status. We send the activity type, actual start, full elapsed duration, and the title and exercise summary you choose. Routine names and exercise names can contain personal information; these are optional and off by default. Session notes, set notes, intake answers, limitations, ratings, weights, and private routine links are not included.

Strava controls activity visibility; we cannot guarantee an export is private. Pause-adjusted workout time stays separate from the elapsed time sent to Strava. This integration does not read your full Strava activity history or send integration data to AI or usage analytics.

Automatic sharing is a separate opt-in for eligible future workouts, not movement breaks or historical sessions. You can skip an individual workout, turn sharing off, or disconnect in Settings. Pending automatic sends are cancelled when sharing is turned off. A request already transmitted might still create an activity. Editing or deleting a local workout, disconnecting, or deleting your account does not edit or remove copies already in Strava.

Disconnect disables sharing immediately and removes active credentials and the connected profile, export snapshots, and stored Strava athlete/activity identifiers. If Strava is unavailable, an encrypted credential used only to retry access removal is retained for no more than 24 hours. You can also remove access directly in Strava. Failed, cancelled, or uncertain export payloads are removed after 30 days. Minimal status records remain with your local workout history to prevent duplicate sends, and are deleted when you delete that workout or your account.

We set one cookie to keep you signed in, and short-lived ones during sign-in. We do not use advertising, analytics, or tracking cookies. Optional Strava connection uses a short-lived, HTTP-only cookie to validate your return from authorization.

• Every reminder and summary email has a link to stop it. You can also change or remove reminders on the Reminders page.
• You can change your answers and your name in Settings.
• You can delete your account in Settings. That permanently removes your profile, history, reminders, and any routines made for you.

Avoid Atrophy! is for adults. It is not intended for anyone under 18.

If this page changes in a way that matters, we will say so on the site or by email.

Questions: [email protected]