Privacy policy

You must be at least 16 to use Panthyr. Panthyr is not meant for children, and we don't knowingly collect personal data from anyone under 16. If you're a parent and think your child has signed up, email us at hello@panthyr.ai and we'll delete the account.

Account and profile: your email address, display name, date of birth and the age derived from it, gender if you give it, height, training experience, goals, available equipment, training availability, session length, appearance and unit preferences, and the records of your acceptance of the terms of use and your acknowledgement of training risks (the version and the time).

Training: workout plans, templates, completed workouts, exercises, sets, reps, weights, duration, distance, effort ratings, notes, feedback, and progress records.

Nutrition: meal names and times, calories, macros, nutrition goals, notes, and AI scan summaries. When you choose meal scanning, the selected photo is sent through our backend to OpenAI for a one-time estimate. Panthyr does not save the photo to its database or file storage. The editable nutrition draft you choose to save is stored with your account.

Body measurements and progress photos: entries such as body weight, body-fat percentage and the circumferences you choose to log, and any progress photos you add. Photos are stored in private storage that only your account can read, served through short-lived links, never shown to Panthyr the coach or sent to any AI provider, and deleted with your account.

Panthyr data: your conversations with Panthyr, generated workout or plan content, the notes Panthyr keeps about your plans, and the Panthyr memory slots used to personalise future conversations. Memory slots are visible and removable in Settings.

Usage of AI features: for each request to Panthyr or a meal scan we record how much model usage it consumed (token counts, the model used and the time), so that we can run the fair-use allowances. These records contain no message content.

Subscription: whether you are on Free or Pro and the status of your subscription. Apple is the seller; see Subscriptions below.

Diagnostics and product analytics: Sentry receives error reports, stack traces, app or browser details, performance data, and signed-in account identifiers where available. PostHog records limited in-app product interactions. On the website, browsing analytics set no cookies and use no persistent identifiers, and session recording is disabled; if you join the waitlist we record that event against your email address, and if you sign in to the web dashboard, product events are linked to your account. Vercel Analytics measures website visits. We do not use ad networks or SDKs for cross-app advertising tracking.

We use account and product data to authenticate you, provide workout and nutrition logging, personalise coaching, generate workouts, show progress, run the fair-use allowances, sync the features you turn on, support users, secure the service, diagnose failures, and improve Panthyr.

We do not sell personal data. We do not use health or fitness data for advertising or marketing, and we do not share it with data brokers.

Apple Health access is optional and controlled through separate in-app switches and Apple's permission screen.

We write: completed strength workouts, including their start and end times.

We read: sleep and sleep stages, heart rate variability (HRV), resting heart rate, step count, and active energy burned. These reads happen only after your explicit opt-in and sync only while the app is in the foreground.

HealthKit data is never used for advertising or marketing, never sold, never shared with data brokers, and never stored in iCloud.

You can stop either integration at any time from Panthyr's Apple Health settings. You can also change or revoke Panthyr's system access in iOS Settings → Health → Data Access & Devices. Turning recovery reads off in Panthyr stops future syncs; changing the iOS permission controls Panthyr's access at the system level.

Panthyr the coach is an AI system. Panthyr chat, workout generation, progression after a workout, and meal-photo scans are processed by OpenAI through Panthyr's backend. We send the information needed for the request, which may include your message, relevant profile, training, nutrition, recovery and Panthyr memory context, or the meal photo you selected.

Panthyr requests that OpenAI not store response state. Under OpenAI's API terms and data-use policies, API content is not used to train its models by default. OpenAI may retain content for the limited periods and purposes described in those policies, including abuse monitoring, currently up to 30 days.

You can connect ChatGPT, Claude or another assistant to your Panthyr account. When you approve a connection, that assistant can read and change your workouts, plans, meals, measurements and Panthyr memory on your behalf, with the same access you have in the app. Progress photos are never available to a connected assistant.

The assistant never receives your Panthyr password or session; it holds a credential issued by Panthyr for that connection alone, which you can end at any time from the assistant's own settings and which we can revoke. What the assistant's provider keeps and does with the data it reads is governed by that provider's privacy policy, not this one. Meals logged through a connected assistant are labelled with their source in the app.

Pro is sold by Apple through the App Store. Apple handles your payment details; we never see them. RevenueCat processes the subscription status for us: it receives an app user identifier linked to your account and the purchase and renewal events from Apple, so that the app knows which tier you are on. We do not receive your name, card or Apple ID from this.

We use a small set of providers to run Panthyr. They process data for us under their own security and privacy terms:

• Supabase — database, file storage and authentication.
• Railway — backend API hosting.
• Vercel — website hosting and website analytics.
• OpenAI — Panthyr chat, workout generation, progression and meal-scan processing.
• RevenueCat — subscription status.
• Resend — transactional email (sign-up confirmation, password reset).
• Sentry — error and performance monitoring.
• PostHog — website and limited product analytics.

These providers are based in the United States or may host or process data there. For transfers from the EEA, we rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses otherwise. You can ask for a copy of these safeguards or more details by emailing hello@panthyr.ai.

Because Panthyr is operated from the EEA, we describe our GDPR posture plainly. We process account data to perform our contract with you. Health-related data, meaning your workouts, body measurements, progress photos, nutrition logs, recovery metrics, and anything else that can reveal your health or fitness status, is special-category data under GDPR Article 9, and we process it only with your explicit consent: you give it on the consent screen when you start using Panthyr and by actively choosing to log this data or enable a feature that collects it, and Apple Health reads additionally require their own opt-in toggles. We keep your acceptance of the terms and your acknowledgement of training risks to meet our legal obligations and to protect our legitimate interests in case of a dispute. We rely on legitimate interests, where permitted, for service security, reliability, diagnostics, fair-use metering and limited product analytics, never for health data.

You can ask to access, correct, export, or delete your personal data, or object to or restrict certain processing, by emailing hello@panthyr.ai. You can withdraw consent for health data at any time by deleting individual entries, turning off Apple Health access, or deleting your account. Withdrawing consent does not affect processing that already occurred while consent was active. You also have the right to lodge a complaint with a data protection supervisory authority; in Iceland, where ebonis ehf. is established, that is Persónuvernd (www.personuvernd.is), and you may equally contact the authority in your own EEA country.

Account and product data is generally kept while your account exists. In the app, use Settings → Delete account. This calls Panthyr's account-deletion service and removes your authentication account and linked database records, including your profile, workouts, nutrition logs, measurements, progress photos, chats, Panthyr memories, plan notes, usage records and synced health metrics.

If you created an exercise in the shared exercise catalog, its catalog entry may remain for other users, but the link to your account is removed. Diagnostic and analytics records follow the providers' retention settings, and limited records may be kept where needed for security, legal obligations, or resolving abuse or a dispute. Email us for a manual deletion request or help removing identifiable provider records.

Features and data practices may change as Panthyr develops. If this policy changes, we will post the revised policy here with a new effective date. Material changes will be highlighted in the app or through another appropriate notice before they take effect.