Privacy Policy | Pelaris

Last updated: 16 November 2026 | Version 1.13

The Short Version

Pelaris is an AI-powered fitness coaching app. Here’s what you need to know:

We collect your profile, training data, and body measurements to generate personalised programs and coaching.
Your photos and reports vanish. Body scan photos and the reports, printouts and notes you upload are read in memory and immediately discarded, never stored on our servers, never seen by a human. We keep the numbers.
Your name and email stay out of the AI. We strip personal identifiers from the text we send to AI. Photos and reports can’t be scrubbed, so we never send your name or email with them. A report or note can show details on it, such as your name, so you can crop it first.
Pelaris is a global app. We use major cloud providers, such as Google Cloud, to store and process your data, and we prefer Australian and European regions so we meet the strictest privacy rules. When our AI reads your data, it may be processed in other regions.
We never sell your data. We only share it with the service providers that run Pelaris, or with a third party (like an AI assistant or a fitness service) when you choose to connect one.
AI never trains on you. Your data is never used to train or improve any AI model, ours or Google’s.
You own the delete button. Delete your account and your profile, programs, measurements and conversations go. We keep only what the law or an unsubscribe needs (Section 8).
No ads. No data selling. We make money from subscriptions, not your data.

For the full details, read on.

1. Who We Are

Pelaris (“we”, “us”, “our”) is an AI-powered adaptive fitness coaching platform. We are the data controller responsible for your personal information.

Privacy Contact: Email: privacy@pelaris.io

If you have any questions about this policy or how we handle your data, please contact us at the email above.

2. Data We Collect

2.1 Information You Provide

Data	Examples	Why We Collect It
Account information	Email address, display name	To create and manage your account
Fitness profile	Goals, experience level, available equipment, training preferences, injuries	To personalise your training programs
Training data	Workout sessions, exercise logs, sets, reps, weights, RPE ratings, completion status	To track your progress and adapt your programs
Body measurements	Shoulder, waist, hip circumferences, height, weight (from manual entry or AI analysis)	To assess body composition and personalise training
Body photos	Photos you upload for AI body analysis	To estimate body measurements, photos are processed in memory and immediately discarded, never stored on our servers
Body composition reports	A PDF, screenshots or photos of a DEXA, InBody or smart scale report, a printout, or a handwritten note of your measurements, that you upload	To read your results into your account. The file is read in memory and immediately discarded, never stored on our servers. We keep the numbers you confirm, the type of machine (if there is one) and the report date
Coach conversations	Messages you send to the AI Coach, preferences and health notes you share	To provide personalised coaching responses
Feedback	Session feedback, RPE ratings, check-in responses, injury reports, and messages you send us through the feedback forms	To adapt your programs based on how you feel
Strava activity data	Sport type, date, duration, distance, heart rate, pace/speed, cadence, power, elevation gain	To understand training load, tell training from everyday movement (Section 4.5) and adapt your coaching program
Polar exercise data	Sport type, duration, heart rate, pace, cadence, calories. Pelaris also stores the full exercise record Polar sends (device model and device id, training load, whether a route was recorded, and detailed sport type), alongside the mapped fields (sport, start time, duration, distance, average and maximum heart rate, calories). This full record is retained with your account and deleted with it.	To understand training load, tell training from everyday movement (Section 4.5) and adapt your coaching program
Wahoo workout data	Sport type, duration, power, heart rate, cadence, distance	To understand training load, tell training from everyday movement (Section 4.5) and adapt your coaching program
Garmin activity data	Sport type, start time, duration, distance, heart rate, pace/speed, cadence, calories, elevation gain, device model and laps, for each activity Garmin sends after you connect Garmin Connect. Pelaris also stores the activity summary Garmin sends, with its starting location removed, alongside the mapped fields. This summary is retained with your account and deleted with it. Heart rate is health data (Sections 15 and 16). No GPS, route or location data, and no sleep, stress or other all-day health data	To complete matching planned sessions, understand training load, tell training from everyday movement (Section 4.5) and adapt your coaching program
Health platform activity data (Apple Health / Health Connect)	Workout summaries (workout type, start and end time, duration, distance, and on iOS energy burned) and each workout’s average and maximum heart rate, read from Apple Health (iOS) or Health Connect (Android) with your device-level permission. Heart rate and distance are read only for the time span of each workout. Summaries only, no GPS or route data, no steps or sleep	To complete matching planned sessions, show distance, pace, heart rate and effort zones on your sessions, understand training load, tell training from everyday movement (Section 4.5), and adapt your coaching program
Workout files you upload	FIT files from a watch or bike computer (Garmin, COROS, Suunto, Wahoo, Polar)	To bring your training history into your account. The file is read in memory and immediately discarded, never stored on our servers. We keep the workout summary you confirm (sport, date and time, duration, distance, heart rate, cadence, power, ascent, calories, laps and pool lengths) and the make and model of the device. Your GPS route is never kept. AI helps sort the workout, name it and judge the effort (Section 4.5).
Invite, share and partner links	The invite code on a link you share, and whether someone joins or buys through it. If you open a partner’s link, use a partner’s code, or join or subscribe through one: which code it was, how you arrived (a link, a code you typed, or checkout) and the date. A code that matches no friend or partner is kept only as its shape (for example “one lowercase word”), never the text you typed.	To credit you when a friend joins, to credit and pay a partner in the Pelaris Partner Programme when you join or subscribe through their link or code, and to catch misuse. We rely on our legitimate interest in crediting partners fairly and preventing referral fraud. A partner sees only totals and pseudonymous lines (for example “Customer 04”, the month, the plan and the payment number), never your name, email or training data. A hashed (scrambled) network address is kept with referral records for up to 7 years. Images you create to share stay on your device until you choose to post them.
Partner Programme (partners only)	If you are a Pelaris partner: your name or business name, contact email, country, payout details (Wise or PayPal), currency, and tax details: a tax ID (such as an ABN or VAT number) and a note of where your tax documents are kept	To run the programme: credit you, pay you, send your statements and keep the records tax law requires. Wise or PayPal receives your payout details to send the payment, and may process them outside Australia. Kept for 7 years after your last payment, then removed.
Subscription data	Your plan (Beach, Pelaris Ocean or Pelaris Horizon), its status, purchase and renewal dates, and the platform you subscribed through	To run your paid plan if you buy one. Card and bank details are handled by the payment platform (Stripe through RevenueCat’s checkout on the web, the Apple App Store on iOS, Google Play on Android), never by Pelaris. We never see or store your full payment card number.

