PX | Privacy Policy

4.1 Information you provide to us

When you create an Account and use the Services, you may provide:

• Identity information: name, date of birth, sex, country of residence, profile photo.
• Contact information: email address, and optionally phone number.
• Authentication information: password (stored as a salted, irreversible hash), or third-party sign-in tokens (Sign in with Apple, Google).
• Health and lifestyle information: your training history, injuries, dietary preferences and restrictions, sleep patterns, stress levels, goals, life context, occupation, family circumstances, communication style preferences, and any other context you provide during onboarding or in ongoing conversation with the AI Coach.
• Logged activity: workouts you complete, meals you log, hydration, mood and biometric self-reports, mindfulness sessions, body scans (if you opt in), and any other activity you record in the Services.
• Conversation content: messages you send to the AI Coach, including voice transcripts where you use voice features.
• Community content: posts, comments, reactions, and other content you publish in the Community feature.
• Payment information: where you subscribe through a payment processor (Apple, Google, or Stripe), they collect your payment details directly. We receive transaction confirmation, subscription status, and a token identifying the transaction, but we do not see or store your full card number.
• Support information: any information you provide when contacting our support team.

4.2 Information we collect automatically

When you use the Services, we automatically collect:

• Device information: device model, operating system and version, app version, device identifiers, language and locale settings, time zone.
• Usage information: features you use, sessions you start and complete, screens you view, in-app actions you take, performance and crash data.
• Network information: IP address, internet service provider, general location derived from IP (city or region level only — we do not collect precise location unless you specifically enable a location-based feature).
• Diagnostic information: error logs, crash reports, performance traces.
• Cookies and similar technologies: on the website, we use cookies as described in Section 17.

4.3 Information from third parties

With your explicit permission, we receive information from Wearable Integrations and other third-party services you connect:

• Apple HealthKit: HR, HRV, resting HR, sleep stages, steps, active calories, respiratory rate, nutrition, mindful minutes, and other health metrics you grant us permission to read.
• Google Health Connect: activity, vitals (including BP, SpO₂), body composition, glucose, nutrition, sleep, and other categories you grant us permission to read.
• Oura: activity, sleep, readiness, resilience, stress, HR / HRV, SpO₂, VO₂ max, cardiovascular age.
• Terra: data from any of 500+ wearables and health apps that you connect through the Terra aggregator (including Garmin, Fitbit, WHOOP, Polar, Samsung Health, Withings, Suunto, Wahoo, Coros, Eight Sleep, Strava, Peloton, Zwift, TrainingPeaks, MyFitnessPal, Cronometer, continuous glucose monitors, blood-test providers, and others).
• Calendar integrations: where you connect Google Calendar, Outlook (via Microsoft Graph), or Apple Calendar, PX reads your calendar events — including their name, start and end time, busy/free status, and location — to display your schedule in the app and to plan PX sessions around your existing commitments. PX processes this on your device and does not read attendees or event notes/description. This information is not transmitted to PX’s servers, is not used to train or prompt the AI Coach, and PX never accesses event attendees, notes, or descriptions. Data minimisation is enforced at the network layer so attendees, notes and descriptions are never even returned to the device. Our use of Microsoft Graph calendar data is likewise limited to reading the same event details to display your schedule and plan sessions, consistent with Microsoft’s API terms, and Apple Calendar data is read on-device via EventKit.
• Authentication providers: where you sign in with Apple or Google, the provider tells us your verified email address and (with your permission) basic profile information.

You can disconnect any Wearable Integration or third-party connection at any time in Account settings. Doing so will stop new data flowing from that source.

4.3.1 Writing PX sessions to your calendar

When PX adds a session (workout, meditation, or recovery block) to your calendar, PX does so directly through your device’s calendar or your calendar provider — PX’s servers are not involved in creating the event. PX can add sessions you choose to save; it cannot edit or delete your existing calendar events.

