Privacy policy

In short

• Your training is saved on your device first. A copy goes to our server only if you turn on sync.
• We don’t show ads, and we never sell or rent your data.
• When you use the AI coach, the details it needs go to Anthropic’s Claude so it can write a reply.
• We use PostHog to see how the app is used and to find bugs.
• Our Instagram tool reads only our own account and public business and creator accounts. It never reads private accounts or messages.
• Anyone can ask us to delete their data by emailing support@maxset.app.

Who is responsible

Maxset is run by Lee Parry, who is the data controller for the personal data described here. If you have a question about this policy or your data, email support@maxset.app.

The Maxset app

What we collect

Profile

Your first name (optional), sex, age, height, weight, experience, goal, focus areas, the days you train and how many hours a week. We use it to set your starting weights, your recovery time and the shape of your week.

Health answers

Your answers to the safety questions, your medical-clearance tick, and any injuries or areas to avoid. This is health data. We only store it with your consent, and the planner uses it to swap out exercises that could hurt you.

Gyms and equipment

Each gym you add, its equipment and weights, your seat settings and, only if you pin it, the gym’s location.

Training

Your workouts, sets, reps, reps left, times, notes and pain flags, and the next weight for each lift.

Coach chats and settings

The messages you send the AI coach and its replies, and your plan and reminder settings.

Sync code

If you turn on sync, a random code links your devices. We don’t ask for your email address, phone number or payment card.

Where it’s kept

Your data is kept on your device, in your browser’s storage. If you turn on sync, a copy is stored on our server and linked to your sync code, so your other devices see the same data. Anyone who has your sync code can open that copy, so keep it private. Your data stays until you delete it.

Location

The app only uses your location when you tap Find my gym, or when it opens if you’ve turned that on. It compares your position with the gyms you’ve pinned, on your device. We don’t track you in the background or keep a history of where you’ve been.

The AI coach

When you use the AI coach, the app sends Anthropic, the company that makes Claude, what the coach needs to answer you. That’s your first name if you gave one, your goal and plan, your body measurements, progress and training history, any steps and calories you’ve logged, and your message. Anthropic uses it to write the reply. The built-in coach that picks your next weight during a workout runs on your device and sends nothing.

Analytics

The app uses PostHog, a product analytics service based in the United States, to understand how people use Maxset and to find bugs. PostHog records the screens you visit, the buttons you tap, errors and how fast the app loads. It also records your sessions in the app, and those recordings can include what you type. It keeps an identifier in your browser (in local storage and a cookie) so it can tell visits apart, and it sees your IP address and the kind of device you use. We use this only to improve Maxset, never for advertising.

Instagram data (Maxset Social Intelligence)

Maxset Social Intelligence is our own tool, built on Meta’s Instagram Graph API. Only the Maxset team uses it. It has no public users, and we never ask anyone else to log in to it.

What it reads

• Our own Instagram account, @maxset_app: our profile, posts and Reels, their insights (such as reach, views, likes, comments, saves and shares), and the comments people leave on our posts. If you comment on one of our posts, we see your username, profile picture and comment, just as Instagram shows them, so we can reply.
• Public business and creator accounts in fitness and lifting, through Meta’s Business Discovery feature. That means the account’s username, name, bio, profile picture, website, follower, following and post counts, and its public posts and Reels with their captions, dates, links and like, comment and view counts.

What it never does

It never reads private accounts, personal accounts, direct messages or anyone’s list of followers. It never logs in as anyone else, and it never likes, follows, comments or sends messages for anyone.

Why we use it

We use it to learn which kinds of posts work in our part of the fitness world, to plan our own posts and to run our own account. We may use AI tools, such as Anthropic’s Claude, to summarise this data, for example to describe what a month’s most-watched posts have in common.

How we look after it

This data is stored on our own server, and only the Maxset team can read it. We keep it only as long as we need it for this research, and delete it within 12 months of collecting it. We delete it sooner if you ask, if Meta asks, or if we stop running the tool. We may keep totals that name no account, such as the average views for a type of post.

We never sell or license Instagram data, and we never use it for advertising or surveillance, to build profiles of people, or to discriminate against anyone. We don’t share it with data brokers or anyone else. The only exceptions are the service providers who work for us under our instructions (see Who we share data with) and cases where the law requires it.

The website

The website doesn’t use cookies, analytics or ads. It loads its typeface from Google Fonts, so your browser sends your IP address to Google when a page loads. Our web server keeps standard access logs (IP address, time and page) for about two weeks to keep the site secure.

Who we share data with

We don’t sell, rent or trade personal data, and we don’t share it for advertising. These service providers handle data for us, only to provide their service:

• Our hosting provider runs the server that stores synced app data, coach chats and Instagram data.
• Anthropic (United States) writes the AI coach’s replies and summaries of Instagram data.
• PostHog (United States) provides app analytics.
• Zoho runs our email, if you write to us.
• Google serves the website’s typeface.
• Meta sees the requests our Instagram tool makes to its API.

We’d only disclose personal data to anyone else if the law required it. Some of these providers are in the United States. When your data goes there, we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses.

How long we keep it

• App data and coach chats: until you delete them.
• Analytics: only as long as we need it to improve the app. You can ask us to delete yours at any time.
• Instagram data: no longer than 12 months after we collect it.
• Emails to us: as long as we need them to answer you.
• Web server logs: about two weeks.

Delete your data

Anyone can ask us to delete their data. That includes people who use the app, people who commented on our Instagram posts and people whose Instagram account our tool has read. You don’t need a Maxset account to ask.

1. In the app: go to Settings and choose Delete all data. Everything on your device is removed at once. If sync is on, the deletion also reaches the copy on our server.
2. By email: write to support@maxset.app with the subject “Delete my data”. To help us find your data, include your sync code if you use sync, or your Instagram username. Within 30 days we’ll delete it from our server, our analytics and our Instagram data, then email you to confirm.

Your rights

Depending on where you live, for example under the GDPR in the EU and the UK or the CCPA in California, you can ask us to show you the personal data we hold about you, correct it, give you a copy, delete it, or stop or limit how we use it. You can also withdraw your consent at any time. Email support@maxset.app and we’ll reply within one month. If you’re in the EU or the UK, you can also complain to your data protection authority.

We use your app data to give you the app you asked for, and we only use your health answers with your consent. We use analytics, security logs and Instagram research because we have a legitimate interest in running and improving Maxset, and you can object to that.

Maxset is for adults. It isn’t meant for anyone under 16, and we don’t knowingly collect their data. If you think a child has given us data, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If the changes are big, we’ll also tell you in the app.

Contact

Lee Parry, Maxset
support@maxset.app