Privacy Policy

01Who we are

Skaz ("Skaz," "we," "us") is operated by Woodberry Holdings, Inc., a Delaware corporation. We are the controller of the personal information described in this policy.

Questions, requests, or complaints: support@skazfitness.com.

02Information we collect

Account information

When you create an account we collect your email address, a display name, a username, and optionally a profile photo and a short bio. If you sign in with Apple, we receive the identifier Apple provides and the email address you choose to share, which may be a private relay address. If you sign in with Google, we receive your name, email address, and profile picture from Google. If you create an account with an email address and password, our authentication provider stores the password only in hashed form; we never see it.

Phone number

You can link a phone number so that friends can find you (section 04). The number is verified by a text message code sent through our authentication provider, which holds the number as part of your login. Our own database stores only a keyed hash of the number, which cannot be turned back into the number.

Profile and training details

During setup and later in the app you may tell us your training experience, your goals and target dates, your height and body weight, your best lifts, and your preferred units. If you allow it, we read your date of birth and sex from Apple Health to calculate strength standards and heart-rate zones.

Content you create

• Workouts: exercises, sets, reps, loads, duration, notes, an optional location label, and a song you choose to attach.
• Sports and recovery sessions, goals and goal posts, training plans, and your workout queue.
• Social activity: who you follow, comments, likes, bookmarks, mentions, discussions, replies, and votes.
• Photos and videos, including the sound in videos.
• Direct messages and group chats, including photos you send, and challenges you send or accept.
• Feedback you send us from the app, with a screenshot if you attach one.

Health and fitness data from connected services

Only if you connect a service, and only the categories described in section 03.

Contacts

Only if you choose to find friends from your contacts, and only in the hashed form described in section 04.

Technical data

Each request from the app carries your device model, iOS version, app version, language, and unit preference. Our servers keep short-lived logs that include your IP address. If you allow notifications, we store the device token Apple issues so we can deliver them. We use no third-party analytics or advertising software. Crash reports reach us only through Apple, and only if you have chosen to share them with developers in iOS settings.

Payment information

Subscriptions are sold by Apple through the App Store. We never receive your card number. We receive the product you bought, its status, and transaction identifiers, which we process through RevenueCat (section 08) to unlock Skaz Max in your account.

03Connected services and wearables

Connecting a device or service is entirely optional. Skaz is fully usable without one. Each connection is authorized separately by you, and each can be revoked independently.

Apple Health

If you grant Skaz access to Apple Health, we read only the categories you approve in the iOS permission sheet. We ask for workouts, heart rate, heart rate variability, resting heart rate, sleep, steps, active energy, walking and running distance, VO2 max, body weight, body fat, height, date of birth, and sex. We use them to attach heart-rate data to your workouts, to show recovery, sleep, and training-load insights, to fill in your profile, and, only if you have turned on AI features, as context for the coach (section 05). With your permission we also write the workouts and body weight you log in Skaz back to Apple Health.

When Apple Health records a new workout, for example from an Apple Watch, Skaz can notify you so you can log it with a tap. We do not use Apple Health data for advertising, marketing, or similar purposes, we do not disclose it to third parties for those purposes, and we never sell it. You can change or revoke access at any time in iOS Settings under Privacy & Security → Health → Skaz.

Apple Watch

The Skaz app for Apple Watch runs a workout session on your watch so that heart rate and energy are recorded while you train, and it mirrors your sets and rest timer from the phone. Everything it records flows through your phone into your account and is treated as Apple Health data under this section.

WHOOP

If you connect WHOOP, you authorize us through WHOOP's own sign-in page, which shows the specific scopes you are granting before you approve. Skaz never sees your WHOOP password. Subject to what you approve, we may receive:

• Recovery scores and related metrics such as resting heart rate and heart rate variability
• Sleep records, including duration, stages, and sleep performance
• Cycle and strain data
• Workout records, including heart rate zones and calories
• Body measurements, such as height, weight, and maximum heart rate
• Basic profile information, such as your name and email as held by WHOOP

We use WHOOP data for one purpose: to display it to you inside Skaz and to inform the training and recovery insights we show you, including the coach if you have turned on AI features. We do not sell WHOOP data, use it for advertising, use it to build profiles for third parties, or share it with anyone other than the providers listed in section 08 who process it on our behalf.

