Fundamentally Astute Athletics

1. Introduction

This Privacy Policy explains how the Fundamentally Astute Athletics mobile application for iPhone and Android ("the App", "FAA", "we", "us", "our") collects, uses, stores, and protects your personal information. The App delivers coached strength and conditioning programmes, records the training you do, asks how you feel before and after a workout, includes a filmed movement check that a coach reads, and lets adults keep a record of their body weight and what they eat.

The App is a product of GraniteMind (Private) Limited ("GraniteMind AI"), which builds and operates it, made in partnership with Fundamentally Astute Athletics. This policy applies to the App on both iPhone and Android; where the two differ, it says so. It applies specifically to the App and is separate from the general privacy policy of GraniteMind AI covering our other services. By using the App, you agree to the practices described here.

2. Information We Collect

We collect only the data needed to provide the App's features. All data you create belongs to your account and is stored on our backend infrastructure (Supabase).

Account information

Email address — used to create and sign in to your account, and to send you sign-in codes.
Name — the display name you choose, shown to you and to your coach.
Account identifier — a unique ID assigned to your account.
If you sign in with Google, Google provides us your name and email address for that purpose. We do not receive your Google password.
If you sign in with Apple (on iPhone), Apple provides us your name and an email address for that purpose. If you choose Apple's Hide My Email, we receive the private relay address Apple creates for you instead of your own. We do not receive your Apple Account password.
Which version of the terms of use you agreed to, and when.

Profile information

Date of birth — used to apply age-appropriate training, and to confirm you are 18 or over: the App is for adults (Section 8).
Sex — optional. Used to suggest starting weights, to apply the correct weight tier for hybrid fitness races, and to choose which figure demonstrates exercises to you. You may choose not to disclose it.
Profile photo — optional. You take it with the camera or pick one picture yourself, and frame it on your phone; only the framed picture is uploaded. It is shown to you and your coach.
The equipment you say you have, and whether you prefer kilograms or pounds.
Your phone's time zone, so that reminders and missed-workout notices arrive at the right time for you.

Your answers at sign-up

What you are training for (one or more aims, in your order), your sport, position or race and its date, how long you have trained, when you last trained regularly, what your body can do today, how many days a week and how long a session you have, how full your life is right now, and where you train.
Whether you have an injury or pain, and any lifestyle condition you are managing that you choose to tell us about (for example high blood pressure, high cholesterol or type 2 diabetes). This is health-related information. It is used only to suggest a suitable programme and for the coaches responsible for your programme, and it is kept only with your agreement to the terms of use.

Training data

Your programme: one of FAA's, one a coach set for you, one you built yourself, or your own copy of one of FAA's that you changed.
What you log: exercises, sets, reps, load, distance, time, RPE (how hard a set felt), how hard a whole workout was out of 10, how long a set or a whole workout took when you use the App's clocks, the day you did it, and whether you did the shorter Quick version.
Activity outside the gym that you plan or record, such as a run, a swim, a match or a round of golf: what it was, the day, how hard it was, how long it took, any note you add, and whether you do it every week.
Session and programme progress, including moving to another week of your programme.

Check-ins before and after a workout

Before a workout you can answer four quick questions, each from 1 to 5: your energy, how your body feels, your state of mind and your motivation.
After a workout you can say whether it was easier or harder than you expected and which movements were harder than usual, mark on a picture of the body where you feel something (what kind of feeling it is and how strong out of 10, or simply that a muscle worked), and add a note.
At your next workout the App can ask how something you marked last time is now: gone, better, the same or worse.
Your week. The App puts a week's workouts and check-ins on one page, where you can add your own note on the week.
Said aloud. If you have switched the voice assistant on, you can say a check-in instead of tapping it, and the App fills in the answers for you to check (see Section 3).
Check-ins are optional. You can skip either one each time, or switch them off in Settings. This is information about how you feel and about your body, and we treat it as health-related information.

Body weight and food (adults only, and only if you use them)

Your weigh-ins: your body weight on the days you log it.
The meals you log: the foods in each meal with their amounts and energy, the kind of meal, and the meals you keep to log again.
A photo of a meal, if you take one or pick one from your phone, and a description of a meal, if you type one or say it aloud, when you ask the App to read it (see Section 3).
Whether your meal photos are kept with your meals. With "Keep my meal photos" switched off in Settings, a photo is deleted soon after it has been read.

