Privacy Policy

Effective and last updated July 31, 2026

This policy explains the information Apex Health uses to provide fitness planning, nutrition logging, progress tracking, and the Pex companion experience.

Information you provide

We collect account details such as email address, display name, and authentication information. We also store information you choose to enter, including height, weight, goal weight, fitness goals, activity level, workout preferences, workout plans and records, sets and repetitions, nutrition and water logs, weight history, onboarding choices, feedback, support requests, and Pex/player progress such as achievements, inventory, quests, and currency.

Device, diagnostics, and analytics

We may process app version, device platform, page or feature context, connection state, sanitized error categories, and short navigation breadcrumbs to diagnose reliability problems. When production analytics are enabled, PostHog processes product-usage analytics. The public marketing site may also use Meta Pixel to measure registration and campaign performance. We do not intentionally send passwords, authentication tokens, camera content, or raw health-log entries in diagnostic events.

Camera and food data

Camera permission is optional and used only to scan food barcodes. Apex does not save barcode camera photos or video. Food search and nutrition estimates use the FatSecret Platform API. Search terms or barcode numbers may be sent through Apex's Fly.io backend to FatSecret to return matching foods. Nutrition information is an estimate and is not medical advice.

Pex AI

Pex uses automated AI systems powered in part by OpenAI. When you choose to use Pex, your message and relevant account, workout, nutrition, progress, preference, memory, or recent conversation context may be sent through Apex's backend to OpenAI to generate a response. Recent conversation turns are stored in session storage; Apex may retain structured memory, pending actions, feedback, and usage metadata in Supabase. OpenAI may retain API content and metadata under its applicable service and abuse-monitoring controls. Pex is optional, can be inaccurate, and is not medical diagnosis, treatment, or emergency guidance. See the AI Disclosure.

Service providers

Supabase provides authentication, database, and server-function infrastructure. Resend may deliver account or service email. OpenAI processes Pex prompts and relevant context. Fly.io hosts the nutrition proxy, and FatSecret provides food and nutrition data. PostHog processes app interactions, device or session identifiers, diagnostics, and IP-derived approximate location when configured. Meta Pixel may process website interactions and identifiers for measurement when configured. Cloudflare delivers and protects the public website. Apple, Google Play, and Stripe process applicable purchases; Apex receives transaction identifiers and entitlement status but not complete payment-card numbers. These providers process data for the purposes described here and under their applicable terms.

How we use information

We use information to operate and secure accounts, personalize fitness and nutrition targets, save progress, power Pex progression, provide support, prevent abuse, process subscriptions, understand product performance, and troubleshoot failures. We do not sell personal fitness data.

Retention and deletion

Account and fitness information is retained while the account is active and as needed to operate the service. You can permanently delete your account inside Apex under Profile or Settings. The deletion process removes the authentication identity and associated Apex profile, fitness, nutrition, progress, support, analytics-linked user records, and beta/waitlist records. Apex currently stores no user-uploaded files. Limited security logs or records required for fraud prevention, legal compliance, dispute resolution, or enforcing agreements may remain for the minimum necessary period in provider backups or operational logs.

Security and international processing

We use access controls, encryption in transit, database row-level security, and service-provider safeguards appropriate to the nature of the information. No method is completely secure. Apex and its providers may process information in the United States and other countries where they operate, subject to applicable contractual and legal safeguards.

Your choices and rights

You may review or change profile information in the app, decline optional camera access, request support, or delete your account. Depending on where you live, you may also have rights to access, correct, export, object to, restrict, or erase personal information. Email support@trainwithapex.net to make a request.

Age eligibility

Apex is intended for adults age 18 and older. We do not knowingly collect personal information from children.

Changes and contact

We may update this policy as Apex changes. The effective date above identifies the latest version. Apex Health is operated by Train With Apex LLC. Questions can be sent to support@trainwithapex.net.