Privacy Policy
Last updated: 2026-05-21
This is the initial version of our Privacy Policy, valid for the three user profiles: Student, Personal Trainer, and Gym. We are finalizing the legal review based on Brazil’s General Data Protection Law (LGPD) and will update this page as soon as the final version is ready.
1. Who we are
Athletic Station is an AI-generated personalized workout platform, accessible through the mobile app and the website www.athleticstation.app. We serve three profiles: Student, Personal Trainer, and Gym.
2. Data we collect
2.1 Student
- Registration: email, password (hash), name, nickname, age, height, weight, gender, phone number.
- Workout preferences: goals, fitness level, preferred locations, available equipment, physical restrictions.
- Usage history: generated workouts, completed exercises, dates, estimated calories, and progress statistics.
- Payment: processed by Stripe. We only receive subscription identifiers, not card data.
- Media: post-workout selfies, only if you choose to generate one, and profile photo.
- Location, optional: used only when searching for nearby personal trainers. Coordinates are not stored.
2.2 Personal Trainer and Gym
- Registration: email, password (hash), name, nickname, phone number, professional registration, such as CREF when applicable.
- Public profile: bio, specialties, photo, city/state, displayed to students during proximity searches.
- Operation: schedule availability, manually recorded payments, subscription plans, and messages exchanged with linked students.
- Personal Trainers and Gyms do not provide their own health data. The app does not request height or weight for these profiles.
3. How we use your data
- Student: to generate personalized workouts using AI (Claude / Anthropic), display history and progress, and process subscription through Stripe.
- Personal Trainer/Gym: to operate the public profile, manage linked students, schedule, payments, and messages.
- All users: to send notifications about account events, only with your consent.
- We do not sell your data to third parties.
4. Sharing
We share data only with operational services or with the counterpart of your link:
- Personal Trainer/Gym linked to you (Student): receives your name, workout data, execution history, calories, and exchanged messages while the link is active.
- Student linked to you (Personal Trainer/Gym): sees your public profile, including name, bio, specialties, city, and messages.
- Anthropic (Claude): receives an anonymized description of the Student profile to generate workouts.
- Stripe: processes Student payments.
- Cloudflare R2: stores videos and selfies.
- Firebase Cloud Messaging: sends push notifications.
- Google Maps Geocoding: converts Personal Trainer city/state into coordinates, only for Personal Trainers, not Students.
5. Your rights under LGPD
You may, at any time, regardless of profile:
- Request a copy of your data.
- Correct or update information in your profile.
- Delete your account, with all personal data removed within up to 30 days.
- Revoke specific consents, such as notifications or AI processing.
- Unlink from personal trainers, gyms, or students at any time, ending the sharing described in section 4.
For any request, email support@athleticstation.app.
6. Obligations of Personal Trainers and Gyms
Personal Trainers and Gyms commit to using linked students’ data only for professional service within the app, without sharing, exporting, or commercializing this information with third parties, and to end all use of the data when unlinked, as required by LGPD.
7. Security
Passwords are stored with Argon2id hash. Session tokens expire automatically. All communication with the server is carried out via HTTPS (TLS 1.2+).
8. Children
Athletic Station is not directed to users under 16 years old. If you are a legal guardian and have identified a minor’s registration, please contact us for removal.
9. Changes to this policy
Significant changes will be notified inside the app before they take effect.