Privacy Policy

Effective September 30, 2026

Apex Stacked ("we", "us") is a fitness and wellness app for athletes. This policy explains what data the app handles and how.

Apex Stacked is built around an on-device-first design. The data you log lives in a private database on your phone. It only leaves your device in the specific cases described below.

Information you provide and log

• Account: Apex Stacked requires you to sign in with Apple. Apple gives us a stable identifier for your account and, on your first sign-in only, the name and email you choose to share — which may be a private relay address. You can change what Apple shares in iOS Settings → your name → Sign-In & Security → Sign in with Apple.
• Training data: workouts, exercises, sets, weights, reps, cardio, recovery sessions (such as sauna, stretching, or walks), and personal records.
• Health & wellness data: body weight and composition, sleep, HRV, steps, energy, mood, water, and nutrition (calories and macros).
• Protocols: peptide / hormone-therapy (TRT) protocols and dose logs you choose to track.
• Bloodwork: lab panels and marker values you enter, scan, or upload.

Apple Health (HealthKit)

If you connect Apple Health, the app reads weight, body composition, steps, HRV, and sleep to fill in your trends. This is read with your permission and is never used for advertising, and the imported data is excluded from your iCloud backup. Individual Apple Health samples never leave your device. If you turn on Apple Health AI sharing — a separate, optional choice that is off unless you turn it on — summary statistics calculated on your device from that data (averages, ranges, and trends for the period) are included in the AI features described below. You can turn it off at any time in Settings → Health, and you can revoke Apple Health access entirely in iOS Settings → Privacy → Health. We do not write to Apple Health without your action.

Health Connect (Android)

If you connect Health Connect on Android, the app reads, with your permission: weight, body fat, lean body mass, steps, heart rate variability, sleep, resting heart rate, respiratory rate, workouts, and heart rate during workouts. The app only reads this data; it never writes to Health Connect.

Data read from Health Connect is kept on your phone, excluded from Android device backup, and is never used for advertising or sold. It leaves your phone only if you turn on health data AI sharing, a separate, optional choice that is off unless you turn it on. Then recent daily values and summaries calculated on your phone (for example your latest weight, last night's sleep, averages and trends) are included in the AI features described below. The raw sample-by-sample record is not sent. You can turn sharing off at any time in the app's Settings.

You can revoke access at any time in Health Connect's settings. The app also offers "Disconnect and erase synced data", which revokes access and deletes the Health Connect data the app stored.

Apex Stacked's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Where your data is stored

• On your device: the primary store for everything you log.
• Your private iCloud: if iCloud backup is available, an encrypted backup of your data is kept in your private iCloud container so it restores after a reinstall. We cannot access your iCloud.
• Our servers: we store a record of your disclaimer/age-gate acceptance (a random app ID, optional email, timestamp, the disclaimer version, which items you confirmed, and the Apple Health AI-sharing choice you made together with the version of that consent) as proof of consent. If an AI request is flagged by our automated safety checks, we keep a limited enforcement log (a hashed record with the app ID and timestamp — not your message content).
• Feedback you submit: the message and category, the app/device context it was sent with (app version, build, platform, OS, and the screen you were on), your optional email if you provided one, and a random per-install device identifier. This is deleted along with your other server-side data when you delete your account.
• Friends & Competitions (only if you turn it on): our servers store the handle and display name you choose; your Apple sign-in identifier; your friend list and the blocks you set; any reports you file (kept in anonymized form for up to 180 days for safety and moderation); your competition memberships; and, for each competition, only aggregate numbers — your points, your count of fully-completed days, and small freshness/version metadata. No per-item values, no targets or goals, and none of your logged health or training data ever leave your device for this feature.

Friends and competitions

Friends & Competitions is off by default. It begins only after you claim a handle and accept a short in-app disclosure. Your aggregate numbers are visible only to friends you accept, and only within competitions you both join.

• Removing a friend stops new requests and invitations between you, but a competition you have both already joined continues until it ends.
• Blocking someone hides your identities from each other within a shared competition.
• Turning the feature off ("Disable") is available at any time. It stops sharing and withdraws you from active competitions, while keeping your account so you can turn it back on later.
• Push notifications, if added, are optional.

Subscription and payment

The AI features require Apex Pro, an optional auto-renewing subscription. Apple handles the payment end to end. We never see and never receive your card number, billing address, or any other payment detail.