Paid plans, Pelaris Ocean and Pelaris Horizon, have been available since 19/09/2026. If you never buy one, the only subscription data on your profile is the name of your free plan, Beach, and no payment data is collected at all. Everyone who joined before general availability (Spring Tide, 1 October 2026) is a founding member, is never billed, and has no payment data with us.

2.2 Information We Derive

Data	How It’s Created
AI-generated training programs	Generated by AI based on your profile, goals, methodology, and training history
Body composition estimates	Derived from your photos or manual measurements using AI analysis
Coach memory	Preferences, health notes, and context the AI Coach retains from your conversations
Training metrics and trends	Calculated from your workout logs (e.g., volume trends, RPE trajectory, streak data)
Completion analysis	AI analysis of actual vs. target performance after each training week

2.3 Information Collected Automatically

Data	Purpose
Device and browser information	To optimise the app experience for your device
Usage analytics	Screen views, feature usage and funnel events, collected automatically to understand how the app is used
Error and crash reports	Automatic reports generated when the app crashes or hits an error, used to identify and fix bugs. Reports we send to our issue tracker (Linear) keep only closed facts and shortened IDs.
Sign-in activity	App open date and time, platform and app version, to measure app usage and keep your account secure. No IP address, device identifier or browser fingerprint is recorded.
How you signed up	The platform (web, iOS or Android), the sign-in method (Google, Apple, email link or password) and the route you came in by, recorded once when your profile is created, and the versions of the Terms and Privacy Policy you accepted

Usage analytics and error/crash reports are collected automatically as part of running Pelaris, they are not gated behind a separate consent toggle. If you would like your analytics or crash records deleted, contact privacy@pelaris.io and we will delete them separately from the rest of your account.

3. How We Use Your Data

We use your data for these purposes only:

Purpose	Legal Basis (GDPR)	APP Reference
Provide the service (programs, coaching, tracking)	Performance of contract	APP 3, 6
Personalise training based on your goals and feedback	Performance of contract	APP 3, 6
AI processing of your data to generate recommendations	Legitimate interest + consent for health data	APP 3, 6 (sensitive: explicit consent)
Body photo analysis	Explicit consent	APP 3 (sensitive information)
Usage analytics to improve the app	Legitimate interest	APP 3, 6
Error reporting and crash diagnostics	Legitimate interest	APP 3
Communicate with you about your account	Performance of contract	APP 3
Comply with legal obligations	Legal obligation	APP 3, 6

We use what you do in Pelaris, such as whether you have started a program or logged a session, to decide which coach updates to send you. Coach updates only go to people who have them switched on, and you can switch them off at any time in Settings.

We never use your data to:

Train or improve AI models
Sell to third parties
Serve advertising
Build advertising or marketing profiles about you, or share what you do in Pelaris with advertisers
Make automated decisions with legal or similarly significant effects without your ability to contest

4. How Our AI Works

Pelaris uses artificial intelligence (Google Gemini via Vertex AI) to power three core features:

4.1 Training Program Generation

The AI considers your goals, training history, fitness level, available equipment, chosen methodology, body measurements, and feedback to generate personalised, periodized training programs.

