Privacy Policy

MyoAtlas (“we”, “us”) runs the website at myoatlas.com and the MyoAtlas mobile app. This policy explains what we collect, why, and the choices you have. Questions: [email protected].

What we collect

When you browse or search

• Visit data: IP address, browser and device type, operating system, referring page, landing page and campaign tags, stored in our own analytics. When you are signed in, this is linked to your account.
• Usage events: pages and exercises you view, muscles you select on the map, and the searches you type, with their filters and result counts.
• Google Analytics: Google’s tag collects page views and device data and sets its own cookies.

When you create an account and train

• Account: email address, password (stored only as a one-way hash), and, if you sign in with Google, your Google account ID and email.
• Profile: name, bio, time zone, language, interface mode, and onboarding answers (goal, experience, equipment access, days per week).
• Training: routines, plans, workouts, sets (weight, reps, rest), how a workout felt, streaks and history.
• Coach: your messages with Moy, Moy’s replies, your answers to “How did it feel?”, and the notes Moy remembers about you. Those notes can include things you tell Moy about injuries or physical limitations.
• Sign-in sessions: IP address and browser or device of each signed-in session.

We do not ask for medical records, payment details, location from your device, contacts or photos. Only share health details with Moy that you are comfortable storing with us.

How we use it

• To run the service: find exercises, save and show your training, keep you signed in, and send account emails (confirmation, password reset).
• To power Moy: when you set up your first plan, chat with Moy, or start or finish a workout, a snapshot of your profile, routines, recent workouts and saved notes goes to our AI provider so Moy can answer.
• To improve MyoAtlas: understand which searches and exercises people use, fix errors, and control AI costs.

We do not sell your personal data and we do not use it for advertising.

Who processes it

We share data only with providers that help us run MyoAtlas:

• AI providers (MiniMax, OpenRouter): search text to understand what you are looking for, and coach conversations with the training snapshot above.
• Google: Analytics, web fonts (your browser loads them from Google), and Google sign-in if you choose it.
• Cloudflare: content delivery, security and account email delivery.
• Sentry: error reports, which can include request details such as IP address, browser and cookies.
• Hosting: our servers and database, where all account and training data is stored.

These providers may process data outside your country. We may also disclose data when the law requires it.

Cookies

• Sign-in cookie: keeps you signed in. Required for training.
• Analytics cookies: our visit cookies and Google Analytics cookies, used to count visits.
• Preferences: your theme choice is kept in your browser.

You can block or clear cookies in your browser. If you block the sign-in cookie, you cannot use training.

How long we keep it

Account, training and coach data stay until you delete them or ask us to delete your account. You can clear your Moy conversation and remove saved notes at any time in Train. Starting a new chat only hides earlier messages; Clear deletes them. Analytics and logs are kept as long as they are useful to improve the service.

Your choices and rights

You can view and edit your profile and training data in Train. To get a copy of your data, correct it, or delete your account (we delete your profile, training and coach data, and unlink analytics and usage records from you), email [email protected] from the address on your account. We reply within 30 days. Depending on where you live, you may also have the right to object to processing or to complain to your data protection authority.

Security

Passwords are hashed, connections are encrypted, and access to production data is limited to the people who run MyoAtlas. They may read coach conversations to give support, fix problems or prevent abuse. No system is perfectly secure, so use a strong password you do not reuse.

Children

MyoAtlas is not meant for children under 16. We do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

If we change this policy, we update the date above. For significant changes, we tell signed-in users in the app or by email.