We use RevenueCat to manage subscription state. When you subscribe, restore a purchase, or the subscription renews or lapses, RevenueCat receives the purchase event from Apple and gives us back a subscription status — active or not — together with an identifier for your subscription. Our server reads that status to decide whether to run an AI request for you, and stores a short-lived cached copy of it so you are not locked out while briefly offline. That is the whole of it: we hold whether you are subscribed, not what you paid.

Cancel or manage the subscription in your Apple Account settings; deleting the app does not cancel it. Refunds are Apple's to issue — request one at reportaproblem.apple.com.

AI features (data sent for processing)

When you use an AI feature, the data needed for that feature is sent to our server, which relays it to our AI provider (Anthropic) to produce a response:

• Workout generation, day-of adjustments, and deload suggestions send relevant training history, goals, and preferences.
• The in-app setup assistants (training setup and macro setup) send the messages you type.
• The health AI coach sends your messages along with recent health metrics (such as weight, body composition, sleep, HRV, steps, energy, mood, and nutrition), your protocol names, doses, schedule, and last-dose date, your bloodwork markers and values, and recent training data, so it can give informed answers. These metrics may include values synced from Apple Health, but only when you have turned on Apple Health AI sharing, and only as summaries — never individual Apple Health samples.
• Bloodwork scanning uploads the photo(s) or PDF of your lab report for parsing. Lab reports often include identifying details printed by the lab (such as your name, date of birth, or ID numbers) — crop or cover anything you don't want processed, or enter values manually instead.
• Weekly and monthly Insights send a summary of the period — counts, averages, ranges, and trends calculated on your device — so the report can be written. Your individual entries and samples are not sent. Apple Health-derived figures are included only if you have turned on Apple Health AI sharing.

This data is used to generate your result and is not used to train models or for advertising. Our AI provider retains API inputs and outputs only briefly for operational and abuse-detection purposes and does not use them to train models; data may be retained longer only where required by law or to enforce its usage policy. Avoid entering information you don't want processed this way.

To keep these features working and improve them, each AI request carries a random, anonymous per-install identifier so we can measure and attribute usage — for support, reliability, cost management, and product improvement. The same kind of anonymous identifier is attached to the feedback you send. It is not linked to your name, and it is never used for advertising or cross-app tracking.

Feedback and bug reports

When you send feedback from the app, your message, the category you choose, and your app version, build, platform, and OS are sent to and stored on our server so we can review and act on it. You can optionally include your email address if you'd like us to be able to reply — it is never required, and we use it only to respond to you about your feedback. If you don't provide an email, your feedback is tied only to a random per-install identifier. When we act on a report we may open a tracking issue in our private issue tracker (GitHub) containing the report details, but never your email.

Third parties

• Anthropic — AI processing for the features above.
• Apple — Sign in with Apple, and all payment processing for Apex Pro.
• RevenueCat — subscription status for Apex Pro (whether you are subscribed; never payment details).
• Apple iCloud — your private backup (controlled by you).
• Railway — hosts our server.
• GitHub — our private issue tracker, where we may create a tracking issue to act on your feedback (issue text only, never your email).

What we do NOT do

• No advertising, no ad networks, no cross-app tracking.
• No analytics SDKs collecting your activity.
• No selling or renting of personal data.

Deleting your data

You can permanently delete your account and data from Settings → Profile → Delete account & data. This erases your on-device data and your iCloud backup, and — when you're online — deletes your records on our servers (consent history, any feedback you submitted, and related entries). If the server can't be reached at the time, your on-device and iCloud data are still erased; contact us and we'll remove the server record. Deletion cannot be undone.

If you used Friends & Competitions, deletion also removes your handle, display name, Apple sign-in identifier, friends, blocks, and push token. In any competition history you appear in, you are anonymized to "Former member" so other participants' records stay intact; ended-competition results are retained in this anonymized form.

Deleting your account does not cancel an Apex Pro subscription. The subscription belongs to your Apple Account, not to us, so we cannot cancel it on your behalf — cancel it in your Apple Account settings, or it will keep renewing. Records held by Apple and RevenueCat about the purchase itself are outside our control and follow their own policies.

Children

Apex Stacked is intended for adults (18+) and is gated by an age confirmation. It is not directed to children.

Health disclaimer

Apex Stacked provides general fitness and educational information only. It is not medical advice and is not a substitute for a licensed healthcare provider. Always consult a professional before acting on anything in the app, especially regarding hormones, peptides, supplements, or bloodwork.

Changes

We may update this policy; material changes will be reflected by a new effective date.