Privacy Policy
Last updated: 10 September 2026
This policy explains what personal information OX Technologies LLC (“OX”, “we”, “us”) collects
through the OX fitness platform (our web application and mobile applications), how we use it, who
we share it with, and the choices you have. It applies to people who create an OX account.
Information we collect
- Account information. The email address and password you register with. Passwords
are stored only as salted hashes by our authentication provider; we never see them.
- Health and fitness profile. Information you provide so the platform can design
training for you: age, height, weight, sex, training experience and goals, available equipment,
training history, and any injuries, pain, or medical limitations you choose to tell us about.
- Training data. Workouts generated for you, sessions you start and complete,
timing and performance results, strength baselines and assessments, and per-muscle workload
derived from your sessions.
- Community content. If you use the social features: your profile and username,
posts, stories, comments, likes, follows, and direct or coach messages you send.
- Media you upload. Photos or videos you attach to posts, stories, or a profile.
- Device and technical data. Time zone, app and device information needed to
operate the service, and, if you enable notifications, a push subscription identifier for your
device or browser.
- Purchases. If you buy an OX Pass, OX Credits, or watched sessions, we keep the plan
or purchase you chose, its status, dates and amounts, and the store's identifier for it. Card details
are entered with Apple or Stripe and never reach us. Watchers who take payouts onboard with Stripe
directly; their identity and bank details go to Stripe, not to us.
- Location (optional). If you use the Nearby map or the location prefill and grant
permission, your device location is used to center the map, list nearby facilities, and suggest a
place for the workout. The area or place name you keep is saved with that workout. We do not track
your location in the background.
How we use it
- To generate training sessions and coaching guidance tailored to you.
- To operate features you use: the guided timer, progress tracking, community, and coaching.
- To send you notifications you have enabled, such as messages, social activity, or a session
being ready.
- To provide a plan you bought, keep its status in step across your devices, and honour its
renewal or cancellation.
- To maintain security, prevent abuse, diagnose faults, and improve the service.
- To comply with legal obligations.
Health information
The health and fitness details you provide are used to design safer, more appropriate training and
are visible only to you, except where you deliberately share content yourself. If you connect with a
coach (“watcher”) inside the app, that person can see your training plans, session results, and coach
summaries, but not your health intake answers or baseline details, which are withheld by design.
We do not sell health information, and we do not use it for advertising.
Service providers
We use a small number of processors to run the platform. They handle data only to provide their
service to us:
- Supabase: authentication, database, and file storage.
- OpenAI: generation of workout plans, coaching text, and exercise illustrations.
Requests carry the training context needed to produce a plan.
- DigitalOcean: hosting of our application servers.
- Apple: in-app purchases on iOS. Apple handles the payment and tells us the
purchase status.
- Stripe: payments on the web and for watched sessions, and payouts to watchers.
Card and bank details are entered on Stripe's pages and never reach us.
- RevenueCat: keeps the status of a subscription in step between the app stores,
Stripe, and OX.
- Google Maps Platform: looks up nearby facilities and their photos for the map.
The lookup carries the map's location, not your identity.
- Push delivery services operated by your browser or device vendor, used only to
deliver notifications you enabled.
Sharing
We do not sell personal information. We share it only: with the processors above; with other users
when you choose to publish or send content; when required by law or to protect our rights and the
safety of users; and, if the business is ever sold or merged, with the acquiring party under the
terms of this policy.
Retention
We keep account and training data while your account is active. Some content expires by design:
stories are removed 24 hours after posting, and inactive workout plans are cleaned up on a schedule.
When you ask us to delete your account, we remove your personal data from our production systems,
except where we must keep records to meet legal obligations.
Your rights
You can request access to the personal information we hold about you, correction of inaccurate
information, deletion of your account and data, or an export of your data. Write to
support@oxtechnologies.fitness and we will respond.
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA;
we honour those requests regardless of location.
Security
Data is transmitted over encrypted connections (HTTPS) and stored with access controls that limit
each account to its own records. No system is perfectly secure, but we take reasonable technical and
organizational measures to protect your information.
Children
OX is not directed to children under 13, and we do not knowingly collect their personal information.
If you believe a child has given us information, contact us and we will delete it.
Not medical advice
OX provides fitness guidance, not medical advice. Consult a qualified professional before beginning
or changing an exercise program, particularly if you have an injury or medical condition.
Changes
If we make material changes to this policy we will update the date above and, where appropriate,
notify you in the app.
Contact
OX Technologies LLC: support@oxtechnologies.fitness