Movement check: videos, pictures and what you tell us

Videos. The movement check films you doing a short set of movements. Filming happens only if you have agreed to it (you agree in the terms of use shown at sign-up, and can switch filming off afterwards), and only while the movement check's camera screen is open. The videos have no sound. A video is kept on your phone until it has uploaded, which can finish after you have moved on to the next movement, and is then removed from the phone.
How the phone films you by itself. While the camera screen is open, the App works out the position of your body on the phone, to start and stop filming, to tell you whether you are in the picture, and to choose which moments to take pictures from. This happens on the phone; the body positions it works out are not sent to us. On Android it uses Google's ML Kit, built into the App; on iPhone it uses Apple's own Vision framework.
Pictures taken from those videos. The App takes still pictures from each video on your phone and uploads them with it.
Filming again. You can film a movement once more after handing the check in, and a coach can ask you to film a movement again, with a note. The earlier video is kept with the check.
What you felt. After each movement you can tell us where you felt something, what kind of feeling it was, how strong it was out of 10, and your own words. You also answer five questions about how flexible your joints are. This is information about your body and how it feels, and we treat it as health-related information.
The result. What a coach found in your videos.
How you chose to send the videos (over Wi-Fi only, or over mobile data as well) is kept on your phone.

Messages

Text messages and voice notes you exchange with your coach. A voice note is recorded only after you tap the microphone in a conversation. A message can point to one of your workouts.

The voice assistant (adults only, and only if you switch it on)

What you say to it during a workout, or on a check-in page before or after one, as words. Your phone's own speech service turns what you say into words (on most Android phones this is Google's); we receive only the words, never the sound. The words are used to answer you and are not stored, apart from the answers below.
In your first two weeks with it, when it reads back how hard a set was and asks whether that is right: the words you used, the number it suggested and the number you confirmed. These are kept with your account, so the App learns how you rate your effort.
When you tap the speaker at the top of a page, the words on that page, to explain it. Your name and your coaches' names are taken out on your phone before the words are sent.
A set the assistant logs, an effort it records or a set it takes back for you is saved exactly as if you had tapped the buttons.

Notifications

A device token from Google's Firebase Cloud Messaging, stored against your account so that notifications reach your phone, and your notification choices (which ones, and at what times). On iPhone, Apple's push notification service issues a token for your phone, which Firebase turns into the one we store.

Health insurer link

Only if you enter an insurer's code and agree: the insurer you joined, your member number if you give one, and the date you joined.

If you are a coach

Your coach code, the programmes and exercises you create, the athletes linked to you, your reads of movement checks and the notes you write, and the check-ins you mark as seen.

Technical data

Basic technical information required for the App to function and stay secure (for example, session tokens that keep you signed in).
Firebase, which delivers notifications, keeps an identifier for each installation of the App, which does not identify you or your phone. On Android, Google's ML Kit sends Google technical information about how it ran (such as the phone's model, the Android and App versions, how long it took and any error), for diagnostics. It does not send pictures, videos or body positions.

Permissions the App asks for. On both iPhone and Android: camera (to film the movement check, and to take a profile photo or a photo of a meal if you choose to), microphone (to record a voice note, and on Android to say a meal aloud or to talk to the voice assistant) and notifications. Each is asked for when you first use the feature that needs it, and each can be refused. A photo you pick from your phone is chosen with the phone's own picker, so the App is not given access to your other photos. On Android the App also uses internet access, whether the phone is on Wi-Fi or mobile data (for the movement check's upload choice), running at start-up (to keep your reminders after a restart), vibration, and keeping the phone awake while a workout clock is running, which Android grants without asking.

What we do not collect. The App does not access your location, contacts or calendar, and it does not read the photos and files already on your phone, other than a picture you pick yourself as your profile photo or as a photo of a meal. To show dates the way your country writes them, the App on Android reads which country your phone's mobile network or SIM belongs to, and on iPhone uses the region set in your phone's settings; this is read on the phone and is not sent to us. We do not collect device advertising identifiers, and we do not use third-party advertising or analytics tracking inside the App. We do not receive or store card or payment details.

3. How We Use Your Information

We use your information solely to provide and improve the App's functionality:

To create and maintain your account and keep you signed in.
To suggest a suitable programme from your answers at sign-up, and to deliver the sessions in it.
To record and display what you trained, so your history and progress remain available to you.
To keep a record of how you felt going into your workouts and coming out of them, for you and for the coaches responsible for your programme.
To keep your body weight and food records, if you use them, for you and for a coach you have linked with.
To suggest starting weights and appropriate load guidance.
To let an FAA coach read your movement check and tell you what they found.
To carry messages between you and your coach, and to send the notifications you have switched on at the times you chose.
To keep your data secure and synced across your sessions.

