Privacy Policy

1. Who we are

EDGE is operated by Edge Athlete OS LLC (a Virginia limited liability company). For any privacy-related question, contact us at support@edgeathlete.app. This policy applies to the EDGE iOS app and to edgeathleteos.com.

2. Information we collect

We collect only what we need to run the app and personalize your experience.

Account information

When you sign in with Sign in with Apple, we receive your name (if you choose to share it) and a relayed email address that Apple manages on your behalf. We do not see or store your Apple ID password.

Health data (sensitive)

With your permission, EDGE reads health and fitness signals from Apple HealthKit — including sleep, heart rate, and activity metrics — so we can tune your daily ritual and coaching prompts. Health data is treated as sensitive personal information. We process it under your explicit consent and only for the purposes you authorize in-app. You can revoke HealthKit permissions at any time in iOS Settings, which immediately stops our access.

Reflection content

The daily ritual asks you to write short reflections. The text you submit is stored on our backend (see Subprocessors) so we can show you your history, compute streaks, and personalize the AI coach. We treat reflection text as confidential and never sell it.

Device and usage information

We collect technical information such as device model, iOS version, app version, crash logs, and anonymized in-app events (for example, “completed daily ritual”) so we can keep the app stable and improve it over time. This data is tied to your account but is not used for advertising.

What we don’t collect

• Location data — we do not request or use your precise location.
• Contacts — we do not access your address book.
• Payment card details — subscriptions are processed by Apple via In-App Purchase. We never see or store your card number.
• Advertising identifiers — we do not use the IDFA and we do not run ad networks.

3. How we use information

We use the information we collect to:

• Deliver the daily ritual and pregame features.
• Generate personalized AI coach responses based on your reflections and stated goals.
• Maintain streaks, history, and your Edge Report.
• Diagnose crashes, prevent abuse, and improve the app.
• Communicate with you about your account, subscription, or material changes to the service.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Legal bases for processing (GDPR)

If you are in the EU, UK, or EEA, we process your personal data under the following legal bases:

• Consent — for HealthKit data and reflection content. You can withdraw consent at any time.
• Performance of a contract — to provide the EDGE service you signed up for (account management, subscription, core features).
• Legitimate interests — to keep the app secure, prevent fraud, debug crashes, and improve product quality.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

5. How we share information

We do not sell personal information. We share data only with the service providers (“subprocessors”) needed to operate EDGE, each bound by contractual confidentiality and security obligations:

• Apple — App Store distribution, Sign in with Apple, HealthKit, and In-App Purchase processing. Apple acts as our platform and payment processor.
• Supabase — hosts our authentication and database, including your account record and reflection content. Data is stored in encrypted form.
• OpenAI— when you interact with the AI coach, your reflection prompts are sent to OpenAI’s API to generate a response. Under OpenAI’s standard API terms, data sent via the API is not used to train their models. We do not send your name, email, or HealthKit values to OpenAI.
• Vercel — hosts this marketing website (edgeathleteos.com). Vercel does not receive personal data from the EDGE app.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of EDGE, our users, or others.

6. International data transfers

EDGE is operated from the United States, and our subprocessors may process data in the United States or other countries. If you are in the EU, UK, or EEA, we rely on Standard Contractual Clauses (or equivalent safeguards) for transfers of your personal data outside your jurisdiction. You may contact us for more information about these safeguards.

7. Data retention

We keep your account information and reflection content for as long as your account is active. If you request account deletion, we delete your personal data within 30 days, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. HealthKit values are read from your device at the time of use and are not retained on our servers beyond what is needed to generate that session’s ritual.

Aggregated, anonymized data that no longer identifies you may be retained for analytics and product improvement.

8. Your rights

You have rights over your personal data. These include, subject to applicable law:

• Access — ask what personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — ask us to delete your data.
• Portability — receive a copy of your data in a portable format.
• Withdraw consent — at any time, for any processing based on consent.
• Object or restrict — object to or restrict certain processing (GDPR).
• Lodge a complaint — with your local data protection authority (GDPR) or the California Privacy Protection Agency (CCPA/CPRA).

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, to delete it, to correct it, and to limit the use of sensitive personal information (which, for EDGE, includes your HealthKit data). We do not sell or share personal information for cross-context behavioral advertising, so there is nothing for you to opt out of in that respect. We will not discriminate against you for exercising any of these rights.

EU / UK / EEA residents (GDPR)

In addition to the rights above, you have the right to data portability, to object to processing based on legitimate interests, to restrict processing in certain circumstances, and to lodge a complaint with your local supervisory authority.

9. How to exercise your rights

The fastest way to delete your account and the personal data associated with it is from the EDGE app: open Settings → Account → Delete Account. You can also email us at support@edgeathlete.app with any rights request, and we will respond within the timeframes required by applicable law (generally 30 days). We may need to verify your identity before fulfilling a request.

10. Security

We use industry-standard safeguards to protect your data, including TLS in transit, encryption at rest where supported by our infrastructure providers, least-privilege access for our team, and routine security review of third-party dependencies. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach that affects you, we will notify you and the relevant authorities as required by law.

11. Children

EDGE is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you in the app. Your continued use of EDGE after the changes take effect means you accept the updated policy.

13. Contact us

Questions, requests, or concerns? Reach us at:

Edge Athlete OS LLC
support@edgeathlete.app

14. About this website

edgeathleteos.com is a static marketing site. It does not set cookies, run analytics, or use third-party trackers. We do not collect personal information from visitors to this website. If that changes in the future, we will update this policy and this section before introducing any such tracking.