LEGAL · PRIVACY

Privacy Policy

Effective 11 August 2026 · supersedes the version of 8 July 2026

Aspire is a workout planning and logging service (the iOS app, the Apple Watch app, the coach web console, and this website), built and operated by 孙旻丰 (Sun Minfeng), an independent developer (aspire.humanmeetsai.com) — "we" in this policy means them, and they are the controller of your data. This policy describes what data we collect, why, who processes it for us, and the control you have over it. There is no advertising, there are no third-party trackers, and we do not sell your data.

What we collect

Account

• Your email address (which may be absent if you use Apple's Private Relay) and the account identifier Apple or Google shares with us when you sign in with them.
• If you sign up with email: your password, stored only as a salted hash (bcrypt), never in plain text.

Profile you choose to enter

• Name, profile photo, birthday, gender, location, bio, height, weight, body-fat percentage, activity level, training goals, dietary preferences, and weekly schedule preferences; optionally a phone number and emergency contact. Coach profiles additionally include certifications, years of experience, and specializations.

Training & wellness data

• Your training plan (including its version history) and every workout you log: exercises, sets, weights, RPE, duration, and notes.
• Wellness signals you choose to record: energy, sleep quality, and stress ratings, plus heart-rate data when you log a workout with the Apple Watch app.
• Injuries and training limitations you report (body part, kind, severity, notes) — used so plans work around them.

Coaching

• If you link with a coach: the relationship itself, the coach's feedback on your sessions, and coaching notes the coach writes. You control per-coach what they can see (wellness signals, body metrics, AI tools) and can change it at any time.

Subscriptions

• Aspire Plus is billed by Apple: we receive only Apple's transaction identifier and subscription status, never your payment details. Coach plans (international) are billed through Stripe: Stripe processes the payment for us and we store the subscription status and Stripe customer identifier.

Device & usage

• A device token for push notifications (Apple Push Notification service).
• First-party usage analytics: event names (like "onboarding completed"), app version, and an anonymous install identifier. No advertising IDs, no third-party product-analytics SDKs; events are deleted after at most 180 days.
• Crash and performance diagnostics: when the app crashes or misbehaves, stack traces and technical device details (model, OS version) are sent to Sentry, our crash-reporting processor. Diagnostics are not linked to your account identity.
• On this website: cookieless first-party page analytics (a random anonymous identifier kept in your browser's local storage) and, if you join the waitlist, the email address you give us.

AI features and your data

The built-in engine

When you ask Aspire to generate or adapt a plan, we send the necessary context — profile and goals, recent sessions, a progress summary, injury records, and your written instructions — to the model providers that process it for us (international: Anthropic and Microsoft Azure OpenAI; China region: Alibaba Cloud Model Studio). These providers process the data to generate the result, plus the automated content-safety and abuse screening their platforms require; none of them may use your data to train their models. In the China region, Alibaba Cloud is additionally required by Chinese law to screen content and to retain and report records of unlawful use.

Connecting your own AI (MCP)

You can connect an AI assistant of your choice to Aspire over MCP, an open protocol. This requires your explicit consent, recorded in the app first. Once connected, the data your assistant requests (profile, plan, training history, injuries — and for coach seats, roster and notes) is transmitted to that assistant's provider and handled under your agreement with it, not under this policy — which assistant to trust is your choice. You can disconnect in the assistant and revoke the consent in the app at any time; after revocation, no further access is granted.

Why we use it

Solely to run the service: authenticate you, generate and adapt your training plan, show your history and progress back to you, sync between your devices, deliver notifications you enable, support coach–athlete collaboration, handle subscriptions, answer support requests, and prevent abuse. We do not advertise, sell data to anyone, or share data for advertising purposes.

Who processes data for us

• Apple — Sign in with Apple, in-app subscriptions, push notifications.
• Google — Sign in with Google.
• Microsoft Azure — hosting for international accounts and Azure OpenAI model services.
• Anthropic — model services for built-in plan generation (international).
• Alibaba Cloud — hosting for China-region accounts and Model Studio model services.
• Stripe — payment processing for coach plans (international only).
• Sentry — app crash and performance diagnostics (not linked to your account identity).
• The provider of the AI assistant you connect — only if you choose to connect one over MCP, under your agreement with it, as described above.

Where it lives

Your data is stored on servers in the region you signed up in: international accounts on Microsoft Azure, China-region accounts on Alibaba Cloud. Accounts are region-specific and data is not moved between regions, with one exception: Apple delivers subscription notifications to our international endpoint, and transactions belonging to China-region accounts are forwarded to the China deployment — subscription transaction data only, never training data. Everything is transmitted over encrypted connections.

Retention & deletion

• Account data is kept until you delete your account. In the app, You tab → Settings → Delete account permanently removes account, profile, plans, full workout history, injuries, coach notes, subscription records, and device tokens from our servers — immediate and irreversible.
• Usage-analytics events are kept for at most 180 days; on account deletion, any remaining events are immediately de-linked from your identity.
• Waitlist emails are kept until we invite you; email us to be removed at any time.

Security

All traffic is encrypted with TLS. Passwords are stored only as hashes. Connections from external AIs use OAuth 2.1 with short-lived, scoped tokens, and every call is re-checked server-side against your entitlements and consent.

Your rights

You can view and edit nearly all of your data directly in the app, delete your account at any time, and revoke AI data consent at any time. To request access, correction, or a copy of your data, or to exercise any other right your local law gives you, email us and we will respond within a reasonable time.

Children

Aspire is intended for adults and athletes who train independently, not for children under 16. We do not knowingly collect personal data from children.

Changes

If this policy changes materially, we will update this page and its effective date, and flag significant changes in the app.

Contact

Questions or requests: info@humanmeetsai.com