Legal
Privacy Policy
Last updated: June 2026
This is a starter template and not legal advice. Review with counsel before launch.
This Privacy Policy explains how Athos ("Athos," "we," "us," or "our") collects, uses, and shares information when you use our AI fitness and nutrition coaching service (the "Service"). Please read it alongside our Terms of Service.
1. Introduction & scope
Athos is a subscription health coaching platform. Our multi-agent system builds and adapts training and nutrition plans, sends coaching notifications, and responds to you in real time using the context you share. This policy applies to information we process when you create an account, complete onboarding, log workouts and meals, chat with your coach, or otherwise interact with the Service, whether on the web app or through connected agents.
It does not cover third-party products or websites that we do not control. Where a subprocessor handles your data on our behalf, that handling is governed by this policy and the subprocessor's own terms.
2. Information we collect
We collect the following categories of information:
- Account & authentication data. Your email address and the session tokens (JWTs) we issue to keep you signed in.
- Health & fitness data you provide. Your goals, weekly schedule and availability, equipment, training experience, injuries or limitations, workouts you log, and meals you log.
- Food photos. Images you upload so the Service can estimate nutrition and give feedback.
- Coaching conversations. Messages you send to and receive from your AI coach during onboarding and ongoing use.
- Usage & analytics data. Operational and diagnostic information such as feature usage, request metadata, and performance metrics used to run and improve the Service.
You choose what to share. Some features (for example, plan personalization or food scoring) work best when you provide the relevant information, and may be limited if you do not.
3. How we use your information
We use your information to:
- Build, personalize, and continuously adapt your training and nutrition plans;
- Provide coaching, respond to your messages, and send you notifications and reminders;
- Analyze food logs and photos to estimate nutrition and give feedback;
- Operate, secure, debug, and improve the Service, including measuring quality and reliability;
- Communicate with you about your account, billing, and important changes.
4. AI processing & third parties
Athos is an AI-powered service. To generate coaching, plans, and food analysis, your content — including messages, logged data, and food photos — is sent to third-party large language model ("LLM") providers for processing. We rely on the following categories of subprocessors:
- LLM / AI providers (e.g., OpenAI, Anthropic) to generate coaching responses, plans, and nutrition analysis;
- Observability & tracing providers (e.g., Langfuse) to record and monitor LLM requests and responses for quality, debugging, and cost tracking;
- Cloud object storage providers (e.g., Cloudflare R2) to store food images;
- Infrastructure & hosting providers that run our application and databases.
These subprocessors process your data only to provide their services to us. The specific providers may change over time as we improve the Service.
5. Health data disclaimer
Athos is a fitness and nutrition coaching product, not a medical provider. The information you provide and the guidance you receive are used for coaching purposes only. Athos does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional medical care. Consult a qualified healthcare professional before beginning any exercise or nutrition program. See our Terms of Service for the full health and medical disclaimer.
6. Data sharing
We do not sell your personal data. We share your information only with the subprocessors described in Section 4 to operate and improve the Service, and where required by law or to protect the rights, safety, and security of our users and Athos. If Athos is involved in a merger, acquisition, or sale of assets, we will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
7. Data retention & your controls
We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.
You can review, change, export, or delete your data:
- Review & edit your profile, plans, and logs within the app;
- Export a copy of your data by request;
- Delete your account and associated personal data by request.
To make a request, contact us at privacy@athos.app. We will respond within a reasonable timeframe and in accordance with applicable law. Some information may be retained where we have a legal basis to do so (for example, records required for billing or security).
8. Security
We take reasonable measures to protect your information, including encryption of data in transit and access controls that limit who can access personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
9. Cookies & local storage
Athos uses session tokens and browser local storage to keep you signed in and to operate core features of the app. We do not use these mechanisms to sell your data. You can clear local storage through your browser, but doing so will sign you out and may affect functionality.
10. Children
The Service is intended for adults. It is not directed to, and we do not knowingly collect personal data from, anyone under 18. If you believe a minor has provided us personal data, please contact us and we will take appropriate steps to delete it.
11. International users & data transfers
Athos and its subprocessors may process and store your information in countries other than where you live, including the United States. Data protection laws in those countries may differ from those in your jurisdiction. By using the Service, you understand that your information may be transferred to and processed in those locations. Where required, we implement appropriate safeguards for cross-border transfers.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact
If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@athos.app.