If you connect your Strava account, Pelaris imports a summary of your completed activities including sport type, date, duration, distance, and available performance metrics (heart rate, pace, cadence, power, elevation). GPS coordinates and route data are not imported. This data helps the AI understand your recent training load and adapt your programs accordingly.

If you connect Garmin Connect, Pelaris imports each new activity Garmin sends after you connect: sport type, start time, duration, distance, heart rate, pace, cadence, calories, elevation, device model and laps. Activities recorded before you connected are not imported, and GPS coordinates, route and location data are never imported. Sending your planned workouts to Garmin Connect is optional and off until you turn it on. If you do, Pelaris sends your planned workouts for about the next two weeks so they appear on your watch, and updates them when your plan changes. Garmin receives these workouts under the Garmin privacy policy. Turn it off any time in Profile > Connected Apps, and Pelaris asks Garmin to remove the upcoming workouts it sent. Workouts already on your watch or in your Garmin history stay with Garmin.

If you use the Pelaris mobile app and connect Apple Health (iOS) or Health Connect (Android), Pelaris reads your workout data from that platform, with your permission granted at the operating-system level. On Android, Pelaris requests three read-only Health Connect permissions: Exercise (to complete the matching planned session and add the workout to your training history), Distance (to show the distance and pace of each workout) and Heart rate (to show each workout’s average and maximum heart rate and effort zones, and to help your coach judge how hard a session was). On iOS, Pelaris reads Workouts and Heart rate from Apple Health for the same purposes. Heart rate and distance are read only for the time span of each workout, access is read-only, and GPS coordinates, route data, steps and sleep are never read. This data becomes part of your training history: it helps the AI understand your recent training load (as a summary of your last 28 days of training), automatically completes matching planned sessions, and informs your programs.

4.2 AI Coaching

The AI Coach responds to your questions and requests, suggests exercise alternatives, logs health notes, and adapts your training. Coach conversations are processed in real time. Your program goes live when it is ready, and your coach keeps building and adapting the next weeks as you train, unless you switch on Check with me first in Profile.

4.3 Coach Memory

The AI Coach remembers certain things you tell it across conversations to provide continuity:

What it remembers: Training preferences, health notes (e.g., “I have a shoulder injury”), equipment availability, and general coaching context you share.
Where it’s stored: Coach memory is stored in your account data in Firestore, the same way your training data is stored.
How long it remembers: Coach memory persists as long as your account is active.
Your control: You can ask the Coach to forget specific information at any time (say “forget my shoulder injury” or similar). You can also delete all coach memory by deleting your account.

Coach memory is subject to the same privacy protections as all your other data, it is never shared, never used for model training, and is permanently deleted when you delete your account.

4.4 Body Composition Analysis

When you take or upload photos, AI estimates body measurements (such as shoulder, waist and hip circumferences and a body fat percentage range), classifies your body type and suggests a hair style for your figure. When you upload a body composition report, a printout or a note of your measurements (handwritten ones too), AI reads the numbers on it and shows them to you to check before anything is saved. Photos, reports and notes are processed in memory only and immediately discarded. After a scan, the AI also writes your results and compares your check-ins using your saved measurements, your weight if you have added it, your goals and a summary of your training.

What the AI Receives

Before your text data reaches an AI model, we run it through our privacy scrubber, which strips out your name, email address and other personal identifiers. Photos, reports and notes can’t be scrubbed. With them we send only details you have given us, such as your height, age and sex, and never your name or email.

What the AI Does NOT Do

Does not store your photos. Photos exist in temporary server memory during processing only.
Does not train on your data. Pelaris uses Google’s pre-trained Gemini models via Vertex AI under enterprise terms. Google does not use your data to train or improve its AI models. Your prompts and responses are not retained by Google beyond the processing duration.
Does not diagnose medical conditions. AI outputs are fitness guidance, not medical advice.
Does not make decisions you can’t override. You can modify or reject any AI recommendation.

AI Transparency

All AI-generated content in Pelaris is clearly identified as AI-generated. Training programs, coaching responses, and body estimates are automated recommendations, no human reviews them before they reach you. If you believe an AI output is inaccurate or unsafe, you can contact us.

Connected devices and services. When you connect a device or service (Garmin Connect, Polar, Wahoo, Strava, Apple Health or Health Connect), the AI reads the activities it imports to complete your planned sessions, understand your training load and adapt your program. This runs on Google Gemini via Vertex AI, after the privacy scrubber. Your data is never used to train, evaluate or improve any AI model.

Connecting is always your choice. When you connect Garmin Connect, Apple Health or Health Connect, Pelaris shows you what it will do with your data and records your consent before anything is imported. Strava, Polar and Wahoo ask for your permission on their own sign-in screens. You withdraw your consent at any time by disconnecting in Profile > Connected Apps. For Garmin Connect, Polar, Wahoo, Apple Health and Health Connect you can also choose to delete the imported data when you disconnect.

