Privacy Policy
Last updated: 19 October 2026
This policy explains what personal information OX Technologies LLC (“OX”, “we”, “us”) collects
through the OX fitness platform (our web application and mobile applications), how we use it, who
we share it with, and the choices you have. It applies to people who create an OX account.
Information we collect
- Account information. The email address and password you register with. Passwords
are stored only as salted hashes by our authentication provider; we never see them.
- Health and fitness profile. Information you provide so the platform can design
training for you: age, height, weight, sex, training experience and goals, available equipment,
training history, and any injuries, pain, or medical limitations you choose to tell us about.
- Training data. Workouts generated for you, sessions you start and complete,
timing and performance results, strength baselines and assessments, and per-muscle workload
derived from your sessions.
- Community content. If you use the social features: your profile and username,
posts, stories, comments, likes, follows, and direct or coach messages you send.
- Media you upload. Photos or videos you attach to posts, stories, or a profile.
- Device and technical data. Time zone, app and device information needed to
operate the service, and, if you enable notifications, a push subscription identifier for your
device or browser.
- Purchases. If you buy an OX Pass, OX Credits, or watched sessions, we keep the plan
or purchase you chose, its status, dates and amounts, and the store's identifier for it. Card details
are entered with Apple or Stripe and never reach us. Watchers who take payouts onboard with Stripe
directly; their identity and bank details go to Stripe, not to us.
- Location (optional). If you use the Nearby map or the location prefill and grant
permission, your device location is used to center the map, list nearby facilities, and suggest a
place for the workout. The area or place name you keep is saved with that workout. We do not track
your location in the background.
- AI Coach (optional). If you turn on the AI Coach's rep counting, your camera's picture is
read on your device to count your reps; it is not recorded, and it is not sent anywhere unless you turn on
coach cues or allow pictures, as described below. Coach cues are off until you allow them, and allowing them
also confirms that you are 18 or older. Once they are on, during the work of your workout, while the app sees
someone in the camera's view, the app sends three pictures from your camera about every two or three seconds
to OX, which sends them to OpenAI. The pictures show everything in the camera's view, and they go with what is
on your timer's screen (such as the exercises, their target, the reps the coach has counted, the time left and
the set you are on) and what the coach has already asked of you. OX also sends the names of the workout's
exercises to OpenAI, which writes ahead a word of encouragement for each. The coach may then speak a short tip
on your form, a word of encouragement, an invitation to start or to join back in, or a check that you are
doing the exercise on the screen, in words written by OpenAI's model (two fixed lines are OX's own) and spoken
in a voice made by OpenAI. OX does not save the pictures, or the words of the coach's tips, encouragement, invitations and checks. Our server logs note each coach
request with part of your account's identifier, its time and its cost, but never the pictures or the words.
Workout announcements are on unless you turn them off, and they work with or without rep counting. The coach says
what comes next in your workout, such as the countdown, the next exercise, a rest or the finish, in a voice made
by AI, not by a person. Announcements use no pictures from your camera. While they are on, the app sends OX which
workout is on your timer and the names and numbers of its steps. OX, not an AI, writes each announcement in its
own fixed words. OX then sends each sentence to OpenAI to make its spoken voice, unless OX already keeps that
sentence's voice. OpenAI receives the sentence, with your workout's exercise names and numbers in it, and nothing
that names you. OX keeps the voice of each sentence in private storage, so it is not made again each time a
workout is opened, and plays it for any member whose workout says the same sentence. A kept voice holds nothing
that identifies you, your account or your workout, so deleting your account does not remove it. It is removed
about a month after it was last played, and never later than six months after it was made. To turn announcements
off, use the Announcements button on the timer. That choice is kept only where you made it, in that browser or on
that device, for anyone who signs in there, and is not sent to OX. Our server logs note each announcement request
with part of your account's identifier, its time and how much new voice was made for it, but never the words. The
rep counts are saved privately to your account. If you ask the coach a question out loud, your voice is turned into text
first: on an iPhone, on the phone itself; in a browser, by the browser's own speech recognition, whose maker
may process the audio to do so under its own terms. Only the text reaches OX, with what is on your timer's
screen (such as the exercise, its target and the reps the coach has counted). OX sends it to OpenAI for a
short answer and its spoken voice, and does not keep the question or the answer. If you allow pictures,
when a question needs the coach to see you or something you show it, the app takes one picture from your
camera and sends it with the question to OX, which sends it to OpenAI for the answer. OX does not keep the
picture. We keep your confirmation that you are 18 or older, whether and when you allowed pictures and coach
cues, how many questions you asked and how many workouts had coach cues each day, and the OX Credits a workout's questions, pictures and coach cues used. We also keep the spoken voice of workout
announcements, with nothing that identifies you, as described above.
