Privacy Policy

Engine is a fitness and nutrition coaching app built by Vinny Drumond ("Engine," "we," "us," "our"). This policy explains what information Engine collects, how we use it, and the choices you have. It applies to the Engine mobile app and to tryengine.app.

If you have questions about this policy, contact us at info@tryengine.app.

1. Information we collect

We collect information in three ways: what you give us directly, what the app records as you use it, and what your device provides when you turn a feature on.

Information you provide directly

• Your name and email address, when you create an account in the app or join the waitlist on our website
• Your age, body weight, and height, if you choose to enter them
• Your training goal, experience level, and equipment access
• Injuries or physical limitations you enter when generating a training program
• Progress photos and a profile picture you choose to add, using your device's camera or photo library
• Photos of meals you take to have them logged, and voice recordings when you describe a meal out loud instead of typing it
• Messages you send through the in-app feedback form. These are stored in our database and emailed to us so we can read and reply to them.

Information recorded as you use the app

• Workouts you log: exercises, sets, reps, and weights
• Other activities you log: type, duration, notes, and estimated calories
• Body weight history, hydration, and your nutrition log, including calories and macronutrients
• Macro targets you calculate, meal templates you save, and personal goals you set
• Training programs and meal plans generated for you, if you choose to save them
• Specialty programs you start or purchase, and the date you started them
• Posts and likes in the in-app community feed
• A daily count of how many times you have used the AI features, which exists only to enforce usage limits

Information from your device (only if you allow it)

• Step count. On iPhone, Engine reads your daily step count from the phone's own motion sensor so the Home screen can show real steps. This never leaves your device and is never sent to our servers. Engine does not currently read Apple Health or Health Connect, and does not collect sleep or heart-rate data.
• Camera, photo library, and microphone. Used only at the moment you take a progress photo, log a meal by photo, or describe a meal out loud. Engine does not access them in the background.
• Notifications. If you allow them, Engine schedules reminders locally on your device. We do not collect a push token and cannot send you push notifications from our servers.

What we do not collect

Engine contains no third-party advertising SDKs, no third-party analytics SDKs, and no crash-reporting SDK. We do not collect your location. We do not sell, rent, or share your personal information with third parties for their own marketing purposes. If any of that changes, we will update this policy and, where the law requires it, ask for your consent first.

2. Companies that process data for us

Engine relies on the following service providers. Each one only receives what it needs to do its job.

• Supabase — hosts your account, sign-in, all of the data listed above, and your photo files. Photo files are stored in private buckets that are not publicly readable; the app requests a short-lived link each time it needs to show you one.
• Railway — hosts the server the app talks to.
• Stripe — processes payments for Engine Pro and for specialty program purchases, and runs the billing page where you manage or cancel a subscription. Stripe receives your payment details directly; Engine never sees or stores your card number.
• Anthropic — powers the AI features. When you use them, Anthropic receives the specific content that feature needs: a photo of a meal, a description of a meal, or, for the program generator, your training goal, available days, equipment, and any injuries you entered. For meal plans it receives your macro targets and diet preference.
• OpenAI — transcribes audio only. When you describe a meal out loud, the recording is sent to OpenAI's Whisper service to be turned into text, which is then handled as described above.
• USDA FoodData Central and FatSecret — receive the search terms you type when looking up a food, so they can return matching nutrition data.
• Resend — delivers the email that notifies us when you send feedback.
• Apple — when you choose Sign in with Apple, and for distribution of the app. Apple may provide us with your name and email, or a private relay email address if you choose to hide yours.
• Kit (ConvertKit) — manages the email waitlist on our website only. It receives nothing from the app.

About the AI features. Under our agreements with Anthropic and OpenAI, content sent to them through their APIs is used to return your result and is not used to train their models. AI output is generated by a machine, is not reviewed by a person before you see it, and can be wrong — see our Terms of Service for what that means for training and nutrition plans.

Our servers and databases are located in the United States. If you use Engine from outside the United States, your information is transferred there.

3. How we use your information

We use the information above to:

• Provide the core app experience: your training programs, logged workouts, nutrition tracking, and progress history
• Generate the training programs, workouts, and meal plans you ask for
• Process your Engine Pro subscription and any program purchases, and manage your account
• Send you service-related communications and, if you opt in, product updates
• Personalize the daily check-in messages and guidance the app shows you
• Enforce usage limits on the AI features
• Improve and troubleshoot the app
• Comply with legal obligations and enforce our Terms of Service

We do not use your health or fitness data to show you ads, and we do not sell it.

4. What other people can see

Everything you log in Engine is private to your account by default, with one exception: the in-app community feed.

When you choose to share an activity to the community feed, that post — including your display name, the activity type, its duration, and any note you added — becomes visible to every other signed-in Engine user. Sharing is off by default and is always your choice, made one post at a time. You can delete any of your own posts at any time, which removes it for everyone. Progress photos, body weight, nutrition logs, and generated programs are never shared to the feed.

5. How your information is shared

Beyond the community feed described above, we share information only:

• With the service providers listed in section 2, under agreements that limit how they can use your data
• If required by law, or to protect the rights, property, or safety of Engine, our users, or others
• With your explicit consent, or at your direction

We do not sell your personal information, and we do not share your consumer health data with third parties for advertising purposes.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, withdraw consent for us to collect or use your health data, and opt out of the sale or sharing of your information (Engine does not sell your information, so this is not currently applicable, but you still have the right to ask).

To exercise any of these rights, email info@tryengine.app. We'll respond within the timeframe required by applicable law.

If you're an EU, UK, or California resident, additional specific rights may apply to you under GDPR, UK GDPR, or the CCPA/CPRA respectively. The process to exercise them is the same: email us.

7. Data retention and deletion

We keep your information for as long as your account is active, or as needed to provide the app's features.

You can delete your account at any time from Profile settings in the app, or by emailing us. This is a permanent deletion, not a deactivation. It removes your profile, workouts, activities, nutrition and hydration logs, body weight history, goals, community posts and likes, saved programs and meal plans, purchase records, and your stored progress, meal, and profile photos. If you signed in with Apple, we also revoke that connection. Some records may be retained where we are required to keep them for legal, tax, or security reasons — payment records held by Stripe are the main example.

8. Children's privacy

Engine is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. Your data is protected at the database level by row-level security, so one account cannot read another's records, and photo files are stored in private buckets rather than at public URLs. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we take this seriously given the sensitivity of health and fitness data.

10. Changes to this policy

We may update this policy as Engine adds features or as privacy laws change. We'll update the "last updated" date above, and for material changes (especially anything affecting how we handle health data) we'll provide more prominent notice, such as an in-app message.

11. Contact us

Questions, requests, or concerns about this policy: info@tryengine.app.