How your movement check is read. Every movement check is read by an FAA coach, who watches your videos and decides the result. Before the coach does, an AI service looks at the still pictures taken from your videos and gives a first read, which the coach sees beside their own. The AI's read does not decide your result: the coach's answers do. We compare the two so that we can judge how reliable the AI's reads are.

The story of your week. An AI service writes a short story of your week, from what was logged: what you trained, how the workouts went and what stood out. It is sent your check-in answers in words (for example "a hard session" or "a mild tightness", and how an answer compares with your own usual), the sets, reps and weights you logged, and FAA's own names for the sessions, movements and parts of the body. It is not sent your name, your date of birth, your account details, any dates, your notes or your own words. The story is information, not advice, and it can be wrong. You can switch it off in Settings at any time; what was already written stays on your page.

Reading a meal. If you ask the App to read a meal, an AI service estimates the foods in it and their amounts from your photo of the meal or the description you typed or said, and you check and change the estimate before it is saved. It is sent the photo or the description, and the correction you type or say if you ask it to read the meal again. When you say a meal aloud, your phone's own speech service turns what you say into words (on most Android phones this is Google's), and the words appear for you to check and change; we receive only the words, never the sound. It is not sent your name, your date of birth or your account details. An estimate can be well out. You can always type a meal in without the AI service. Meals are read only for adults who have agreed to the terms of use, and only a limited number of times each day.

The voice assistant. If you switch it on, during a workout you can press the microphone and say what you did or ask about the exercise, and on some pages a speaker at the top explains the page out loud. An AI service works out the answer and a voice service says it. For a workout, the AI service is sent what you said, the exercise and the workout as the App shows them (how the exercise is done, the sets you have logged, what comes next) and the last few things said in the conversation. For a page, it is sent the page's title and words, with your name and your coaches' names taken out. Before or after a workout you can also say your check-in: the AI service is sent what you said, the answers already on the page and the names of the movements the page offers, and the App fills the page in for you to check before anything is saved. The voice service is sent only the words of the answer, which can include figures from your workout or the words of a page you asked about. Neither is sent your name, your date of birth, your account details or the sound of your voice. The assistant can only do what the App's buttons do, reads back every change and lets you undo it. It does not comment on your technique and gives no health or food advice, and nothing to do with food or body weight has a voice. It is for adults who have agreed to the terms of use, and only a limited number of times each day.

We do not use your information for advertising or profiling for marketing. We do not use your videos, pictures or information to train AI models, and we will ask you separately before we ever do.

4. How Your Information Is Stored and Shared

Your data is stored on Supabase, our backend and database provider, in London, in the United Kingdom. Supabase acts as a data processor on our behalf. Data is transmitted using encrypted connections (HTTPS/TLS).

We do not sell your personal data. We do not share your personal data with third parties for their own marketing or advertising purposes. Data goes only to the service providers needed to operate the App, strictly for that purpose:

Supabase — stores your account, training data, check-ins, body weight and food records, messages, and movement-check videos and pictures.
Anthropic — the AI service, a company in the United States. It gives the first read of a movement check, writes the story of a week, reads a meal, and answers the voice assistant. For a movement check it receives the still pictures taken from your videos, the name of each movement and the questions asked about it; for a week, a meal and the voice assistant it receives what is described in Section 3. It does not receive your name, your date of birth or your account details. Under its terms for this service it does not use what we send to train its models. Pictures are sent only for adults who have agreed to filming, a week only for people who have agreed to the terms of use and have not switched the story off, a meal only when you have asked for it to be read, and the voice assistant's requests only when you have switched it on.
ElevenLabs — the voice service, a company in the United States. It turns the voice assistant's answers into speech. It receives only the words of each answer, as described in Section 3, and handles them under its own terms for this service.
Google (Firebase Cloud Messaging) — delivers notifications to your phone. It receives your device token and the text of the notification.
Apple (Apple Push Notification service) — on iPhone, carries those notifications from Firebase to your phone. It receives your device token and the text of the notification.
Google (ML Kit) — on Android, the technical information described in Section 2, for diagnostics.
Google Sign-In — only if you choose to sign in with Google.
Sign in with Apple — only if you choose to sign in with Apple.
Resend — sends the sign-in codes to your email address.

Who can see your data within FAA.

