Privacy Policy

Last updated: June 10, 2026

Maxed ("we", "our", "us") operates the Maxed fitness application and the getmaxed.co website (together, the "Service"). This policy describes how we collect, use, share, and protect your information.

Information We Collect

Account Information: Name, username, email address, phone number (if you sign in by SMS), and profile details you provide during registration.
Fitness Data: Workout history, exercise preferences, training splits, personal records, body measurements (height, weight), goals, and performance data you log in the app.
Wearable Device Data: When you connect third-party services (such as WHOOP, Garmin, Oura, or Apple Health), we collect health and fitness metrics including recovery scores, heart rate, heart rate variability, sleep data, strain, stress levels, and body battery readings.
Body Scan Photos: If you use the AI Body Scan or Future Physique features, photos of your physique are temporarily sent for analysis or image generation. Photos used for analysis are processed in real time and immediately discarded — they are not retained by Maxed except where you explicitly choose to save progress photos to your account. We do not extract, collect, or store biometric identifiers (such as faceprints or facial geometry) from your photos, and photos are never used to identify you.
Camera & Photos: The app uses your device camera for workout photos, body scan photos, reels, and profile pictures. Photos and videos are uploaded only when you choose to post, scan, or share. Camera access is used only when you actively capture content.
Microphone & Speech Recognition: If you use voice logging, the app accesses your microphone and speech recognition to transcribe your spoken workout sets. Audio is processed in real time and is not stored.
Contacts: With your permission, the app reads your contacts to help you find friends already using Maxed. Contact data is used only for friend discovery and is not stored on our servers.
Location: The app uses your location to find nearby gyms (via Google Places) and for cardio workout tracking (e.g., runs, walks). Location data is accessed only when you actively use these features.
Purchase Data: When you subscribe or make in-app purchases, we receive transaction information (product, price, date, store receipt identifiers) from Apple, Google, or Stripe. We do not receive or store your full payment card details.
Refund Request Data: If you request a refund for an App Store purchase, we may share your in-app usage and consumption data (such as how much of the purchased content or features you have used) with Apple to help Apple evaluate the refund request. This data is shared with Apple only for the purpose of processing refund requests.
Social & Content Data: Posts, comments, reels, chat messages, crew activity, challenges, and other content you create or share in the app.
Usage & Device Data: App interactions, screens viewed, feature usage, device model, operating system version, app version, language, crash logs, and diagnostic data.
Advertising Identifiers: With your permission (via Apple's App Tracking Transparency prompt on iOS), we collect your device advertising identifier (IDFA) for ad attribution as described below. If you decline, advertising tracking is disabled.

How We Use Your Information

To provide personalized workout suggestions, readiness assessments, and AI coaching.
To display your fitness metrics, progress, and training history.
To operate social features (feed, crews, leaderboards, challenges, chat) and the creator marketplace.
To process purchases, subscriptions, and creator payouts.
To measure the effectiveness of our advertising and attribute app installs.
To monitor performance, fix crashes, and improve the Service.
To communicate with you, including push notifications you can disable at any time.

Third-Party Services We Use

We use a number of third-party service providers and SDKs to operate the Service. Each receives only the data needed for its function:

Service	Purpose	Data involved
Supabase (hosted on AWS)	Database, authentication, file storage	Account data, fitness data, content you post
OpenAI	AI features (body scan analysis, coaching, plan generation, future physique)	See "AI-Powered Features & OpenAI" below
RevenueCat	In-app purchase and subscription management	App user ID, purchase receipts, subscription status
Stripe	Web payments, creator checkout, and creator payouts (Stripe Connect)	Payment details (collected directly by Stripe), payout account details for creators
Apple App Store / Google Play	In-app purchase billing	Handled under Apple/Google privacy policies
PostHog	Product analytics	Usage events, device info, pseudonymous user ID
Sentry	Crash and error reporting	Crash logs, device info, app state at time of error
Meta (Facebook SDK)	Advertising measurement and attribution	App events (e.g., registration, trial start, purchase), advertising identifier (only with your ATT consent on iOS)
TikTok (Business SDK)	Advertising measurement and attribution	App events (e.g., registration, purchase), advertising identifier (only with your ATT consent on iOS)
Google Places	Gym search and location lookup	Search queries, approximate location when searching
GIPHY	GIF search in chat	GIF search queries
Mux	Video hosting and live streaming for creator content	Videos uploaded by creators, playback analytics
Vonage	SMS delivery for phone sign-in codes	Phone number, one-time code delivery
Expo (EAS)	App updates and push notification delivery	Push tokens, app/runtime version
WHOOP / Garmin / Oura / Apple Health	Wearable data sync (only if you connect them)	Health and recovery metrics via their official APIs, with your explicit authorization

These providers are contractually limited to processing data to provide services to us, except for the advertising partners described in "Advertising & Your Choices" below. Your use of connected wearables and payment providers is also subject to those services' own privacy policies.

