The Transformation Challenge: free to enter, judged on consistency and change, never on weight lost. How it works

Privacy Policy

Last updated: October 17, 2026

Information We Collect

We collect information you provide during account creation and onboarding, including your name, email, optional phone number, city and country, body measurements, fitness goals, and workout preferences. We also collect data you log in the app such as workout records, nutrition entries, water intake, progress photos, recipes you save, meal plans you build, chat messages with your trainer or our AI Coach, voice recordings during Pantry Walk (sent to OpenAI Whisper for transcription, then discarded), and your subscription tier and purchase history (see Subscriptions below). If you connect Apple Health or Health Connect, we also collect the health categories you allow (see Apple Health and Health Connect below). If you use outdoor cardio tracking (run, walk, cycle, golf), we collect precise GPS coordinates during the active session to plot your route, calculate distance and pace, and save splits (see Location Data below). If you search for a gym or join one, we collect your city and approximate region to power local gym leaderboards.

How We Use Your Information

Your data is used to personalize your fitness experience, calculate targets and recommendations, track your progress over time, power AI features such as the Coach and meal plan generators, and provide the core functionality of the app. To power AI features, we share relevant data, your messages, fitness profile, recent workout and nutrition logs, and any photos or audio you submit, with third party AI providers (such as Google Gemini, Anthropic Claude, and OpenAI Whisper), but only when you actively use an AI feature; see Third Party Services below for exactly what each provider receives. If you are a trainer using the BryksBuilt web portal, our AI assistant Bryksy sends relevant client roster context to these same providers when you use it, to surface roster insights and trends, and to draft programs, meal plans, and check in forms for your review. These providers process your data solely to return your result and do not use it to train their models, per their commercial API terms, and retain content only as needed to deliver the feature. We do not sell your personal information to third parties and we do not share your data with advertising networks.

Data Storage & Security

Your data is stored securely using Google Firebase infrastructure with encryption at rest and in transit. Authentication is handled through Firebase Auth with industry standard security practices. Only you and your assigned trainer (if applicable) can access your fitness data, enforced by Firestore security rules.

Apple Health and Health Connect

If you connect Apple Health (iPhone) or Health Connect (Android), BryksBuilt reads the health categories you allow: workouts with their heart rate and calories, steps, distance, active calories, heart rate, resting heart rate, heart rate variability, VO2 max, sleep, weight, body fat and, on iPhone, activity rings. Data that a connected watch or app (for example an Apple Watch, Garmin Connect or Fitbit) writes into Apple Health or Health Connect reaches BryksBuilt this way. We use it to log your workouts, show your recovery, readiness, sleep and progress, and, if you choose, import your past workouts. It is displayed in the app AND stored on our secure Firebase servers so you can access your history across devices and so your trainer can review your activity if you have one. BryksBuilt also writes the workouts you log back to Apple Health or Health Connect, and can send a saved workout to your Apple Watch when you ask it to. We never sell health data, never use it for advertising, and never use it to choose rewards. Connecting is optional: turn it off in Settings, and remove access at any time in the Health app (iPhone) or Health Connect (Android). BryksBuilt's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

Location Data

BryksBuilt uses two kinds of location data, both optional. Precise location (GPS) is collected only during an active outdoor cardio session (run, walk, cycle, golf) so we can plot your route, calculate distance and pace, save per kilometer splits, and award distance based milestone achievements. GPS tracking stops the moment you end the session. Coarse location is used when you search for a gym or pick a home gym, so we can show nearby gyms via Google Places and rank you on the leaderboard for your specific gym. We do not track your background location, and we never sell location data. You can disable location access at any time in iOS Settings.

Subscriptions

BryksBuilt offers optional auto renewable subscriptions through Apple In App Purchase. Apple handles all payment processing, and we never see or store your credit card or payment details. We do receive (via the App Store and our subscription management partner RevenueCat) your active subscription tier, original purchase date, renewal date, and entitlement status, so we can unlock the features you paid for and restore purchases across devices. You can manage or cancel subscriptions at any time in your Apple ID settings.

Partner Rewards

Reward drops on the Levels track can include partner rewards: discount codes, gift cards and merchandise from brands we work with. To decide which partner reward you can see or claim, we use only the answers you gave at onboarding or in your profile (age, sex, goals, training styles, equipment, diet and country). We never use data from Apple Health, Health Connect or motion sensors to choose, rank or offer a reward. Partners receive the number of claims, never your name, email or any other personal data. A claimed code is stored on your account and emailed to you. A shipping address you enter for merchandise is kept for 90 days after the item ships or the order is cancelled, then deleted. The full rules are at bryksbuilt.com/rewards-rules.

Data Retention

Your data is retained as long as your account is active. You can request a data export or full account deletion at any time by contacting support@bryksbuilt.com or by using the in app Delete Account flow in Settings. Upon account deletion, all associated data is permanently removed within 30 days.