You can disconnect WHOOP at any time in Skaz under Settings → Integrations, or by revoking access in your WHOOP account. When you disconnect, we revoke our access with WHOOP, disable the stored tokens, and stop receiving data. Metrics already imported remain part of your history until you delete your account or ask us to remove them.

Garmin

If you connect Garmin, you authorize us through Garmin Connect's own sign-in and consent page, where Garmin shows the data categories you are granting before you approve. Skaz never sees your Garmin password. Subject to what you approve, Garmin sends us:

• Activity records: activity type, duration, distance, calories, average and maximum heart rate, and the heart-rate samples recorded during the activity
• Daily health summaries: steps, active calories, distance, resting heart rate, heart rate variability, and sleep, including sleep stages and Garmin's sleep score
• Body composition, such as weight and body fat percentage
• Fitness metrics, such as VO2 max

Garmin delivers this data to our servers automatically after you sync your device. We receive nothing recorded before the date you connected. We use Garmin data for one purpose: to show it to you inside Skaz and to inform the training and recovery insights we show you, including the coach if you have turned on AI features (section 05). Garmin data is stored by Supabase, processed on Render, and, only while AI features are on and only when you use one, sent to Anthropic as described in section 05. No other third party receives it. We do not sell Garmin data, use it for advertising, use it to build profiles, or use it to train or improve any AI model.

Data that Garmin sends to Skaz is held and used by us under this policy. Garmin is not responsible for it once it reaches Skaz. You can disconnect Garmin at any time in Skaz under Settings → Integrations, or by removing Skaz from the connected apps in your Garmin Connect account. When you disconnect, we deregister with Garmin, delete the stored tokens, and stop receiving data. Metrics already imported remain part of your history until you delete your account or ask us to remove them.

04Finding friends from your contacts

Finding friends is optional. If you allow Skaz to access your contacts, the app converts each contact's phone number and email address into a one-way hash on your phone and sends us only those hashes. Names, numbers, and addresses never leave your device. We compare the hashes with the keyed hashes of members who have linked a phone number or email address and have not opted out of being found, and show you who is already on Skaz.

If you turn on "Tell me when contacts join," we keep your contacts' hashes, keyed again on our servers, so we can tell you when one of them joins. Otherwise we discard the list as soon as the match is done. You can stop being found by others, and stop these alerts, at any time under Settings → Contacts. Both end the moment you delete your account.

05AI features, only if you turn them on

Skaz has an AI coach, Brofessor, and a few features that use the same AI: building a starter plan or importing one from text or a photo, crafting a workout, Log with AI, and suggested wording for goals. They run on Claude models made by Anthropic. Nothing is sent to Anthropic until you turn AI features on. We ask during setup and again the first time you open an AI feature, and you can turn them off at any time under Settings → Preferences → AI Features. Everything else in Skaz works without them.

What we send when you use an AI feature: your message, or the text or photo you ask us to log, together with the context the coach needs. That context can include your recent workouts and training history, strength estimates, goals and plan status, your height, weight, and training experience, and, when a service is connected, health metrics such as sleep, heart rate variability, resting heart rate, and recovery. We do not send your email address, phone number, contacts, payment details, or your messages with other members.

Anthropic processes this data as our service provider, under terms that prohibit it from training models on it. Your conversations with the coach are stored in your account so the coach has continuity; you can clear them from within the chat. We keep a record of each AI request, which feature, which model, how many tokens, how long it took, for cost control. That record contains none of the content.

AI transparency statement. The AI features generate training feedback, plans, and workouts for you by sending the data described above, including health and activity data from Apple Health, WHOOP, and Garmin when connected, to Anthropic's Claude models. Nothing is processed by AI until you give explicit consent by turning AI features on, data is sent only when you use an AI feature, and you can withdraw consent at any time under Settings → Preferences → AI Features, which stops all AI processing immediately. We do not use your data, your coach conversations, or anything derived from them to train, evaluate, or improve any AI model, and neither does Anthropic.

AI-generated content is informational and is not medical, dietary, or clinical advice. See our Terms of Service for the full disclaimer.