4.5 Training or Everyday Movement

When a workout arrives from a connected app or a file you upload, Pelaris can use AI (Google Gemini via Vertex AI) to understand it. It decides whether the workout is deliberate training, which becomes an entry in your training history, or everyday movement, such as a stroll to the shops, which is kept with your imported activity but not added as a training entry. For an uploaded file, it can also suggest a workout name and judge how hard the effort was.

To do this, the AI receives a structured summary of the workout, with details such as its sport, duration, distance, heart rate and the time it started. It never receives the workout’s name or title, your name or other identifiers, GPS coordinates or route data. The summary passes through our privacy scrubber first, like every other AI request, and Google does not use it to train its models. If the AI is unavailable or unsure, the workout is treated as training. You can link any workout to a planned session by hand, including one sorted as everyday movement, and you can disconnect an app or delete its imported data at any time (Profile > Connected Apps).

5. Body Analysis & Photo Processing

This section covers our highest-sensitivity data handling.

How Photos Are Handled

You select a photo
Photo is resized on your device, and the location, device and time details stored in the photo are removed
Transmitted securely (HTTPS/TLS) to our processing server
Server decodes photo in temporary memory (RAM only)
AI extracts approximate body measurements (the AI may run this step in another region)
Photo buffer is immediately released and garbage collected
Only the measurements and results the AI reads are returned and stored

Your photo is:

Held in temporary server memory for seconds only
Never written to any storage system, database, log file, or backup
Never viewed by any Pelaris employee, contractor, or third party
Never transmitted to any party other than the secure AI processing endpoint
Never used to train or improve any AI model

What IS stored: The measurements and results the AI reads: shoulder, waist and hip circumferences (and chest where it can read it), height, an estimated body fat percentage range, body type classification, a hair style for your figure, a short written summary and training recommendations, along with the height, age and sex used for that scan. Weight is stored if you enter or confirm it; it is not sent with your photos. For a report, printout or note you upload, we store the numbers you confirm, the type of machine (if there is one) and the report date. These are stored as health information in your account.

Before your first body analysis, we will ask for your explicit consent. You can use Pelaris without ever using the body analysis feature. You can withdraw consent and delete all stored measurements at any time. We record your choice together with the exact words you were shown, and delete that record with your account.

Third-Party Services

Service	Provider	Purpose	Data Shared	Model Training
Firebase Authentication	Google	User login and identity	Email, auth tokens	No
Cloud Firestore	Google	Data storage	All account data (encrypted)	No
Vertex AI (Gemini)	Google	AI processing	Scrubbed fitness data (no name or email). Photos, reports and notes you send for a body scan, with your height, age and sex	No
Firebase Analytics	Google	Usage analytics	Usage events (screen views, feature use) tied to a random app identifier, and your sport, experience level and training methodology as audience labels.	No
Firebase Hosting	Google	App delivery	None (static hosting)	No
Linear	Linear Orbit, Inc.	Tracking errors and alerts so we can fix them	A short description of an error or alert, with any ID cut to six characters. Never a name, email or training details.	No
Resend	Plus Five Five, Inc. (Resend)	Email delivery: the emails we send you, such as your welcome email and weekly summary, and messages sent through our contact form	Your email address and the content of each email, which can include training details such as sessions completed, personal records and your next session. Resend also receives a send reference for each email we send you, which includes your Pelaris account ID. Contact form messages include the name, email address and message you enter. Open tracking is off, so our emails carry no tracking pixels.	No
Strava API	Strava, Inc.	Training activity import	Sport type, date, duration, distance, heart rate, pace, cadence, power, elevation, no GPS or route data	No
Polar AccessLink API	Polar Electro	Training activity import	Exercise data, sport, duration, heart rate, pace, cadence, calories, plus the full exercise record Polar sends (device model and device id, training load, whether a route was recorded, and detailed sport type)	No
Wahoo Cloud API	Wahoo Fitness	Training activity import	Workout summaries, power, heart rate, cadence, distance, duration	No
Garmin Connect API	Garmin	Training activity import, and sending planned workouts to Garmin Connect if you turn that on	From Garmin: activity summaries, sport, start time, duration, distance, heart rate, pace, cadence, calories, elevation, device model and laps, no GPS or route data. To Garmin, only if you turn it on: your planned workouts (name, sport, steps, targets, a short note and date)	No
Apple HealthKit	Apple	On-device health data access (iOS app)	None sent to Apple. With your permission, workout summaries (including distance and energy burned) and workout heart rate are read from Apple Health on your device and stored in your Pelaris account	No
Google Health Connect	Google	On-device health data access (Android app)	None sent to Google. With your permission, workout summaries, distance and workout heart rate are read from Health Connect on your device and stored in your Pelaris account	No
RevenueCat	RevenueCat, Inc.	Subscription management and the hosted web checkout (only if you buy a paid plan)	Your Pelaris account ID (the same Firebase user ID used elsewhere in your account), your plan, its status, purchase and renewal events, and the country and currency of the purchase. RevenueCat uses this ID to track your subscription state. Card details never pass through Pelaris; at web checkout they go to Stripe.	No
Stripe	Stripe, Inc.	Payment processing for web purchases	The card details and billing email you enter at checkout, and the amount. Pelaris receives a confirmation and a receipt, never your card number.	No
Wise and PayPal	Wise; PayPal	Paying partners in the Pelaris Partner Programme (partners only)	The partner’s name or business name, their payout details (bank details for Wise, or the PayPal email), the amount and currency, and a payment reference. Nothing about the customers a partner referred, and nothing about other Pelaris users.	No
Apple App Store and Google Play	Apple, Google	In-app purchases in the iOS and Android apps	Handled entirely by Apple or Google under your store account and privacy policy. Pelaris receives the purchase receipt and subscription status, never your payment details. If you ask Apple or Google for a refund, RevenueCat tells them on our behalf that your purchase was delivered and whether you had a free version first. Nothing else about your account is shared (see Terms, Refunds).	No

