skazPrivacy Policy
Skaz is a strength training app, which means much of what you give us is health information. This policy explains exactly what we collect, why we hold it, who else touches it, and how to get it back or delete it.
01Who we are
Skaz ("Skaz," "we," "us") is operated by Woodberry Holdings, Inc., located at 7 Gracie Lane, Darien, CT 06820, United States. We are the controller of the personal information described in this policy.
Questions, requests, or complaints: support@skazfitness.com.
02Information we collect
Account information
When you create an account we collect your email address, a display name, and an optional profile photo. If you sign in with Apple, we receive the identifier Apple provides and the email address you choose to share, which may be a private relay address.
Content you create
- Workout records: exercises, sets, reps, load, duration, notes, and timestamps.
- Body metrics you choose to enter, such as bodyweight.
- Photos you attach to sessions or your profile.
- Social activity: who you follow, comments, reactions, and anything you post to the feed.
Health and fitness data from connected services
Only if you connect a service, and only the categories described in section 03.
Technical and usage data
Device model, operating system version, app version, IP address, crash reports, and basic usage events such as which screens are opened. We use this to keep the app working and to fix defects.
Payment information
Subscriptions are processed by Apple through the App Store. We never receive your card number. We receive only a subscription status and transaction identifier from Apple.
03Connected services and wearables
Connecting a device is entirely optional. Skaz is fully usable without one. Each connection is authorized separately by you, and each can be revoked independently.
WHOOP
If you connect WHOOP, you authorize us through WHOOP's OAuth consent screen, which shows the specific scopes you are granting before you approve. Subject to what you approve, we may receive:
- Recovery scores and related metrics such as resting heart rate and heart rate variability
- Sleep records, including duration, stages, and sleep performance
- Cycle and strain data
- Workout records, including heart rate zones and calories
- Body measurements, such as height, weight, and maximum heart rate
- Basic profile information, such as your name and email as held by WHOOP
We use WHOOP data for one purpose: to display it to you inside Skaz and to inform the training and recovery insights we show you. We do not sell WHOOP data, use it for advertising, use it to build profiles for third parties, or share it with anyone other than the infrastructure providers listed in section 06 who process it on our behalf.
You can disconnect WHOOP at any time from within Skaz, or by revoking access in your WHOOP account. When you disconnect, we stop requesting new data immediately and delete the WHOOP data we have stored within 30 days, along with the access and refresh tokens.
Apple Health (HealthKit)
If you grant Skaz access to Apple Health, we read only the categories you approve in the iOS permission sheet, which may include workouts, heart rate, active energy, sleep, and bodyweight. We may write workouts you log in Skaz back to Apple Health if you enable that.
We do not use HealthKit data for advertising, marketing, or similar services, and we do not disclose HealthKit data to third parties for those purposes. We do not sell HealthKit data to anyone, and we do not use it for any purpose other than health, fitness, and the features described in this policy.
You can revoke Health access at any time in the iOS Settings app under Privacy & Security → Health → Skaz.
Other wearables
For devices such as Garmin, Fitbit, Oura, and Polar, we use Terra API as a data aggregator. When you connect one of these, Terra handles the authorization with your device provider and passes the resulting activity, sleep, and recovery data to us. Terra processes this data on our behalf under contract. Their handling is described at tryterra.co/privacy-policy.
04How we use your information
- To operate the app: store your training history, render your feed, and sync your data across sessions.
- To show you your own data, including trends, totals, and progress over time.
- To generate the coaching and insight features described in section 05.
- To share what you choose to share with the people who follow you.
- To keep the service secure, prevent abuse, and enforce our Terms.
- To communicate with you about your account, service changes, and support requests.
- To comply with legal obligations.
Where a legal basis is required, we rely on performance of our contract with you for core functionality, your consent for health data from connected services and for optional marketing, and our legitimate interests for security and product improvement.
05AI-powered features
Skaz includes an AI coaching feature. When you use it, we send relevant context from your account — such as recent workouts and any connected recovery data — to Anthropic's Claude API to generate a response.
Anthropic processes this data as our service provider under contract and does not use it to train their models. Conversation history is stored in your account so the feature has continuity, and you can delete conversations at any time.
AI-generated content is informational and is not medical, dietary, or clinical advice. See our Terms of Service for the full disclaimer.
06Who we share information with
Other users
Content you post to the feed is visible to people who follow you, subject to your privacy settings. Your display name and profile photo are visible to other users. Body metrics and data from connected wearables are never shown to other users unless you explicitly choose to share them.
Service providers
We use a small number of infrastructure providers who process data on our behalf under contract:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and media storage |
| Render | Application hosting |
| Anthropic | AI coaching feature processing |
| Terra API | Wearable data aggregation |
| Apple | App distribution, sign-in, and subscription billing |
Legal and safety
We may disclose information if required by law, valid legal process, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of our users or the public.
Business transfers
If Skaz is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so and have no plans to.
07Retention and deletion
We keep your account data for as long as your account is active.
You can delete your account from within the app under Settings → Account → Delete Account. When you do, we permanently delete your training history, photos, AI conversations, and any data received from connected services within 30 days, except where we are legally required to retain specific records. Backup copies are purged on our normal backup rotation, within 90 days.
Disconnecting a wearable deletes the data received from that service without deleting the rest of your account, as described in section 03.
08Your rights and choices
Regardless of where you live, you can access, correct, export, or delete your data by using the in-app controls or by emailing support@skazfitness.com. We respond within 30 days.
If you are in the EEA or UK, you additionally have the right to object to or restrict processing, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local supervisory authority.
If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. As stated above, we do not sell or share personal information. We will not discriminate against you for exercising any of these rights.
09Security
Data is encrypted in transit using TLS and encrypted at rest by our infrastructure providers. Access to production systems is restricted and authenticated. OAuth tokens for connected services are stored encrypted and are never exposed to the client application.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator without undue delay.
10Children
Skaz is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact support@skazfitness.com and we will delete it.
11International users
Skaz is operated from the United States and your information is processed there. If you access Skaz from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses for such transfers.
12Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect.
13Contact
Woodberry Holdings, Inc.
7 Gracie Lane, Darien, CT 06820
support@skazfitness.com