• For Apple Calendar: PX uses Apple’s native EventKit on your device. The system calendar sheet opens, and you save the event to your local calendar yourself.
• For Google Calendar and Outlook: PX builds a standard “create event” link (Google Calendar / Outlook deep-link) and opens it on your device. The event is created by your Google or Microsoft account directly; PX’s backend has no role in writing the event.

The only thing PX stores locally is an optional on-device session cache that allows PX to rehydrate the workout detail when you return to it. PX does not record on its servers which calendar events you have created.

4.4 Information about other people

If you invite a friend to PX, refer someone using a referral link, or interact with another user in the Community, we receive Personal Information about those individuals (such as their email address or username). We use that information only for the limited purpose for which you provided it.

4.5 Special category data

Some of the information you provide or that we collect is “special category personal data” under the GDPR and UK GDPR, “sensitive personal information” under the CPRA, and “sensitive information” under the Australian Privacy Act. This includes:

• Health data
• Biometric data (where you opt in to body scans)
• Information that reveals racial or ethnic origin, religious beliefs, or sexual orientation (where you choose to disclose this in conversation with the AI Coach or in Community content)

We process special category data only where (a) you have given us your explicit consent, (b) it is necessary for the provision of the Services you have requested, or (c) another lawful basis under applicable law applies. You can withdraw consent at any time by adjusting your settings or by contacting us.

4.6 Children

The Services are intended for people aged 18 years and older. We do not knowingly collect Personal Information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it as soon as practicable. If you believe we have collected information about a person under 18, please contact support@pxmembership.com.

5.1.1 To deliver the Services

• Create and manage your Account.
• Authenticate you when you sign in.
• Deliver personalised coaching across Move, Mind and Fuel through the AI Coach.
• Generate, adjust and remix workouts, meal plans, mindfulness sessions and recovery protocols.
• Compute scores (PX Score, longevity metrics, healthspan capture, biological age direction) from the information you provide and receive.
• Synchronise data with Wearable Integrations you connect.
• Process subscriptions, payments and refunds (via Apple, Google, RevenueCat and Stripe).
• Send service-related communications (account confirmations, billing receipts, security alerts).
• Provide customer support and respond to your requests.

5.1.2 To personalise and improve

• Adapt coaching to your patterns, preferences and goals over time.
• Maintain a persistent memory of insights about you that improves the quality of the AI Coach over time (you can review and delete these insights at any time).
• Compute analytics to understand which features are working and which are not.
• Detect and prevent abuse, fraud, security incidents and violations of our Terms of Use.

5.1.3 To communicate with you

• Send transactional emails (account, billing, security).
• With your consent, send optional product updates, educational content and offers.
• Conduct optional surveys, research and product testing.

5.1.4 To comply with the law and protect rights

• Comply with legal obligations, including responding to lawful requests from authorities.
• Enforce our Terms of Use and other agreements.
• Establish, exercise or defend legal claims.
• Protect the rights, property and safety of PX, our users, and the public.

5.2 Lawful bases (EU / UK)

If you are in the EEA or the UK, we rely on the following lawful bases under the GDPR and UK GDPR:

Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to the processing — see Section 11.

5.3 We do not sell your Personal Information

We do not sell your Personal Information for money, and we do not “sell” or “share” your Personal Information for cross-context behavioural advertising as those terms are defined under the CPRA and other US state laws. We do not use your Health Data or AI Coach conversations to train any general-purpose AI model. Our third-party AI providers are engaged on their commercial, business or paid API tiers, under terms that — with the limited exception of our voice provider (see Section 6.4) — do not permit them to use your prompts or our outputs to train their general-purpose models, and never permit the use of your data for advertising.