Your training data is visible to the coaches responsible for your programme.
Your answers at sign-up, including any injury, pain or condition you told us about, are visible to the coaches responsible for your programme.
Your check-ins, your week's page and your note on it are visible to you and to the coaches responsible for your programme. A coach is told when you mark something strong or sharp, and can mark a check-in as seen, which you are told.
Your body weight and food records, with their photos, are visible to you and to a coach you have linked with using their code, unless you switch "My coach can see my food and weight" off in Settings. They are not visible to FAA coaches you have not linked with, to an insurer or to anyone else.
Your movement check, its videos and what you felt are visible to FAA's coaches, who read every check.
Your messages are visible to you and the coach you are writing to.
If you join an insurer with its code, that insurer sees your name, your member number if you gave one, which programme you are on, and a summary of your training: sessions completed, minutes trained, average effort, and the last day you trained. It does not see your movement check, your videos, what you felt, your check-ins, your body weight or food, your answers at sign-up, or your messages. You can stop sharing at any time in the App.

We may also disclose information where the law requires it.

5. Data Retention

We retain your account data for as long as your account remains active, so that your training history stays available to you. Movement-check videos and the pictures taken from them are kept with your account until your account is deleted, or until you ask us to delete them at the address in Section 11. Meal photos are kept with your meals while "Keep my meal photos" is on; with it off, a photo is deleted soon after it has been read. A meal or a weigh-in you delete in the App is deleted. We keep a record of each request to the AI service and the voice service (what kind it was, when, how long it took and what it cost), which goes with your account. What you say to the voice assistant and its answers are not kept, apart from the answers about how hard a set was in your first two weeks (Section 2), which stay with your account. An explanation of one of FAA's own pages, such as an exercise or a programme's About page, reads the same for everyone, so it is kept and played again to the next person who asks, with nothing about who asked; an explanation of one of your own pages is not kept. You can delete your account and data at any time (see Section 6).

6. Deleting Your Account and Data

You have full control over your data.

In the App: open Profile, then Settings, and choose "Delete my account". This permanently deletes your account and the data listed below.

By email: email privacy@granitemind.ai with the subject line "Delete My Account", from the email address associated with your account. We will process the request and permanently delete your account and associated data within 30 days. Use this route if the App cannot delete your account itself, for example a coach's account.

What is deleted: your profile and photo, your answers at sign-up, assigned and self-built programmes, all logged training, your check-ins, your week's notes and stories, your answers about how hard a set was, your weigh-ins, your meals and their photos, your movement checks with their videos, pictures, answers and results, your messages and voice notes, your notification settings and device token, any insurer link, the record of the terms you agreed to, and your account login.

What may be retained: we may retain limited records where required by law (for example, security logs for a short period). These contain no training, health, food or video content and are deleted on a rolling basis.

7. Data Security

We take the protection of your data seriously and implement appropriate technical measures, including:

Encrypted data transmission (HTTPS/TLS) for all communication between the App and our backend.
Row-level access controls, so your records are readable only by your authenticated account and the people described in Section 4.
Movement-check videos and pictures, meal photos and voice notes held in private storage, reachable only through short-lived links issued to the people described in Section 4.
Secure, access-controlled backend infrastructure (Supabase).

No system is completely secure. In the event of a data breach affecting your personal data, we will act promptly and notify you and the relevant authorities where required by law.

8. Adults Only

The App is for adults, 18 and over.

At sign-up the App asks for your date of birth, and does not let anyone under 18 continue.
We do not knowingly collect personal information from anyone under 18. If we learn that we hold the information of someone under 18, we delete it.
If you believe someone under 18 has signed up, contact us at the address in Section 11.

9. Your Rights

You have the right to access, correct, or delete your personal data, to object to its processing, to withdraw a consent you have given (for example to filming, to the week's story, to a coach seeing your food and weight, or to sharing with an insurer), and to request a copy of your data in a portable form. To exercise any of these rights, contact us at privacy@granitemind.ai. We respond to data rights requests within 30 days.

If you are in South Africa, you also have the right to complain to the Information Regulator.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and post the revised policy at this URL. Where a change affects what you agreed to, such as the terms of use, the App asks you to agree again before it continues.

Paid subscriptions are not part of the current App. This policy will be updated before any such feature is released to you.

11. Contact Us

For any privacy-related questions or requests regarding the Fundamentally Astute Athletics app:

GraniteMind AI — Privacy
Email: privacy@granitemind.ai
Google Play developer name: Granite Build — the Play account predates the company registration; the registered entity is GraniteMind (Private) Limited. The same company publishes the App on Apple's App Store.
Response time: within 5 business days for general enquiries; within 30 days for formal data rights requests.