Privacy Policy

Effective September 24, 2026

PeakSets is a workout tracking app made by Konnect LLC ("Konnect", "we", "us"). This policy explains what we collect when you use the PeakSets app, the PeakSets MCP server at mcp.peaksets.com, and peaksets.com (together, the "Service"), and what we do with it.

1. What we collect

Account information

When you sign up with Apple, Google, or email and password, we receive your email address, a unique account ID, and, if your provider shares it, your name. If you use Sign in with Apple's "Hide My Email", we only see the relay address. Passwords are handled by Firebase Authentication; we never see or store them.

Profile and preferences

The information you add in Settings or that your AI saves on your behalf: display name, weight unit, default rest time, weight increment, available equipment, training goals, sessions per week, and liked or disliked exercises.

Workout data

The training data you create or log: workout plans, programs, and routines; sets, weights, reps, distances, and durations; set types (warmup, drop, failure); difficulty ratings; exercise and workout notes; workout duration and timestamps; personal records; race simulations, including station splits, transition times, targets, and season goals; streaks and recaps; and notes your AI saves, such as a "Coach's Take".

Your notes can include anything you choose to type, such as mentions of pain or injury. Please only write what you're comfortable storing.

Content you share

When you share a workout or send a race challenge, we create a share record containing the workout or race details, your splits, and the name or @handle you choose to include. Anyone who has the link can view it. If you finish a group challenge, your chosen name and finish time are shown to everyone else in that challenge. We count how many times a shared link is opened, imported, and completed.

AI connection data

When you connect an AI to PeakSets, we store the OAuth tokens that authorize it. We also keep standard server logs of requests to the MCP server, such as timestamps, which tool was called, and errors.

Invite requests

If you request an invite on peaksets.com, we collect your email address through our form provider, Formspree, so we can send you an invite.

Data stored on your device

During a workout, the app saves its progress to your phone so it can recover if the app closes unexpectedly. This data stays on your device.

Cookies on peaksets.com

Peaksets.com uses only strictly necessary cookies, such as Cloudflare security cookies that protect the site. We don't use advertising or cross-site tracking cookies.

Apple Health

Where Apple Health integration is available and you turn it on, PeakSets writes completed workouts (type, start time, and duration) to Apple Health. PeakSets does not read data from Apple Health. We never use health data for advertising or share it with data brokers.

What we don't collect

We don't collect your precise location, contacts, photos (except the images you choose to share through your phone's share sheet), or advertising identifiers. We don't use third-party analytics, advertising, or tracking SDKs.

2. How we use your data

• To provide the Service: store your plans and workouts, sync them across your devices, and show your history, personal records, recaps, and comparisons.
• To let your connected AI read and write your PeakSets data when you ask it to.
• To run the sharing and challenge features you use.
• To secure the Service, prevent abuse, and fix bugs.
• To answer your support requests, send invites, and tell you about important changes to the Service.

We don't sell your personal information, share it for targeted advertising, or use it to train AI models.

3. Your AI provider

PeakSets doesn't include its own AI. If you connect Muse (Meta), Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), or another AI client, that AI can call PeakSets tools during your conversations. Depending on what you ask, it may read your profile, plans, results, history, notes, and personal records, and it may create or update plans, programs, notes, and your profile.

Anything the AI reads from PeakSets becomes part of your conversation with that provider. Their privacy policy and terms govern it, not ours. You can disconnect PeakSets at any time in your AI's connector settings. Disconnecting stops future access but doesn't delete data that's already in your chat history with that provider.

4. Who we share data with

We share data only with the service providers that run PeakSets for us, and only to the extent needed to provide the Service:

• Google Firebase for authentication and database storage.
• Cloudflare for hosting peaksets.com and the MCP server, and for storing OAuth tokens.
• Formspree for invite-request emails.
• Apple and Google when you choose to sign in with them.

We may also disclose information if the law requires it, to protect the rights, safety, or property of our users or others, or as part of a merger, acquisition, or sale of assets. In any such transaction, this policy will continue to apply to your data.

5. How long we keep data

We keep your account and workout data while your account is active. When you ask us to delete your account, we delete your account and workout data within 30 days. Copies in backups may remain for a short time after that before they are overwritten. Share links stay active until you delete them or your account is deleted. Server logs are kept for a limited time for security and debugging.

6. Your choices and rights

• Access and edit: you can view and edit your profile and workouts in the app at any time.
• Export: email us and we'll send you a copy of your data in a machine-readable format.
• Delete: you can delete individual workouts in the app. To delete your entire account and all associated data, email support@peaksets.com from the address on your account.
• Revoke AI access: disconnect PeakSets in your AI's connector settings.

Depending on where you live, including the EU, UK, and California, you may have additional rights: to know what personal information we hold, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. To exercise them, email support@peaksets.com. We'll respond within 30 days. You can also complain to your local data protection authority.

For users in the EU and UK, we process your data to perform our contract with you (running your account and storing your workouts), based on your consent (for connecting an AI, Apple Health, and sharing), and for our legitimate interests in keeping the Service secure and working.

7. Security

Data travels over encrypted connections (HTTPS) and is stored with our providers' encryption at rest. Access is limited so each account can only reach its own data, and AI access requires your explicit OAuth approval. No system is perfectly secure, so we can't guarantee absolute security.

8. International transfers

We're based in the United States, and our providers may process data in the United States and other countries. When we transfer data from the EU or UK, we rely on our providers' standard contractual clauses or equivalent safeguards.

9. Children

PeakSets isn't intended for children under 13, or under 16 in the EU and UK. We don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.

10. Changes to this policy

If we make material changes, we'll post the updated policy here with a new effective date. When appropriate, we'll also notify you in the app or by email.

11. Contact

Konnect LLC
Email: support@peaksets.com