Privacy Policy

Last updated: 2026-10-02

This Privacy Policy explains how Pyke ("we", "us") collects, uses, and protects information when you use the Pyke app or website.

Who we are

Pyke is an app for tracking your own training: your workouts, your body measurements, your food, and your progress over time.

Pyke is built and operated by the team behind Menlore, who are the data controller for everything described here and the people you reach at hello@pyke.fit. Pyke is not yet a separate legal entity, so that is who is answerable for your data.

What we collect

We collect only what's needed to run the service:

• Account info - your email address, your password and your name.
• Health & training data - your workout logs, body measurements (weight, waist, stomach), progress photos you upload, daily checklist responses, activity logs, the food and water you log, and the training programs and meal plans you create. This is sensitive personal data and we treat it accordingly.
• Health answers - only if you give them: whether you are pregnant or breastfeeding (and, if breastfeeding, whether your baby is under or over six months), and whether you take thyroid medication or have diabetes, PCOS or a history of an eating disorder. They are stored on your account only to set safe calorie and macro targets and to tell you when to check with a doctor. They are never sent to Anthropic or to any AI, and they are deleted with your account.
• Health documents - only if you add them: a blood test, a body-composition report, or a doctor's, physio's or dietitian's letter about training or food. The file you pick is sent to Anthropic once (the PDF exactly as it is; a photo resized for upload), including any name, ID or clinic details printed on it, so Pyke's AI can read the results; Pyke never saves the file to your account. You review what was read and only the lines you keep are stored: results as numbers with their ranges, body measurements, and instructions as categories (for example 'avoid overhead pressing until 15 November'), never the letter's wording. Once allowed, those stored lines ride along with your coaching requests so programs, meal plans, the monthly check-in and the Coach's answers can respect them. Anything the Coach builds from them stays in that program, plan or conversation until you change it, and a body-fat figure you choose to apply from a body scan becomes part of your calorie targets until you change those. You can switch this off or delete a document at any time under Profile, Health documents; deleting your account removes them all.
• Wearable and health-app data - only if you connect one. If you connect WHOOP, we import your recovery, strain, sleep, heart-rate and weight readings. If you allow Apple Health on iOS, we read your steps, energy burned, resting heart rate, sleep and weight, and we write your workouts, weigh-ins, meals and water back into Apple Health on your own device. You can disconnect either at any time in Profile → Connected devices.
• Usage data - basic technical information your browser sends (IP address, device type, last sign-in time), plus product analytics as described below.
• Product analytics - we measure how people move through Pyke so we can fix what is broken and see what is worth building. Two things are recorded. First, one random identifier stored in your browser, used to count how many people reach the site, click through, and finish signing up. It expires after 180 days, is reset when you sign out, and is never shared or matched against anything outside Pyke. Second, if you are signed in, each recorded action also carries your account identifier - so we hold a record of which product features you opened and when, kept for 180 days and readable by Pyke staff. What we record is that something happened, never what the data was: no weight, body measurement, photo, calorie or macro figure, workout, wearable reading, message, name or email is ever included in analytics, and analytics is never linked to your health or training data. You can turn all of this off in Settings -> Preferences -> Product analytics, and we honour Global Privacy Control and Do Not Track automatically.
• Subscription status - whether your trial is running and whether you have an active subscription, plus when it renews or ended. We never see or store your card, bank details or Apple Account. Payment is handled entirely by Apple; our payments provider, RevenueCat, tells us only your account id and the App Store receipt - never your card details.

We do not collect: precise location, contacts, advertising identifiers, or browsing history outside Pyke.

Why we collect it

• To provide the service (let you log in, save your data, sync across devices).
• To show you your own history and progress over time.
• To identify and fix bugs.

We never sell your data. We never share it with advertisers.

Where it's stored

Your data is stored on Supabase servers, currently in the Mumbai, India (ap-south-1) region. This is a cross-border transfer for users outside India. Supabase is a US-based provider with appropriate data protection commitments. We may move the database to a UAE region in the future for users in the Middle East - we will notify you if that happens.

Service providers we use

We rely on a small number of companies to run Pyke. They process data on our behalf under their own terms, and none of them may use it for advertising:

• Supabase - hosting, accounts, database and file storage (see "Where it's stored" above).
• Sentry - crash and error reports, so we can find and fix bugs.
• Apple and Google - delivering push notifications to your device.
• Open Food Facts - when you search for a food or scan a barcode, that search term or barcode is sent to Open Food Facts (a free, open food database) to look the product up. Nothing that identifies you is sent with it.
• WHOOP - only if you choose to connect a WHOOP account.
• Resend - sends the account emails: signup confirmation and password reset. It receives the email address needed to deliver each one.
• Anthropic PBC - the company behind the Claude models that power Coach AI in Pyke. You run every AI feature yourself, by asking for it. Requests go from Pyke's own server to Anthropic's API - your device never talks to Anthropic directly. Anthropic does not receive your email address, and your account identifier is never sent except that the crew report identifies members to the model by an account id and never by name. A health document you choose to upload reaches Anthropic once (the PDF exactly as it is; a photo resized for upload), with whatever is printed on it. The private health form answers (pregnancy, breastfeeding, conditions) are never sent. Anything you type into a chat is sent. Under Anthropic's commercial API terms, none of what is sent or returned is used to train their models. Anthropic processes what Pyke sends under its commercial terms and data processing addendum, which hold it to protection at least equal to this policy; it normally keeps API inputs for up to 30 days, longer only where its policy enforcement or the law requires, and never trains on them. Before the first time you use any AI feature, Pyke asks your permission in the app; you can withdraw it at any time in Profile → Preferences → AI coach, which turns every AI feature off.