All Google services are used under Google Cloud Platform enterprise terms, which explicitly state: “Google will not use Customer Data to train or improve Google’s generalized AI/ML models.”

Pelaris uses the Strava API to import activity data for connected athletes. By using the Strava integration, you acknowledge that Strava may monitor and collect certain usage data related to how Pelaris accesses the Strava API, in accordance with Strava’s own privacy policy and API Agreement.

Pelaris uses the Polar AccessLink API, the Wahoo Cloud API and the Garmin Connect API for the same purpose. Wahoo may use data sent to the Wahoo Platform for its own business purposes per the Wahoo API Agreement. Planned workouts you choose to send to Garmin Connect go to Garmin for its own purposes, under the Garmin privacy policy, not as our processor.

Apple HealthKit and Google Health Connect work differently from the cloud APIs above: they are on-device platform APIs, not cloud services. When you connect one, Pelaris reads workout summaries and heart rate directly on your device, only after you grant permission in iOS or Android, and uploads that data to your Pelaris account. No Pelaris data is sent to Apple or Google through these integrations, and Apple and Google do not act as processors of your Pelaris data. Access is read-only: Pelaris never writes data back to Apple Health or Health Connect. You can revoke Pelaris’s access at any time in your device settings, or disconnect in the app (Profile > Connected Apps), where you can also choose to delete the imported data.

AI Platform Integrations (MCP)

Pelaris can optionally connect to third-party AI assistants (such as Claude and ChatGPT) via the Model Context Protocol (MCP), so you can view and manage your training through an assistant you already use. This connection is entirely optional. If you never connect an AI assistant, none of the sharing described here occurs.

How the connection works: Data is shared only after you explicitly connect Pelaris to an AI assistant through OAuth 2.0 authorisation. During authorisation you are shown exactly which permissions (scopes) the assistant is requesting, and you must approve before any data flows. Pelaris gives each connection its own pseudonymous identifier and does not send your email address to the assistant. The sign-in tokens the assistant holds also carry the ID of your Pelaris profile, which for most accounts is the same as your Firebase user ID, along with the permissions you approved and the assistant’s name. What the assistant can read or change stays limited to the permissions you approved.

Permissions (scopes) you can grant: Access is controlled by scopes, each of which you approve at connection time:

Read your profile (profile:read). Your basic training profile, such as experience level, equipment, and availability.
Read your training (training:read). Programs, planned and completed sessions, session details, benchmarks, goals, and progress. This includes activities imported from a connected service, such as Garmin Connect, with the name of the service and device they came from (for example “Garmin Forerunner 965”).
Manage your training (training:write). Create, modify, or delete planned and completed sessions, log workouts, swap exercises, complete intake, manage goals, and submit check-ins and feedback. Programs are built in Pelaris, not by the assistant.
Read your health data (health:read). Body composition data (measurements such as weight, waist, hip, shoulder, chest, height and muscle mass, ratios, archetype, and assessments) and injuries.
Manage your health data (health:write). Record body benchmarks and injuries.
Read coaching insights (coach:read). Coaching context and insights.
Stay connected (offline_access). Lets the assistant refresh its access without you re-authorising each session.

If you grant a “manage” (write) scope, the connected assistant can add to, change, or delete the corresponding data in your account. Most AI assistants ask you to confirm before they run an action, but that confirmation happens inside the assistant, not inside Pelaris. You control what an assistant can do by choosing which scopes to grant, and you can revoke access at any time.

Your control: You can see every connected AI assistant, the permissions it holds, and when it was last used, in the app (Profile > Connected Apps). You can disconnect any assistant at any time, which immediately revokes all of its access tokens so it can no longer read or modify your data. You can reconnect later with fresh consent. Data an assistant has already received is retained and handled under that assistant’s own privacy policy, not ours.

