Your data is yours.

The short version

weyt.ai stores what you give it to run the scoreboard and the coach: your account, the lifts you log, and the optional profile numbers that make the Weyt Age meaningful. It sends your training data to Anthropic's Claude API to generate coaching, and to nobody else for any other reason. It shows no ads and sells nothing. You can delete your account, and everything in it, from Settings at any time.

What is collected

• Account: your email address, your first name, and a bcrypt hash of your passphrase. The passphrase itself is never stored.
• Training data: the workouts you build and the sessions you log (exercises, sets, reps, weights, duration, notes, dates), plus everything computed from them: scores, estimated one-rep maxes, Weyt Age history, progression targets and the coach's notes about your training.
• Profile (optional): sex, birth year, bodyweight, height, units, training goal and experience, weekly target. Sex and age are what make the Weyt Age percentiles work; bodyweight is optional and, when absent, a sex-average stand-in is used and labelled as such.
• Wearable screenshots (optional): if you attach a watch or wearable screenshot when finalizing a session, the duration, heart-rate and calorie figures are extracted from it and stored with that session. The image itself is never stored; it is processed and discarded.
• Your crew: if you share a workout with the community, the snapshot, your @handle, and like / add / did-it counts are public by design. Reports you file are stored to moderate.
• Coach conversations: what you say to the coach is sent to generate its reply and is kept for the current app session so the thread survives closing the sheet. The coach may save short notes about your training to your profile when you ask it to, or when Auto-update plan is on.
• Operational logs: request logs (which features were used, token counts, timings) for debugging and cost tracking; the IP address of sign-in and sign-up attempts, kept briefly for rate limiting; and a rough count of public landing-page views. The Weyt Age demo on the landing page runs entirely in your browser and sends nothing.

Who processes it

weyt.ai runs on a small number of providers. Each one receives only what its job needs.

• Supabase hosts the database where your account and training data live. Row-level security is enabled with no public policies; only the server, using a service key, can read or write.
• Anthropic (Claude API) generates the coach's replies, the weekly coach review, AI-designed workouts, wearable-screenshot extraction, and the moderation screen for workouts shared to the floor. Your relevant training data is sent to produce those outputs. Anthropic's API terms apply to that processing.
• Resend delivers passphrase-reset email from noreply@weyt.ai. It receives your email address when you request a reset.
• Vercel hosts the site and serves the app, and provides cookieless Web Analytics (aggregate page views and visitor counts, no cross-site tracking).

No advertising networks, no data brokers, no resale. weyt.ai does not sell, rent or trade personal data.

Cookies

One session cookie keeps you signed in (a signed NextAuth JSON Web Token). There are no advertising or tracking cookies. Vercel Web Analytics is cookieless. The app may use your browser's local storage to recover an in-progress guided session if the page reloads.

Security

Passphrases are hashed with bcrypt and must be at least 10 characters. Sign-in is rate-limited (5 attempts per 15 minutes per IP) and sign-up is rate-limited (3 per hour per IP); those IP addresses are the only ones logged, and only for that purpose. Reset links are single-use and expire in 15 minutes. All traffic is over HTTPS. weyt.ai is a beta product built by one person; it is not certified to any formal security standard, and there is no email verification or multi-factor authentication yet.

Deleting your account

Settings → Account → Delete account. You confirm with your passphrase and by typing DELETE. Deletion is a hard delete: your workouts, sessions, scores, coach notes, profile and account row are removed, which frees your email and @handle. Workouts you shared to the floor remain available to the people who added them but are re-attributed to an anonymous “Former member” account; nothing about you stays attached to them. Operational log rows tied to your account are deleted with it.

Children

weyt.ai is for adults. Do not sign up if you are under 18.

Changes

When this policy changes, the date at the top changes with it. Material changes will be called out in the app.

Contact

In the app, tell the coach you have feedback or a privacy question; it files your message directly to the builder. You can also review the terms of use and the about page.