Third Party Services

BryksBuilt connects to the following third party services to deliver the app. Each service has its own privacy policy, linked below. We never sell your personal information to advertising networks. Infrastructure • Firebase (Google), Authentication, Firestore database, Cloud Storage, and push notifications. Your account data, workouts, nutrition, photos, and messages are stored on Firebase infrastructure with encryption at rest and in transit. See firebase.google.com/policies • Expo / EAS, App delivery, over the air updates, and crash collection. See expo.dev/privacy Subscriptions • Apple In App Purchase, Apple handles all payment processing for BryksBuilt subscriptions. Payment information is entered directly with Apple, never sent to our servers. See apple.com/legal/privacy • RevenueCat, Subscription management and entitlement tracking. Receives your Apple receipt to determine your active subscription tier and unlock paid features across devices. Never receives payment details. See revenuecat.com/privacy AI Providers • Anthropic (Claude), When you chat with the AI Coach or generate workouts, recipes, meal plans, or grocery lists, your prompt plus relevant profile context is sent to Anthropic. In the trainer web portal, the Bryksy assistant also sends relevant client roster context to Anthropic to draft programs, meal plans, and check in forms for a trainer to review. Anthropic does not train on API data per their commercial terms and retains content only as needed to return your result. See anthropic.com/legal/privacy • Google (Gemini), Coach chat (primary), coach fallback, AI meal estimation, AI program generation, and vision tasks (meal photos, pantry photos, equipment identification, ingredient scans). In the trainer web portal, the Bryksy assistant also uses Gemini for its chat and for analyzing roster trends. The text and images you submit are sent to Gemini for analysis. Google does not use data sent through the Gemini API to train its models, per their API terms, and retains content only as needed to return your result. See policies.google.com/privacy • OpenAI, Voice transcription only. When you use hands free voice logging (in the AI Coach or Pantry Walk), the audio is sent to OpenAI's Whisper API for transcription. OpenAI does not use data submitted through its API to train its models, per their API data usage policy, and retains content only as needed to return your transcription. See openai.com/policies/privacy-policy Food and Location Lookups • USDA FoodData Central, Public food nutrition lookups. Sends search queries only. See fdc.nal.usda.gov • Open Food Facts, Public barcode database. Sends barcode strings only. See openfoodfacts.org • Spoonacular, Recipe discovery. Sends search queries only. See spoonacular.com/food-api/privacy • FatSecret, Backup food and barcode search. Sends queries and barcode strings only. See fatsecret.com/privacypolicy • Google Places, Gym search autocomplete. Sends text queries plus approximate location. See policies.google.com/privacy Observability and Analytics • Sentry, Crash reporting. Captures crashes, error stack traces, and breadcrumbs to help us diagnose bugs. Personal data is excluded from crash reports where possible. See sentry.io/privacy • PostHog, Product analytics and session recording. We record anonymized app sessions (screens viewed, taps, and navigation) to understand how the app is used and to diagnose problems. Text you type, images and photos, your body and health data, and private messages are automatically masked, and the trainer area is not recorded at all. To opt out of session recording, email support@bryksbuilt.com. See posthog.com/privacy Embedded Content • YouTube (Google), Exercise demonstration videos, stretch and mobility routines, and pose tutorials are embedded from YouTube via the official YouTube IFrame Player. When you view an embedded demo, YouTube directly receives your IP address, device information, and playback events for the purpose of serving the video and YouTube's own analytics. We do not pass any BryksBuilt account data to YouTube. We comply with YouTube API Services Terms of Service. See policies.google.com/privacy and youtube.com/t/terms Email • Resend, Email newsletter delivery. Only if you opt in. Marketing email is always an active choice: an unchecked box during app onboarding, the Email updates switch in Settings or in the trainer portal, the subscribe box in our footer, the optional box on our free plan page, or our waitlist form. When you opt in we send Resend your email address, whether you are a member or a coach, and which of those surfaces you opted in on, plus your name if you gave one when joining our waitlist. We never send them anything else about you. Every newsletter carries an unsubscribe link, and turning the switch off unsubscribes you as well. If you delete your account, your address is removed from the newsletter list. Newsletter emails record whether they were opened and which links were clicked, so we can tell what is useful to you. • Resend, One off transactional email. Used to deliver the free workout plan to the address you enter on our free plan page, and to send trainer invitations and invoices. Resend receives the recipient address and the message itself. See resend.com/legal/privacy-policy Website Only (bryksbuilt.com) • Google reCAPTCHA, Bot protection on our email signup and application forms. See policies.google.com/privacy • PostHog (PostHog Inc., United States), Website analytics: which pages are visited, which buttons are clicked, how far people scroll, page speed, and a sample of anonymised session replays with every form field masked before it leaves your browser. Requests go through our own domain and the data is processed on PostHog's servers in the United States. Nothing inside the trainer portal is recorded. You can decline in the footer of any page; after that we count visits through an anonymous hash with no cookie and record nothing else. See posthog.com/privacy

Children's Privacy (COPPA)

BryksBuilt is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. During onboarding you are required to confirm you are at least 13 years old. If you believe a child under 13 has provided us with personal information, please contact support@bryksbuilt.com and we will delete the account and associated data.

Your Rights

You have the right to access, correct, export, or delete your personal data. You can manage most of these options directly in the app settings. For additional requests, contact us at support@bryksbuilt.com.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through the app. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For privacy related questions or concerns, contact us at support@bryksbuilt.com.

BryksBuilt Inc., Federal Corporation, Canada