6.1 Our AI providers

PX uses a small number of third-party AI providers to deliver coaching. We use them on their commercial, business or paid API tiers — never their free consumer products. When you use AI features, the following data is sent solely to generate your result:

• Anthropic, PBC (Claude) — our primary provider, used for all generative coaching: chat with PX, session and plan generation, your daily briefing, and food-photo and body-scan analysis. We send your messages, any images or files you attach, and the context PX assembles to personalise the response (your goals, profile, and the training, nutrition, sleep and health data you have shared). PX uses Anthropic’s commercial API. Under Anthropic’s Commercial Terms your inputs and outputs are not used to train Anthropic’s models; Anthropic deletes API inputs and outputs within 30 days, except where a longer period is required to investigate a policy violation or by law.
• OpenAI, L.L.C. — a fallback provider, used only for short, structured tasks (for example, classifying or formatting a piece of text) when Anthropic is unavailable, or, where we enable it, for such structured tasks that are cheaper and have been shown to be equally accurate. OpenAI receives only the specific structured request and the minimal context needed to complete it — not your full conversation. PX uses OpenAI’s API. Under OpenAI’s API terms, data submitted through the API is not used to train OpenAI’s models by default; OpenAI retains API data for up to 30 days for abuse monitoring and then deletes it, except where a longer period is required by law.
• Google LLC (Gemini API / Google Cloud) — a second fallback provider for the same short, structured tasks as OpenAI. Google receives only the specific structured request and the minimal context needed to complete it. PX uses the paid tier of Google’s Gemini API (and/or Vertex AI) — never the free tier. On the paid tier, Google does not use your prompts or responses to train or improve its models; Google retains data only transiently for abuse monitoring (up to 55 days on the Gemini API, or up to 90 days on Vertex AI and only where content is flagged for review) and then deletes it.
• ElevenLabs, Inc. — text-to-speech for the voice coach, breathwork and meditation. We send only the text to be spoken (the AI Coach’s reply); ElevenLabs returns audio. Important: unlike our text providers above, ElevenLabs’ standard terms allow it to retain submitted content and to use it to improve its services. See Section 6.4 for how PX limits this.

Speech-to-text (converting your spoken words to text) uses your device’s built-in Apple or Google speech recognition, governed by your device permissions; your voice recordings are not sent to our AI providers. You can withdraw AI consent at any time in Settings → Privacy, which disables AI coaching features.

6.1.1 What we send to our AI providers

When you interact with the AI Coach, we transmit the following categories of personal information to our AI providers to generate a response. Anthropic, as the primary provider, may receive all of these; the OpenAI and Google fallbacks receive only the subset needed for the specific structured task they perform:

• the message you send (text or voice transcript);
• relevant parts of your PX profile (your goals, preferences, training context, dietary context, and the health constraints you have shared with us);
• recent conversation history with the AI Coach;
• structured insights we have extracted from your prior conversations (the “memory” the AI Coach references — see Section 6.6);
• your current biosignals where available (e.g., HRV, sleep score, recovery readiness, training load);
• system context required for the response (which agent is being addressed, current scoring state, active coaching flags).

What we do not share with our AI providers

• your name, email address, phone number, payment information, postal address, or any other directly identifying personal information that is not required for the response;
• your account credentials;
• your raw calendar event content (see Section 4.3);
• any content from third-party services that is not required for the response.

6.2 Explicit consent obtained before any AI processing

PX obtains your explicit consent to the data sharing described in this Section 6 through a dedicated AI Consent screen presented during onboarding, before any personal data is sent to any AI provider. You must grant this consent before any AI processing takes place, and you cannot interact with the AI Coach until you have done so. You may withdraw your consent at any time in the app — in Settings → Privacy, by ceasing to use the AI Coach, or by deleting your Account. Withdrawing consent disables the AI features and stops further AI processing of your data; it does not affect the lawfulness of processing carried out before the withdrawal.