What each AI feature sends to Anthropic

Only the feature you actually use sends anything, and only what that feature needs:

• Coach chat and the sign-up interview - your name, sex, age, height and weight, and what you type, including your answers about daily steps or your job, session length, a body-fat estimate if you give one, and your carb preference. If a wearable is connected: its name, how often you currently train, your resting heart rate, sleep and daily burn.
• Ask the coach - your current program, today's session, your latest weigh-in, today's and yesterday's meal totals as numbers, and your latest wearable readings. If you have allowed health documents: the results, measurements, injuries and doctor's instructions you saved, as numbers, dates and codes.
• Program drafting and revisions - your goal, target weight, pace, activity level, schedule, experience, injuries and notes, and if you imported training history, a summary of your lifts. If you have allowed health documents: the results, measurements, injuries and doctor's instructions you saved, as numbers, dates and codes.
• Monthly summary - your name, your sign-up answers, 30 days of your workouts and notes, body stats, targets and wearable recovery. If you have allowed health documents: your doctor's instructions and injuries, as codes and dates.
• Meal estimate - the description you type and the one photo you attach; the photo is not stored.
• Program import - the text, screenshots or PDF you upload.
• Meal plans - your targets, meals per day, diet style, foods to avoid, cuisine, cooking time, notes, and the names of dishes already in the plan so they are not repeated. When you add regulars or build from the chat, it also sends your regulars (name, calories and macros), eating-out days and calories, your eating window, budget, cooking skill, and foods you like or dislike. If you have allowed health documents: the results, measurements, injuries and doctor's instructions you saved, as numbers, dates and codes.
• Meal plan import - the text, screenshots or PDF meal plan you upload.
• Meal plan changes - the meal, day or plan you ask Pyke to change and your typed instruction, so it can redo just that part. To do that it also sends that meal or day's calorie and macro targets, the plan's meals per day, diet style, foods to avoid, cuisine and cooking time, the names of the plan's other dishes, and, if you set them, your regulars, eating-out days, eating window, budget, cooking skill, and likes and dislikes. To find which days a change touches it sends each day's dates, dish names and foods. If you have allowed health documents: the results, measurements, injuries and doctor's instructions you saved, as numbers, dates and codes.
• Build a meal plan by chat - your first name, your targets, training days and what you type. If you have saved regulars (regular meals), their names, calories and macros, and any eating-out days you gave. It also asks your eating window, budget, cooking skill, and foods you like or dislike, never why.
• Health documents - the blood test, body-composition report or doctor's letter you add, as the PDF or photos you pick, sent to Anthropic once (the PDF exactly as it is; a photo resized for upload), including any name, ID or clinic details printed on it; Pyke never saves the file. Only what you keep after reviewing it (results as numbers with ranges, body measurements, and a doctor's instructions as categories and dates, never the wording) is saved to your account.
• Crew report - each member's month as numbers plus an account id, never a name. If a crew member has the coach switched off, their month still appears as numbers in a report another member generates, because those numbers are already shared inside the crew.

Who can see your data

• You - full access to your own data via the app.
• No other user. Pyke has no trainers, coaches, gyms or shared accounts. There is nobody you can grant access to, and no way for another person using Pyke to see your workouts, your body measurements, your food logs or your progress photos.
• Us (the Pyke team) - only as needed for support, debugging, or to comply with the law. We do not browse user data routinely.
• Every Pyke user, for foods you add to the shared library - when you add a food manually and leave "Add to the food library" switched on, that food's name, brand and macros are saved to a library everyone using Pyke can search. The row records your user id so a wrong entry can be traced and corrected; your name, email and your own food diary are never shown with it. Switch the toggle off to keep a food to yourself, or email us to have one removed.
• Nobody else.

How long we keep it

We keep your data for as long as your account is active. If you delete your account or ask us to, we delete your personal data within 30 days (some information may persist in encrypted backups for up to 90 days, after which it is permanently removed).

What deleting your account removes

Deleting your account removes your profile, your health answers, your workouts and activities, your body measurements, your progress photos and their image files, your nutrition and water logs, your checklists, your programs and meal plans, any health documents you added (the results, measurements and instructions you kept), and any AI training profile generated for you. Your login is deleted with it.

Nothing is held back. Everything on your account belongs only to you, so there is no second party with a record to preserve and nothing survives deletion.

Your rights

Under the UAE Personal Data Protection Law and similar laws elsewhere, you have the right to:

• Access the personal data we hold about you.
• Correct any data that is wrong.
• Delete your data ("right to be forgotten").
• Withdraw consent at any time.
• Object to certain uses of your data.
• Receive a copy of your data in a portable format.

You can delete your account and personal data yourself at any time, directly in the app: tap your profile picture on Home, then Account → Delete account. (Settings also has a Delete card that opens the same flow.) To exercise any other rights, email us at hello@pyke.fit. We respond within 30 days.

Cookies and local storage

Pyke uses your browser's localStorage and IndexedDB to keep your data available offline and to remember you between sessions. The same storage is used on the marketing site, which holds one random analytics identifier and nothing else. We do not use cookies for advertising or third-party tracking, and no third party receives any of it. Clearing your browser storage will sign you out and remove your offline cache, but your cloud data remains intact.

Children

Pyke is not intended for users under 18. By using Pyke you confirm that you are 18 or older.

Changes

We may update this policy as the service evolves. The date at the top always tells you when it last changed, and material changes will be highlighted in the app.

Contact

Questions or requests: hello@pyke.fit.