What Pelaris does NOT do:

We do not store your AI assistant conversation data.
We do not share your data with AI assistants without your explicit authorisation.
We do not sell your data to AI platform operators.
We do not grant an assistant any permission you did not approve.

Platform privacy policies: Each AI assistant has its own privacy policy governing how it handles data received from tools like Pelaris. We encourage you to review:

Anthropic Privacy Policy (Claude)
OpenAI Privacy Policy (ChatGPT)

Advertisers or ad networks
Data brokers
Social media platforms
Insurance companies
Employers
Any party for marketing purposes

Law Enforcement

We will only disclose personal data to law enforcement or government authorities if:

We are legally compelled to do so (court order, subpoena, or mandatory legal process)
We believe in good faith that disclosure is necessary to prevent imminent harm

If legally permitted, we will notify you before any disclosure.

7. Data Storage & Security

Where Your Data Lives

Pelaris is a global app. We use major cloud providers, such as Google Cloud Platform, to store and process your data, and we prefer Australian and European regions so we meet the strictest privacy rules. When our AI features read your data, it may be processed in other regions. The emails we send you are stored by Resend in the United States and sent from Japan, and subscription and payment data for paid plans is handled by RevenueCat, Stripe, Apple and Google on their own systems (see Sections 6 and 12).

How Your Data Is Protected

Measure	Implementation
Encryption in transit	All data transmitted over TLS 1.2+ (HTTPS)
Encryption at rest	Google Cloud default encryption (AES-256) for all stored data
Access controls	Firestore security rules enforce per-user data isolation
PII scrubbing	Personal identifiers stripped before AI processing
No photo storage	Body photos processed in memory only, never persisted
Rate limiting	API rate limits prevent abuse
Input sanitisation	Prompt injection detection and content length limits
Authentication	Firebase Authentication with secure session management

Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms:

We will notify the Office of the Australian Information Commissioner (OAIC) within 72 hours of becoming aware of the breach, as required by the Notifiable Data Breaches (NDB) scheme.
We will notify affected users without undue delay, including a description of the breach, the data affected, and steps we are taking.
For users covered by GDPR, we will also notify the relevant supervisory authority within 72 hours per GDPR Article 33.

8. Your Rights

You have the following rights regarding your personal data:

Right	What It Means	How to Exercise It
Access	See what data we hold about you	Contact privacy@pelaris.io
Correction	Fix inaccurate data	Edit in-app or contact us
Deletion	Delete all your data permanently	In-app account deletion or contact us
Data portability	Receive your data in a machine-readable format	Contact privacy@pelaris.io (JSON export)
Withdraw consent	Stop optional data processing that relies on your consent (such as body analysis, or a connected device or service)	In-app settings, disconnect the device or service in Profile > Connected Apps, or contact us
Object	Object to processing based on legitimate interest	Contact privacy@pelaris.io
Restrict processing	Limit how we use your data while a concern is resolved	Contact privacy@pelaris.io
Complaint	Lodge a complaint with a supervisory authority	See “Complaints” section below

Account Deletion

You can delete your account from within the app (Profile > Settings > Delete Account). When you delete your account:

Your account is disabled straight away.
We erase your profile, programs, workout history, body measurements, goals, coach conversations and preferences, from our database and our reporting copy, usually within a few hours and always within 30 days, which is also when backup copies expire.
Your sign-in record is deleted.
If you pay on the web, we cancel your subscription at the end of the period you have paid for. If you subscribed in the App Store or Google Play, cancel there first.
What we keep, and why: payment records for up to 7 years (tax and accounting law); a stripped record of any referral reward for up to 7 years; a record that an email address unsubscribed, bounced or complained, kept as a scrambled version of the address, so we don’t email it again; a minimal record of the email consent you gave, kept for 2 years for the same reason; and anonymised admin and analytics records that no longer identify you.

Automated Decision-Making

Pelaris uses AI to generate training programs, coaching responses, and body composition estimates. These are automated recommendations. Under GDPR Article 22, you have the right to:

Be informed that automated decision-making is used (this section serves that purpose)
Request human review of any AI-generated recommendation
Express your point of view and contest an AI decision
Contact us if you believe an AI output is inaccurate or unsafe

9. Data Retention

Data Type	Retention Period
Account and profile data	Retained while your account is active
Training data and workout history	Retained while your account is active
Body measurements	Retained while your account is active
Coach conversation history	Retained while your account is active
Body photos and uploaded reports, printouts and notes	Never retained, processed and immediately discarded
Polar exercise records (including the full device and training load detail)	Retained while your account is active, deleted with your account or when you disconnect Polar and choose to delete imported data
Garmin activity records (including the activity summary Garmin sends)	Retained while your account is active, deleted with your account or when you disconnect Garmin Connect and choose to delete imported data. When you turn sending off or disconnect, Pelaris asks Garmin to remove the upcoming workouts it sent
Analytics data	Event-level analytics retained for up to 14 months, then deleted or aggregated. Aggregated statistics that cannot identify you may be kept longer.
Error/crash reports	Retained for up to 90 days
Sign-in activity	Retained while your account is active, so we can report on how the app is used over time
Subscription and payment records	Retained while your account is active and for up to 7 years after a transaction where required for tax, accounting, or legal obligations
Referral and partner link history	Records linked to a payment: up to 7 years (financial records). A partner link or code that never led to a purchase, and a code that matched nothing: 13 months. Your link and code history is deleted when you delete your account.
Deleted accounts	All data permanently deleted within 30 days of deletion request, except the records listed in Section 8