6.3 How our AI providers handle and protect your data

We engage our AI providers as Sub-processors under data-protection terms. On the commercial and paid tiers we use, our providers:

• process the data we send only to generate your result and for limited abuse-monitoring, security and legal-compliance purposes;
• do not use your prompts or our outputs to train or improve their general-purpose models — this applies to Anthropic, OpenAI and the paid Google tier we use; the position for our voice provider is described in Section 6.4;
• retain your inputs and outputs only for a limited period and then delete them — by default up to 30 days for Anthropic and OpenAI, and, for Google, only transiently for abuse monitoring (up to 55 days on the Gemini API, or up to 90 days on Vertex AI where content is flagged) — except where a longer period is required by law or to investigate a policy violation;
• do not sell your data and do not use it for advertising;
• are engaged under a Data Processing Addendum (DPA) or equivalent written data-protection terms, with appropriate international-transfer safeguards (see Sections 7 and 9).

Where a provider offers zero-data-retention or an equivalent arrangement, we will adopt it; until such an arrangement is confirmed for a given provider, the default retention periods above apply. [TO BE CONFIRMED BY PX: which zero-retention arrangements are in place with each AI provider.]

6.4 Voice features (ElevenLabs)

Voice features are delivered by ElevenLabs, Inc., a US-based voice-synthesis provider. When you use voice mode, only the AI Coach’s response text (the words to be spoken) is sent to ElevenLabs to generate audio; your own messages and profile data are not sent to ElevenLabs. Unlike our text AI providers, ElevenLabs’ standard terms permit it to retain submitted content and to use it to improve and train its models. To protect your data, PX [TO BE CONFIRMED BY PX: has enabled ElevenLabs Zero-Retention Mode and registered the account-level opt-out from model training], so that the text we send is not used to train ElevenLabs’ models and is not retained beyond delivering your audio. Until that configuration is confirmed, you should assume ElevenLabs may retain and use the text sent for voice features in accordance with its own privacy policy (elevenlabs.io/privacy-policy).

6.5 Health and fitness data in AI coaching context

Your health and fitness data — including data you log (workouts, meals, hydration, mood, biometrics) and data from Apple Health / Apple HealthKit, Google Health Connect, and connected wearables via Terra (such as heart rate, HRV, sleep, recovery, steps and other metrics) — may be included in the context PX sends to its AI providers when it is relevant to answering your request. This data is used only to generate your coaching response and to keep the service reliable. It is never sold, never used for advertising, and never used to build advertising or marketing profiles. Health data obtained through Apple HealthKit is handled in accordance with Apple’s HealthKit requirements: it is not used for advertising or marketing, is not sold or disclosed to data brokers, and is used only to provide health and fitness services to you. You control which health sources are connected and can disconnect any of them at any time in Account settings (see Section 4.3).

6.6 The AI Coach memory

The “memory” the AI Coach references in your conversations is stored only on our own infrastructure (see Section 8). It is generated by extracting structured insights from your check-ins and conversations using the same AI providers described above, under the same terms — on the tiers we use, your data is not used to train their models (subject to the voice-provider position in Section 6.4). You can review the insights the AI Coach has stored about you at any time in Account settings, edit them, or delete any or all of them. Deleting an insight removes it from future coaching context.

6.7 What the AI Coach does not receive

For clarity and completeness:

• PX reads event names, times, busy/free status, and locations to show your schedule on your device. This calendar data is never transmitted to Anthropic, OpenAI, Google, ElevenLabs, or any other AI provider. See Section 4.3.
• Payment information, account credentials and contact details are never transmitted to AI providers.
• Body scan images, where you opt in to cloud sync, are never sent to AI providers as image files; only structured measurement summaries derived from them may inform AI Coach context, and only with your additional consent for cloud sync.

6.8 AI providers at a glance

The table below summarises how each AI provider is used and whether it uses your data to train its models. The final column links each provider’s current data-usage terms (shown as plain text); we review these periodically. For the authoritative list of all Sub-processors, see Section 7.

6.9 Limited Use of Google API data

PX’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. PX uses Google Calendar data solely to display your schedule in the app and plan around your commitments; it does not transfer or sell this data, does not use it for advertising, and does not allow humans to read it. Google Calendar data is processed on-device only and is never transmitted to PX’s servers or any third party.