Steadfast Fitness Collective

Privacy Policy

Last updated: August 26, 2026. Operated by Steadfast Fitness Collective LLC, a Colorado limited liability company (“Steadfast,” “we,” “us”).

1. Information we collect

  • Account & profile: name, email, password (hashed), date of birth for the minimum-age check, timezone, profile photo, and preferences.
  • Health & fitness data: workouts, personal records, goals, journal entries, and readiness. If you connect Oura or Polar, we also collect the recovery, HRV, sleep, heart-rate, and body-composition metrics that provider makes available. During a run, the Apple Watch companion reads live workout measurements such as heart rate and distance, saves the finished workout to Apple Health, and syncs that run to your Steadfast account. It does not import your general Apple Health history. If the app is interrupted while a run is finishing, it may read only the finished Steadfast workout and its associated outdoor route, matched with an app-generated opaque run identifier, so the run can be recovered without creating a duplicate. Google Health Connect integration has not shipped. Some of this is sensitive or special-category health data.
  • Precise location: if you start an outdoor run on your phone or Apple Watch and allow location access, we collect GPS points to measure pace and distance and draw your route. Indoor and treadmill runs do not use location. A saved route is linked to your account and is not used for advertising or tracking.
  • Optional cycle tracking: menstrual-cycle data, only if you enable it.
  • Payments: subscription and order details. We never see or store card numbers: a membership bought in the iOS app is billed by Apple and we receive only the transaction identifier, and card-billed memberships are processed by Stripe.
  • Library searches: what you search for in The Library, stored with your account and sorted into topics (for example Supplements, Recovery, Nutrition, Equipment). We use the aggregate to decide which sponsors and partners to bring to the collective. Because a wellness search can reveal a health interest, we treat these as health data under section 4.
  • Community and activity: community posts and reactions, podcast comments, goals, direct messages with a coach, in-app feedback, and reports you file about content or another member. If you turn on automatic activity sharing in Settings, completing a workout, earning an achievement, or setting a personal record can also create an activity post visible to signed-in club members. A record post can include the exercise, weight, repetitions, distance, pace, or time associated with that record. Automatic sharing is off unless you choose to enable it.
  • Photos you upload: your profile photo and any photos you add to an event gallery.
  • What a coach writes about you: if you work with a coach, their session notes about your training. If you contacted us before joining, we may hold an enquiry record with your name, email, phone, and notes of the conversation.
  • Usage & device data: app interactions—including a visit to an invitation page, which can become linked to the invitation and account if it is claimed—and limited diagnostics for reliability and security. This includes a push notification token for each device on which you allow notifications. We remove the signed-in device's token on normal sign-out and all of your tokens after password change, sign-out everywhere, or account deletion. Platform delivery services can rotate a token, and a failed cleanup can leave a stale token until it expires or you ask us to remove it.

2. How we use your data

  • To provide the app: training, tracking, coaching, community, and commerce.
  • To personalize guidance, including the AI concierge, using only your own authorized data.
  • To process payments and memberships.
  • To decide which sponsors and partners to approach, using Library search topics in aggregate. Sponsors receive topic-level interest, never your name, email, or individual searches, and we do not sell your personal information.
  • To secure the service, prevent abuse, and meet legal obligations.

3. Service providers (data processors)

We share data only as needed with vetted processors under contract:

  • Apple — billing for memberships purchased in the iOS app.
  • Stripe — card billing for memberships set up that way.
  • Anthropic (Claude) — powers the AI concierge. Relevant data may be sent to generate responses. We require a data-processing agreement, do not permit training on your data, and retain AI conversations for no more than 12 months.
  • Cloudflare Stream — video hosting and delivery.
  • Sentry — error monitoring, performance diagnostics, and session replay. We attach only your opaque Steadfast account identifier, not your name or email, so diagnostics are linked to your account for troubleshooting. Browser performance tracing and replay remain off unless you allow Optional Diagnostics. If allowed, a replay is a reconstruction of what happened on screen during a session. We record a small sample of sessions (about 1 in 100) and any allowed session that hits an error, with all text masked and all images and video blocked, so the replay shows the shape of the screen rather than its contents. You can decline or withdraw this choice from Settings → Privacy & Data without losing access.
  • Hosting and database infrastructure providers.

We do not sell your personal information.

4. Health data

Your recovery readings, wearable measurements, cycle data, readiness answers, and precise run route are not shared with other members. Connecting a wearable does not give staff access to its data. Wearable sharing with your currently assigned coach and authorized administrators is off by default; you may affirmatively enable it in Settings → Health & Wearables after reading the listed data categories, and turn it off at any time to stop future staff access. The optional community activity described in section 1 is different: if you affirmatively turn on automatic activity sharing, workout completion, achievement, and personal-record details can be posted to the signed-in club feed. That setting is also off by default. You can turn it off at any time, delete all of your automatic activity posts from Settings → Privacy, or delete one of your posts from its menu in the Club feed. Turning it off prevents new automatic posts but does not remove earlier posts by itself. You also control wearable connections and cycle tracking and can disconnect or disable them at any time in Settings.

Club rankings and recognition are separate and off by default. If you opt in, signed-in club members may see your name and profile photo alongside weekly workout/activity volume, personal-record details and recent records, recent Daily Plan activity and streaks, Member of the Week recognition, and—if you are a trainer—Featured Coach recognition and your client count. Aggregate club activity uses only opted-in members. You can turn this choice off at any time to stop future ranking and recognition publication.

Accountability Partner sharing begins only after mutual acceptance. While a partnership is active, each partner may see the other's completed workout or session names and dates and personal-record names and dates from the previous seven days, plus partner check-ins and Witness Pact marks. Ending the partnership immediately prevents future partner reads and notification handoffs. Existing check-ins and witness marks may remain in your account history until deletion under our retention rules.

5. Your rights & choices

  • Access & export: download a copy of your data from Settings → Privacy.
  • Deletion: permanently delete your account and associated data from Settings → Privacy. Account deletion does not cancel an Apple-billed subscription; cancel it in Apple Subscriptions first to prevent continued billing.
  • Community sharing: automatic workout, achievement, and personal-record posts are off unless you turn them on. Settings → Privacy lets you change that choice and delete all prior automatic activity posts; your own feed-post menu can delete one post.
  • Club rankings and recognition: off unless you opt in from your profile. Turning it off stops future publication across the weekly leaderboard, records, activity/streak awards, Member of the Week, and Featured Coach surfaces.
  • Accountability Partner: accept only a member with whom you want to share the listed seven-day activity, check-in, and Witness Pact information. Either partner can end the relationship at any time to stop future partner access.
  • Wearable sharing with staff: off unless you explicitly enable it in Settings → Health & Wearables. Disabling it stops your coach and administrators from viewing wearable health summaries; it does not disconnect the provider or remove your own health history.
  • Correction & objection: update your profile, or contact us for other requests.
  • Depending on your location, you may have GDPR (EU/UK) or CCPA (California) rights; we honor verified requests.

6. Data retention

We keep your data while your account is active and delete or anonymize it after account deletion, except where retention is legally required (e.g., transaction records).

7. Security

We use encryption in transit, hashed passwords, role-based access controls, and security headers. No system is perfectly secure; please use a strong, unique password.

8. Children

Steadfast is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use the service.

9. Changes

We will post updates here and adjust the “Last updated” date. Material changes will be notified in-app.

10. Contact

Questions or requests: privacy@steadfastfitnesscollective.com.