10. Children’s Privacy

Pelaris is not intended for use by anyone under 16 years of age. We do not knowingly collect personal data from children under 16. If we discover that we have collected data from a child under 16, we will delete that data promptly.

If you are a parent or guardian and believe your child has provided personal data to Pelaris, please contact us at privacy@pelaris.io.

11. Cookies & Tracking

Pelaris is a web application. We use the following technologies:

Technology	Type	Consent Required?	Purpose
Firebase Auth tokens	Strictly necessary	No	Login and session management
Firestore local persistence	Strictly necessary	No	Offline functionality
Session cookies	Strictly necessary	No	App functionality
Saved discount or partner code	Strictly necessary	No	When you open a Pelaris link carrying a discount or partner code, the app keeps that code on your device, with how you arrived (a link or a code), so the discount you asked for applies at checkout. Cleared once used, or after 30 days.
Firebase Analytics	Analytics	No	Understanding feature usage

Your Choices

Essential technologies are required for the app to function and cannot be disabled.
Analytics run automatically as part of the app, there is no in-app toggle to disable them today. Contact privacy@pelaris.io if you would like your analytics records deleted.
On pelaris.io, if you visit from the EU, the UK, Switzerland, Iceland, Liechtenstein or Norway, our analytics tag starts switched off: it sets no cookies, and Google counts your visit only as an estimate. We switch off Google’s advertising signals for everyone.
We do not use any third-party advertising cookies or tracking pixels.

12. International Data Transfers

Pelaris is a global app. We use major cloud providers, such as Google Cloud, to store and process your data, and we prefer Australian and European regions so we meet the strictest privacy rules. Google Cloud processes AI requests within its infrastructure under enterprise data processing terms, so your data may be processed in other regions while the AI reads it.

For users in the European Economic Area (EEA) or United Kingdom:

Data transfers to Google Cloud are covered by Standard Contractual Clauses (SCCs) as approved by the European Commission.
Google Cloud’s Data Processing Addendum addresses GDPR transfer requirements.

Our emails, and messages sent through our contact form, are delivered by Resend. Resend stores email records (the recipient’s email address, each email’s content and its delivery logs) in the United States and sends our emails from its Tokyo, Japan region, under its Data Processing Addendum and, for EEA and UK users, Standard Contractual Clauses.

If you buy a paid plan, RevenueCat and Stripe process your subscription and payment data on their own infrastructure, which may be outside Australia (including the United States), under their own privacy policies and, for EEA and UK users, Standard Contractual Clauses or an equivalent transfer mechanism. Purchases made through the Apple App Store or Google Play are handled by Apple or Google under your store account.

If you connect Garmin Connect and choose to send your planned workouts, Garmin receives them under its own privacy policy and may process them outside Australia and the EEA.

13. Changes to This Policy

We may update this privacy policy from time to time. When we make changes:

Minor changes (clarifications, formatting): Updated on this page with a new “Last updated” date.
Material changes (new data collection, new third parties, changes to your rights): We will notify you via email and/or an in-app notice at least 14 days before the changes take effect.

If a material change requires your renewed consent, we will ask for it explicitly. Continued use of Pelaris after being notified of changes constitutes acceptance of the updated policy.

We maintain a version history of this policy. Previous versions are available on request.

When you create your account or accept an updated policy, we record which version of this privacy policy you consented to (the version number shown at the top of this policy) on your account profile. This allows us to:

Track which users have accepted which policy version
Identify users who need to re-consent after a material change
Maintain an audit trail for legal compliance

If you have not accepted the current policy version, we may prompt you to review and accept it before continuing to use certain features.

14. Contact & Complaints

Privacy Inquiries

For any questions about this privacy policy or your personal data:

Email: privacy@pelaris.io

We aim to respond to all privacy inquiries within 14 days.

