Privacy Policy — Primalyst

This Privacy Policy explains how we (the developer of Primalyst) collect, use, and share information when you use the App. By using the App you agree to this Policy.

A. INFORMATION WE COLLECT

Account information: your first name, email, and password (stored securely by our authentication provider), and profile details you add (such as last name, gender, body metrics, location, and goals).

Wellness data you log: foods and nutrition, habits and tasks, steps and activity, sleep and circadian settings, progress photos, streaks, and similar entries.

Community content: posts, comments, direct messages, reactions, and anything else you share in the community.

AI conversations: the messages you send to Primalyst AI, and any voice recordings you choose to send for voice-to-text.

Purchase information: your subscription status and transaction identifiers (payment card details are handled by the app store, not by us).

Device and usage information: app version, device type and operating system, and basic diagnostic and usage data needed to run and improve the App.

Permissions you grant: for example, motion/step data, photos/camera, microphone, and approximate location — each used only for the related feature, and only if you allow it.

B. HOW WE USE INFORMATION

To create and operate your account; provide and personalize features (including your protocol, targets, and AI responses); enable the community; process subscriptions; keep the App safe and prevent abuse; provide support; comply with law; and maintain and improve the App. We do not use your information to make automated decisions with legal or similarly significant effects, and we do not sell your personal information.

With other users: content you post to the community, and your public profile details, are visible to others by design.

With service providers (“processors”) who run the App on our behalf, under contracts that limit their use of your data, including: our database and authentication host (Supabase); the app-store, billing, and sign-in platforms (Apple — including Sign in with Apple — and, where used, a subscription manager such as RevenueCat); AI providers that generate Primalyst AI responses and transcribe voice (such as Anthropic and Groq); our email-delivery provider, which sends account emails such as password-reset and verification links (such as Resend); and an image-moderation provider that automatically screens photos you upload to detect and block sexually explicit content (Amazon Web Services). We send each provider only the content needed to perform its function.

For legal reasons: to comply with law, enforce our Terms, or protect the rights, safety, and security of users, the public, or us.

In a transfer of the App: if the App is ever transferred to another operator, subject to this Policy. We do not sell your personal information and do not share it for cross-context behavioral advertising.

D. LEGAL BASES (EEA/UK USERS)

Where the GDPR/UK GDPR applies, we process your data to perform our contract with you (to provide the App), based on your consent (for optional permissions and sensitive data you choose to log), to comply with legal obligations, and for our legitimate interests in operating, securing, and improving the App.

Some data you choose to log may be sensitive (for example, health, body, and dietary information). We process it only to provide the features you use, based on your choice to provide it, and we never share it for advertising. You can delete this data or your account at any time.

F. DATA RETENTION

We keep your personal and health-related data for as long as your account is active and as needed to provide the App, comply with law, resolve disputes, and enforce our agreements. If you delete your account, we delete your associated personal data within 30 days, except where we are legally required to keep certain limited records longer (such as transaction records for tax purposes). We may retain fully anonymized data that can no longer identify you.

G. SECURITY

We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

H. YOUR RIGHTS AND CHOICES

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit much of your data in the App, delete your account, and control device permissions in your device settings. To make a request, contact us at support@primalyst.app; we may need to verify your identity.

I. U.S. STATE PRIVACY & HEALTH DATA RIGHTS

Depending on where you live, you may have additional rights over your personal and health-related data:

California (CCPA/CPRA): the right to know, access, delete, correct, and opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information.

Washington (“My Health My Data”), Nevada, and Connecticut: additional protections for consumer health data, including the right to access and delete it and to withdraw consent to its collection or sharing. To exercise any of these rights, contact us at support@primalyst.app. We will not discriminate against you for exercising your privacy rights.

J. CHILDREN

The App is for adults (18+) and is not directed to children. We do not knowingly collect data from anyone under 18 (or under the minimum age in your country). If you believe a minor has used the App, contact us and we will delete the data.

K. INTERNATIONAL TRANSFERS

We and our providers may process your data in countries other than yours, including the United States. Where required, we use appropriate safeguards for such transfers.

L. CHANGES

We may update this Policy. When we make a material change, we will update the version and ask you to review and accept it in the App.

M. CONTACT

For any privacy question, contact Bryson Gibbons at support@primalyst.app.

On the web. In the app you accept this document by checking a box during sign-up. This page publishes the same text for reference and for App Store Connect; reading it here does not by itself create acceptance.

N. WEBSITE VISITORS AND WAITLIST

Added for primalyst.app — please review and approve before launch. The sections above are your existing app policy, reproduced verbatim. This section covers the website, which the app policy did not address.

This website (primalyst.app) is informational. It sets no cookies, runs no analytics, and does not track you across sites.

If you join the waitlist you give us a phone number and the platform you chose. We only store the number if you tick the box giving us permission to text you; without that box we keep nothing. Waitlist entries are stored in our own database at Supabase, the same provider named above, and no other company receives them.

We use the number for exactly one thing: a single text message from Primalyst on the day the app is available on your platform. Reply STOP to opt out at any time. Message and data rates may apply. We do not sell your number, share it for advertising, or use it for any other marketing.

We keep your waitlist details until you ask us to delete them or until we’ve notified you of launch, whichever comes first. You can ask us to delete them at any time by writing to support@primalyst.app.

If you email support, you send us your email address and whatever you choose to write. We use it only to reply to you.