How we use it
- To generate training sessions and coaching guidance tailored to you.
- To operate features you use: the guided timer, progress tracking, community, and coaching.
- To send you notifications you have enabled, such as messages, social activity, or a session
being ready.
- To provide a plan you bought, keep its status in step across your devices, and honour its
renewal or cancellation.
- To maintain security, prevent abuse, diagnose faults, and improve the service.
- To comply with legal obligations.
Health information
The health and fitness details you provide are used to design safer, more appropriate training and
are visible only to you, except where you deliberately share content yourself. If you connect with a
coach (“watcher”) inside the app, that person can see your training plans, session results, and coach
summaries, but not your health intake answers or baseline details, which are withheld by design.
We do not sell health information, and we do not use it for advertising.
Service providers
We use a small number of processors to run the platform. They handle data only to provide their
service to us:
- Supabase: authentication, database, and file storage.
- OpenAI: generation of workout plans, coaching text, exercise illustrations, and the AI Coach's answers, its cues and their spoken voice, and the spoken voice of its workout announcements.
Requests carry the training context needed to produce them; a
question to the AI Coach carries its text and what is on your timer's screen, and, if you allow pictures,
the one picture the question needs. If you turn on coach cues, requests also carry the pictures from your
camera during the work of your workout, with what is on your timer's screen and what the coach has already
asked of you, the names of the workout's exercises, and the words of each line the coach says, for its spoken voice. While workout announcements are on, requests also
carry the words of each announcement, with your workout's exercise names and numbers, for its spoken voice. OpenAI
says it does not use these requests to train its models, and keeps a request for spoken voice for up to 30 days to
check for misuse.
- DigitalOcean: hosting of our application servers.
- Apple: in-app purchases on iOS. Apple handles the payment and tells us the
purchase status.
- Stripe: payments on the web and for watched sessions, and payouts to watchers.
Card and bank details are entered on Stripe's pages and never reach us.
- RevenueCat: keeps the status of a subscription in step between the app stores,
Stripe, and OX.
- Google Maps Platform: looks up nearby facilities and their photos for the map.
The lookup carries the map's location, not your identity.
- Push delivery services operated by your browser or device vendor, used only to
deliver notifications you enabled.
Sharing
We do not sell personal information. We share it only: with the processors above; with other users
when you choose to publish or send content; when required by law or to protect our rights and the
safety of users; and, if the business is ever sold or merged, with the acquiring party under the
terms of this policy.
Retention
We keep account and training data while your account is active. Some content expires by design: stories are removed 24 hours after posting, the spoken voice of workout
announcements is removed about a month after it was last played and is never kept longer than six months, and
inactive workout plans are cleaned up on a schedule.
When you ask us to delete your account, we remove your personal data from our production systems,
except where we must keep records to meet legal obligations.
Your rights
You can request access to the personal information we hold about you, correction of inaccurate
information, deletion of your account and data, or an export of your data. Write to
support@oxtechnologies.fitness and we will respond.
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA;
we honour those requests regardless of location.
Security
Data is transmitted over encrypted connections (HTTPS) and stored with access controls that limit
each account to its own records. No system is perfectly secure, but we take reasonable technical and
organizational measures to protect your information.
Children
OX is not directed to children under 13, and we do not knowingly collect their personal information.
If you believe a child has given us information, contact us and we will delete it.
Not medical advice
OX provides fitness guidance, not medical advice. Consult a qualified professional before beginning
or changing an exercise program, particularly if you have an injury or medical condition.
Changes
If we make material changes to this policy we will update the date above and, where appropriate,
notify you in the app.
Contact
OX Technologies LLC: support@oxtechnologies.fitness