Complaints

Australia: If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: https://www.oaic.gov.au/privacy/privacy-complaints
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

European Union / United Kingdom: If you are in the EEA or UK and believe we have breached GDPR, you can lodge a complaint with your local data protection authority. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

For users covered by GDPR, here is a summary of our legal bases for processing:

Processing Activity	Legal Basis
Account creation and management	Performance of contract (Art. 6(1)(b))
AI training program generation	Performance of contract (Art. 6(1)(b))
AI coaching responses	Performance of contract (Art. 6(1)(b))
Processing health/fitness data	Explicit consent (Art. 9(2)(a))
Importing health platform data (Apple Health / Health Connect workouts and heart rate)	Explicit consent (Art. 9(2)(a))
Importing Garmin Connect activities (including heart rate) and sending planned workouts to Garmin Connect	Explicit consent (Art. 9(2)(a))
Body photo analysis	Explicit consent (Art. 9(2)(a))
Usage analytics	Legitimate interest (Art. 6(1)(f))
Error reporting	Legitimate interest (Art. 6(1)(f))
Security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Legal compliance	Legal obligation (Art. 6(1)(c))

16. United States: Consumer Health Data (Washington & California)

This section applies if you are a resident of the United States. It supplements the rest of this policy and, for the data it covers, controls if there is any conflict.

Consumer Health Data

Some of the data Pelaris collects is consumer health data, defined broadly under laws such as Washington’s My Health My Data Act (MHMDA) as information that identifies your past, present, or future physical or mental health. For Pelaris, consumer health data includes:

Your fitness and training data (workouts, sessions, exercise logs, RPE, and completion status)
Your body-metric data (height, weight, body measurements such as shoulder, waist, hip, chest circumference, muscle mass, ratios, archetype, body composition estimates, and the reports, printouts and notes of your measurements that you upload)
Injuries, health notes, and check-in responses you share
Data imported from connected fitness services (for example heart rate and other physiological metrics from Garmin Connect, Polar, Wahoo or Strava)
Data read from health platforms you connect (Apple Health or Health Connect workout summaries and heart rate)

Consent to collect. We collect your consumer health data only after you provide affirmative consent, which you give when you create your account, complete intake, or use a health-related feature (such as body analysis). You can decline health-related features and still use core parts of Pelaris.
Separate consent to share. We do not sell your consumer health data, and we do not share it with third parties except (a) with service providers and processors who help us operate Pelaris under contract (see Section 6), or (b) at your specific direction. Connecting a third-party AI assistant (see “AI Platform Integrations (MCP)” in Section 6) is a sharing action that requires your separate, affirmative authorisation at the time you connect, and you choose exactly which data the assistant may access.
No sale. We do not, and will not, sell your consumer health data. We do not use it for targeted advertising.

Your Rights

If you are a US resident, you may:

Withdraw consent to the collection or sharing of your consumer health data at any time. Withdrawing consent stops future processing but does not affect processing that already occurred.
Access and confirm what consumer health data we hold about you and with whom we have shared it.
Delete your consumer health data specifically, separate from deleting your whole account. On a valid deletion request we will delete the health data we hold and direct our processors to do the same, subject to narrow legal exceptions.
Not be discriminated against for exercising any of these rights.

California residents (CCPA/CPRA): In addition to the above, you have the right to know, access, correct, delete, and obtain a portable copy of your personal information, and to limit the use of sensitive personal information (which includes health data). We do not sell or “share” (as CCPA/CPRA defines those terms for cross-context behavioural advertising) your personal information. You may use an authorised agent to submit a request, and you will not be discriminated against for exercising your rights.

How to Exercise These Rights

To exercise any right in this section, or to appeal a decision we make about a request, contact our privacy contact at privacy@pelaris.io. We will verify your request and respond within the timeframes required by applicable law. Washington residents may also complain to the Washington State Attorney General, and California residents to the California Privacy Protection Agency or California Attorney General.

17. Australian Privacy Principles Compliance

Pelaris complies with the 13 Australian Privacy Principles (APPs) under the Privacy Act 1988:

APP	Principle	How We Comply
1	Open and transparent management	This privacy policy; privacy contact available
2	Anonymity and pseudonymity	Users can use a display name; PII scrubbed for AI processing
3	Collection of solicited personal information	We only collect data necessary for the service; sensitive data (health, body) requires explicit consent
4	Dealing with unsolicited personal information	We do not seek or retain unsolicited personal information
5	Notification of collection	This policy and in-app notices inform you of collection
6	Use or disclosure	Data used only for stated purposes; not disclosed without consent
7	Direct marketing	We do not use personal data for direct marketing without consent
8	Cross-border disclosure	Pelaris is a global app that uses major cloud providers and prefers Australian and European regions; AI processing may happen in other regions on Google Cloud, under enterprise terms with appropriate safeguards (see Section 12)
9	Adoption, use, or disclosure of government-related identifiers	Not applicable, we do not collect government identifiers
10	Quality of personal information	You can correct your data in-app or by contacting us
11	Security of personal information	Encryption, access controls, PII scrubbing, secure infrastructure (see Section 7)
12	Access to personal information	You can request access to all data we hold about you
13	Correction of personal information	You can correct inaccurate data in-app or by contacting us

This privacy policy is effective as of 16 November 2026.

Pelaris is committed to protecting your privacy. If anything in this policy is unclear, please contact us at privacy@pelaris.io, we’d rather explain than confuse.