Primalyst — Legal

This Privacy Policy explains how we (the developer of Primalyst) collect, use, and share information when you use the App. By using the App you agree to this Policy.

A. INFORMATION WE COLLECT.

Account information: your first name, email, and password (stored securely by our authentication provider), and profile details you add (such as last name, gender, body metrics, location, and goals).
Wellness data you log: foods and nutrition, habits and tasks, steps and activity, sleep and circadian settings, streaks, and similar entries.
Consistency record: a daily score derived from your logged data — how many of your daily tasks you completed and whether you reached your step goal — kept as one entry per day so the App can show your grid, streak, and consistency percentage.
Community content: posts, comments, direct messages, reactions, and anything else you share in the community.
AI conversations: the messages you send to Primalyst AI, and any voice recordings you choose to send for voice-to-text. When you ask about your own data, the App also sends the AI a short summary of the relevant entries — for example your recent nutrition totals, step activity, habit completion, or wake times — so it can answer with your real numbers instead of asking you for them.
What Primalyst AI remembers: to avoid asking you the same things repeatedly, the App saves a short set of health facts drawn from your conversations (for example a stated restriction, a sensitivity, or a protocol you are following) and includes them in later conversations. This is health-related information and is treated as such below. It is deleted when you delete your account.
Purchase information: your subscription status and transaction identifiers (payment card details are handled by the app store, not by us).
Device and usage information: app version, device type and operating system, and basic diagnostic and usage data needed to run and improve the App.
Permissions you grant: for example, motion/step data, photos/camera, microphone, and approximate location — each used only for the related feature, and only if you allow it.

B. HOW WE USE INFORMATION. To create and operate your account; provide and personalize features (including your protocol, targets, and AI responses); enable the community; process subscriptions; keep the App safe and prevent abuse; provide support; comply with law; and maintain and improve the App. We do not use your information to make automated decisions with legal or similarly significant effects, and we do not sell your personal information.

C. HOW WE SHARE INFORMATION.

With other users: content you post to the community, and your public profile details, are visible to others by design.
Your consistency grid, streak, and consistency percentage — ONLY if you turn on "Share my consistency". This setting is OFF by default and you can turn it off at any time. When it is on, other members can see how active each day was and your streak; they cannot see your step counts, which of your tasks you completed, or any other detail behind a day. When it is off, this information is visible only to you.
With service providers ("processors") who run the App on our behalf, under contracts that limit their use of your data, including: our database and authentication host (Supabase); the app-store, billing, and sign-in platforms (Apple — including Sign in with Apple — and, where used, a subscription manager such as RevenueCat); AI providers that generate Primalyst AI responses and transcribe voice (such as Anthropic and Groq) — they receive your messages, any photo you attach to a message, the saved health facts described above, and, when your question is about your own data, the summary of the relevant entries; our email-delivery provider, which sends account emails such as password-reset and verification links (such as Resend); and an image-moderation provider that automatically screens photos you upload to detect and block sexually explicit content (Amazon Web Services). We send each provider only the content needed to perform its function.
For legal reasons: to comply with law, enforce our Terms, or protect the rights, safety, and security of users, the public, or us.
In a transfer of the App: if the App is ever transferred to another operator, subject to this Policy. We do not sell your personal information and do not share it for cross-context behavioral advertising.

D. LEGAL BASES (EEA/UK USERS). Where the GDPR/UK GDPR applies, we process your data to perform our contract with you (to provide the App), based on your consent (for optional permissions and sensitive data you choose to log), to comply with legal obligations, and for our legitimate interests in operating, securing, and improving the App.