Privacy Policy

Palus is a training and nutrition app operated by Freehouse Company LLC (“we,” “us”). This policy describes what information we collect when you use our web and mobile apps, how we use it, and the choices you have.

Information we collect

• Account data — email address, display name, password (stored hashed), and profile settings you provide.
• Training data — workouts, sessions, exercises, sets, plans, goals, notes, and related metrics you log or import. Depending on the features and connections you use, this includes nutrition, body measurements, heart rate, sleep, recovery, and activity location or route data.
• Coaching and onboarding — messages, check-ins, feedback, meal or body-composition photos, reference images, and voice input you choose to provide, plus transcripts and generated assessments.
• Usage data — basic technical information such as device type, browser, and IP address needed to operate and secure the service.

Third-party integrations

You may optionally connect supported third-party services, including Garmin, Strava, Oura, and Whoop. Garmin data currently reaches Palus through Terra, an integration service. If you connect an integration:

• Palus or the integration provider retains access credentials and connection identifiers needed to sync the data you authorize. Palus does not ask you for your Garmin password.
• We receive the data covered by your authorization, such as activities, timestamps, distance, heart rate, routes, sleep, recovery, or body measurements where supported, and associate it with your account to display trends and support coaching.
• You can withdraw access in the connected provider's account settings or contact us for help disconnecting. For Garmin, review connected apps in Garmin Connect; the connection may appear as Terra. Disconnecting stops future access through that connection but does not automatically delete previously imported records from Palus. Contact us to request their deletion.

Each third-party service has its own privacy policy governing data they collect independently of Palus.

AI coaching, images, and voice

When you use AI features, relevant training history, health metrics, messages, and any images or voice input used by that feature are processed by our AI service providers to generate coaching, transcriptions, and assessments. These providers include OpenAI, Google, and Groq, with requests also routed through Vercel AI Gateway. Optional voice onboarding uses ElevenLabs. Web searches may send relevant search queries to search providers. Generated assessments are stored with your account.

Coach photos are sent to our AI model provider for analysis. Before private storage, we decode and re-encode each image to strip embedded metadata and limit its size. Raw photos are automatically deleted after 30 days, and you can delete one immediately from the coach. Personal onboarding reference images also expire after 30 days; inspiration images may remain until deleted or replaced. Transcripts and structured assessments may remain after the original media is deleted.

How we use your information

We use your information to:

• Provide and maintain the training log, progress analysis, and coaching features.
• Authenticate you and keep your account secure.
• Sync and display data from integrations you enable.
• Respond to support requests and fix issues.

Sharing and selling

We do not sell your personal information or use your health data for targeted advertising. Service providers process data needed to operate Palus, including Vercel for hosting and file storage, Neon for our database, Terra for integrations, and the AI and voice providers described above. Authorized administrators may access information to provide support and operate the service. Information can also be disclosed when required by law or to protect rights and safety.

If you enable a public or unlisted profile, selected information becomes accessible to visitors with access to that page. If you authorize an external app or export your records, the information you choose to share is handled by that recipient.

Retention and security

We retain account and training records to provide your training history and the service, subject to deletion requests and the media limits above. Limited records may remain where needed for security, legal obligations, or backup recovery. We use safeguards including encrypted transport, password hashing, and access controls; no system is perfectly secure. Our providers may process information in the United States and other countries where they operate.

Your choices

• Update profile and training data in the app at any time.
• Delete a stored coach photo immediately from the coach.
• Withdraw integration access through the provider or ask us for help.
• Control profile visibility and revoke external app authorizations in your profile.
• Request access, a copy, correction, or deletion of your data or account by emailing zw@zgware.com. We may verify account ownership before acting. Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, and contact your local data protection authority.

Browser storage

Palus uses local browser storage to keep you signed in and remember app settings. App caching supports loading the service. You can clear this storage in your browser, which may sign you out or reset local preferences.

Children

Palus is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above.

Contact

Questions about this policy or your data: zw@zgware.com