Privacy Policy

Account information: your email address and a securely hashed password.

Health and fitness information you provide: to build your plan, we collect what you enter — which may include age, height, weight and goal weight, training experience, equipment, schedule, goals, and target events, and — because you choose to share them so we can train around them — injuries, chronic pain, medical conditions, medications, supplements, dietary restrictions and allergies, sleep, and stress. You control what you enter; optional fields may be left blank.

Training and usage data: logged workouts, sets, weights, reps, runs and distances, personal records, session feedback you write, and messages you send to the in-app coach.

Device and technical data: basic technical information such as browser/device type, and product-analytics events about how you use the Service.

We use your information to create, adapt, and deliver your training, nutrition, recovery, and devotional content; operate, maintain, secure, and improve the Service; communicate with you about your account (including password-reset emails); respond to feedback and support; and comply with legal obligations.

Foundry uses third-party AI services to build your plan and power your coach. Before anything is sent, the app shows you what will be shared and who receives it, and asks for your permission. Nothing about you is sent to an AI service unless you tap Allow.

Anthropic (the maker of Claude) builds and adjusts your training plan, writes nutrition guidance, answers your coach chats, and writes the personal note in your weekly email. To do that it receives: your profile and intake answers (first name, age, sex, height and weight, goals and target events, training history and lifts, equipment and schedule, and anything you choose to share about injuries, health conditions, medications and supplements, sleep, stress, and diet); your training data (logged sets, reps and weights, runs, check-ins, and session feedback); and the messages you send the coach.

OpenAI turns the daily devotional into audio, only when you tap to hear it. It receives only the text being read aloud.

Never sent to an AI service: your email address, password, or payment details.

How they protect it: both services process this data only to answer Foundry’s requests, under their business (API) terms, which do not allow them to use it to train their AI models and require them to protect it with safeguards at least as strong as those described in this Policy.

Your choice: if you don’t allow AI data sharing, nothing is sent, but Foundry cannot build your plan or coach you. To withdraw permission later, email support@novarahq.io and we will turn it off for your account; you can also delete your account in the app at any time.

We do not sell your personal information. We share it only with service providers that operate the Service on our behalf under confidentiality obligations — currently including hosting and database (Render), AI plan and coach generation (Anthropic), read-aloud audio (OpenAI), transactional email (Resend), and product analytics (PostHog); when required by law or to protect rights, safety, or property; and in connection with a business transfer, subject to this Policy.

Some information you provide (such as injuries, conditions, and medications) may be considered sensitive. We collect it only because you choose to provide it so the Service can tailor your plan, and we use it only for that purpose and to operate the Service. Foundry is not a healthcare provider and does not provide medical care.

We keep your information for as long as your account is active or as needed to provide the Service, and afterward only as needed for legitimate business or legal purposes. You may request deletion of your account and associated data (see Your Rights).

We use reasonable technical and organizational measures to protect your information, including hashing passwords and transmitting data over encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

You may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent, depending on where you live. You can edit your profile in the app, and you can request access or deletion by contacting us at support@novarahq.io.

The Service is not directed to and may not be used by anyone under 18, and we do not knowingly collect information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

The Service uses local storage and similar technologies to keep you signed in and remember your place in the app, and product-analytics tools to understand usage.

We operate the Service from the United States. If you use it from elsewhere, your information will be processed in the U.S. and other countries where our providers operate.

We may update this Policy. If changes are material, we will take reasonable steps to notify you and update the date above.

Questions or requests: support@novarahq.io.