Advertising & Your Choices

We use the Meta (Facebook) and TikTok SDKs to measure the effectiveness of our advertising — for example, to know that an ad led to an app install, trial, or purchase. This involves sharing app events and, with your consent, your device advertising identifier with Meta and TikTok. Under some privacy laws (such as the California Consumer Privacy Act), this kind of disclosure for cross-context behavioral advertising may be considered "sharing" or a "sale" of personal information.

You can opt out at any time:

iOS: Decline the App Tracking Transparency prompt, or turn tracking off later in Settings > Privacy & Security > Tracking. When tracking is declined, advertiser tracking in the Meta and TikTok SDKs is disabled.
Android: Settings > Google > Ads > Delete advertising ID (or opt out of ads personalization).
Or email us at support@getmaxed.co with "Do Not Share My Personal Information" and we will honor your request.

We do not sell your fitness data, body scan photos, health metrics, or wearable data to anyone, and we never share that data with advertising partners.

AI-Powered Features & OpenAI

Maxed uses OpenAI's API to power several AI features. When you use these features, certain data is sent to OpenAI for processing. OpenAI processes this data solely to generate responses and does not use API data to train its models, in accordance with its API data usage policy.

What data is sent to OpenAI and when:

AI Body Scan: Your physique photos (front, left, back, right), along with height, weight, gender, experience level, and fitness goal. Photos are sent for real-time analysis and are not retained by OpenAI.
Future Physique: Your front physique photo and selected goal, used to generate an AI projection image.
AI Coaching & Workout Suggestions: Your workout history, exercise names, weights, reps, sets, personal records, bodyweight, experience level, fitness goals, and (if a wearable is connected) recovery data including HRV, sleep scores, and strain scores.
AI Workout Plan Generation: Your body scan results, muscle scores, experience level, goal, and recent workout history.
Workout Import (Text/Image): Text or images you provide of a workout plan, sent for parsing into structured exercises.
Progress Chat: Your questions, workout summary, personal records, and recent chat messages.

Your control: You are asked for explicit consent before any data is sent to OpenAI. You can revoke this consent at any time in the app under Profile > Settings > Privacy & Sharing, which will disable AI-powered features until consent is granted again.

Body Scan Photos & Biometric Information

Body scan and future physique photos are used solely to generate fitness assessments and visualizations for you. We do not use these photos to identify you, do not extract or store biometric identifiers (such as facial geometry, faceprints, or body geometry templates used for identification), do not use them for facial recognition, and do not sell or share them. Analysis photos are discarded immediately after processing. Progress photos are stored only if you explicitly choose to save them, are visible only to you unless you share them (for example, in a body scan challenge with a friend you choose), and are deleted when you delete them or your account.

Creator Marketplace

If you purchase content or subscribe to a creator, that creator can see your username and that you are a follower, subscriber, or purchaser (but not your payment details). If you become a creator, we collect additional information needed to pay you — including email and payout details — which is processed by Stripe under its own privacy policy. Content you publish as a creator (listings, reels, classes, live streams) is public to app users.

Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS) with row-level security policies. Authentication tokens for third-party services are encrypted and stored separately from your profile data. We use HTTPS for all data transmission. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

Data Retention & Deletion

You can delete your account and all associated data at any time from within the app. When you disconnect a wearable integration, all tokens and synced data for that service are immediately deleted. Upon account deletion, personal data is permanently removed from our systems, except records we are legally required to keep (e.g., purchase records for tax purposes) and anonymized aggregate data.

Your Rights

Depending on where you live (including under the GDPR and the CCPA/CPRA), you may have the right to:

Access, correct, update, or delete your personal data.
Request a copy of your data (portability).
Opt out of the "sharing" or "sale" of personal information for advertising purposes (see "Advertising & Your Choices").
Withdraw consent for AI processing or wearable integrations at any time.
Not be discriminated against for exercising these rights.

To exercise any right, use the in-app settings or contact us at support@getmaxed.co. We will respond within the timeframe required by applicable law.

Health Information Disclaimer

Maxed provides health-related calculations such as body fat estimates, physique scores, and readiness assessments for educational and informational purposes only. These are not medical diagnoses. Our methodologies are informed by established sports science research including ACSM guidelines, peer-reviewed body composition studies, and training load models. Citations are provided in the app wherever health calculations are displayed. Always consult a qualified healthcare professional before making health decisions based on app-generated information.

Children's Privacy

Maxed is not intended for users under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

International Users

The Service is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the United States.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Material changes will be communicated through the app or via email.

Contact Us

If you have questions about this privacy policy, contact us at support@getmaxed.co.

MAXED INC — Privacy Policy | Terms of Use