06How we use your information

• To operate the app: store your training history, render your feeds, deliver messages, and sync your data across devices.
• To show you your own data, including trends, totals, weekly objectives, and progress over time.
• To generate the coaching and insight features described in section 05, if you have turned them on.
• To share what you choose to share with other members, as described in section 07.
• To rank the weekly leaderboard.
• To send the notifications you have asked for, which you control under Settings → Notifications.
• To keep the service safe: screening content, handling reports and blocks, preventing abuse, and enforcing our Terms (section 09).
• To communicate with you about your account, service changes, and support requests.
• To comply with legal obligations.

Where a legal basis is required, we rely on performance of our contract with you for core functionality, your consent for health data from connected services, for contact matching, and for AI features, and our legitimate interests for security, safety, and product improvement.

07What other members can see

Your display name, username, profile photo, bio, and your follower, following, and workout counts are visible to other members. Your email address, phone number, and date of birth are never shown.

Your account can be private or public. On a private account, your posts are visible only to followers you approve. On a public account, your posts also appear in Discover, where any member can see them. Either way, a workout you mark Private is visible only to you, and your body weight and goal weight are hidden from others unless you choose to show them. Comments, likes, and mentions are visible to anyone who can see the post they belong to.

The weekly Skaz leaderboard lists every member's score and rank for the week, built from training volume and activities. Workouts you mark Private count toward your score but are not named.

Direct messages are visible to the people in the conversation, and group chats to their members. Messages you have sent stay in the other person's conversation even if you later delete your account; they are then shown as from "Deleted user."

If you block someone, they can no longer see your posts, message you, or find you, and they are not told.

08Who we share information with

Service providers

We use a small number of providers who process data on our behalf under contract:

Song lookups send only the search text or the link you shared. Skaz does not connect to your Apple Music or Spotify account.

Legal and safety

We may disclose information if required by law, valid legal process, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of our users or the public.

Business transfers

If Skaz is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so and have no plans to.

09Safety screening and moderation

Posts, comments, discussions, goal posts, profile text, and uploaded photos are screened automatically for content that breaks our rules. Text and images go to OpenAI's moderation service, and borderline cases get a second look from Anthropic's Claude. This screening runs whatever your AI Features setting, because it protects other members rather than you. Both providers act as our service providers and may not use the content for anything else. Private messages are not screened; they are looked at only if someone in the conversation reports them.

Flagged content is held for review by our team and is then removed or kept; serious cases lead to suspension. Members can also report any post, comment, message, or profile and block anyone. We review reports and aim to act within 24 hours. We keep reports, a snapshot of the reported content, and screening results for as long as moderation requires, even after the content or the account is deleted.

10Retention and deletion

We keep your account data for as long as your account is active. You can delete your own posts, comments, and messages at any time. Deleting a post removes it, and its photos or videos, for everyone; deleting a comment or message removes it from the thread.

You can delete your account from within the app under Settings → Account Details → Delete Account. When you do, we delete your profile details, training history, photos and videos, goals, plans, coach conversations, data received from connected services, contact hashes, and stored tokens, and we tell Apple, WHOOP, Garmin, and RevenueCat to drop their connection to you. This starts immediately and is complete within 30 days. Backup copies are purged on our normal backup rotation, within 90 days.

Three things remain. Messages you sent to other members and comments you left on their posts stay in their threads, shown as from "Deleted user," because they are part of other people's conversations; you can delete them individually before deleting your account. Records needed for moderation, such as reports and their evidence, are kept as described in section 09. And the content-free records of AI requests described in section 05 are kept for cost accounting.

Deleting your account does not cancel an App Store subscription. Cancel it in your Apple account settings; the app reminds you of this on the deletion screen.

11Your rights and choices

Regardless of where you live, you can access, correct, or delete your data using the in-app controls, and you can ask for a copy of it by emailing support@skazfitness.com. We respond within 30 days.

If you are in the EEA or UK, you additionally have the right to object to or restrict processing, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. As stated above, we do not sell or share personal information. We will not discriminate against you for exercising any of these rights.

12Security

Data is encrypted in transit using TLS and encrypted at rest by our infrastructure providers. Access to production systems is restricted and authenticated. Tokens for connected services are stored encrypted on our servers and are never sent to the app.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator without undue delay.

13Children

Skaz is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact support@skazfitness.com and we will delete it.

14International users

Skaz is operated from the United States and your information is processed there. If you access Skaz from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses for such transfers.

15Changes to this policy

We will post any changes on this page and update the date at the top. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect.

16Contact

Woodberry Holdings, Inc.
support@skazfitness.com