Privacy Policy

Altus (“we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use:

• The Altus mobile application
• This website and related web properties
• Any services, events, or materials that link to this policy

By accessing or using our Services, you agree to this Privacy Policy. If you have questions, contact us at support@altus.fit.

(a) Information you provide

• Name, email address, and contact details during registration
• Payment information for subscriptions or purchases (processed by app stores)
• Fitness goals, workout history, preferences, and nutrition logs
• Run tab inputs and plan-related activity (see Section 05)
• Wellness & Protocols entries you create (see Section 06)
• Shipping address if you place a merch order on this website

(b) Automatically collected information

• Device information (IP address, browser type, operating system, device identifiers)
• Usage data (feature interactions, session activity, error logs, performance metrics)
• Location data — precise GPS location in the mobile app when you record an outdoor run or route, and approximate location derived from IP address (see Section 03)

This section discloses how we access, collect, and use Location information. We do this so you can map outdoor runs and routes in the Altus app, and so we can operate the website securely.

Precise location (mobile app)

When you use outdoor run tracking or My Routes, we access your device Location Services (GPS) after you grant permission in iOS or Android settings. While a run or route is being recorded, we collect precise location coordinates (latitude and longitude, and related motion data such as distance, pace, and elevation).

We use this Location data to:

• Draw and save the path you ran or walked
• Calculate distance, pace, elevation, and personal records
• Display your routes and history inside the app
• Improve the reliability of Run and My Routes features

You control Location access. You can deny, limit, or revoke permission at any time in your device settings (for example, iOS Settings → Privacy & Security → Location Services → Altus, or the equivalent Android setting). If you deny Location access, GPS mapping and recorded routes will not work; other features (gym logging, nutrition, plans) remain available.

We access Location according to the permission you grant (typically while you are using the app to record a run or route). We do not sell precise Location data and we do not share GPS routes with advertisers or data brokers.

Approximate location

We may collect approximate Location derived from your IP address when you use the website or the app. We use this for security, fraud prevention, abuse detection, and aggregated traffic analytics. This is not GPS and is not precise enough to map a running route.

Location you type in

If you check out on altus.fit, you may provide a shipping address and phone number. That is address information you enter, not device Location Services. We use it to fulfill merch orders.

When you use altus.fit (this website), including the merch store and checkout flow, we may collect:

• Email address, shipping address, and phone number provided at checkout
• Order details (items, sizes, colors, quantities, and payment totals)
• Product preference sign-ups for upcoming releases (size, color, email)
• Guest order tracking lookups (tracking number and email)
• Standard web logs (IP address, browser type, pages visited, referral source). Your IP address may indicate approximate Location; see Section 03

Checkout payments are processed by Stripe; we do not store full card numbers on our servers. Orders and customer records are stored in Supabase. Transactional emails (order confirmations, shipping updates) may be sent via Resend. Public forms use hCaptcha to reduce abuse.

Article listing pages may display short summaries. Where summaries are generated or assisted by automated tools, they are reviewed for general accuracy but are not medical or fitness advice — always read the full article and consult qualified professionals before acting on content.

The Run tab generates and adapts training plans based on information you provide and your in-app activity. We may collect and store:

• Training goals, target events, experience level, and schedule preferences
• Generated plan structure, assigned workouts, and planned mileage or volume
• Workout completion, skips, and status updates
• Adaptation inputs — such as indications that you missed a session, were injured, or were ill — and resulting plan modifications
• Historical plan versions and progression over time
• Precise Location / GPS points when you record an outdoor run or route (see Section 03)

How we use Run tab data

• Generate, display, and adjust your training plans within the app
• Maintain your training history and continuity across sessions
• Improve plan generation, reliability, and user experience
• Provide customer support when you contact us about Run features

The Wellness & Protocols area in the Nutrition tab lets you manually log personal tracking entries. Depending on how you use the feature, we may collect and store:

• Vitamin and supplement names, schedules, and log history
• Insulin reminder schedules, notes, and acknowledgment of logged events
• Injection logs — including substance labels, dates, times, notes, and related fields as entered by you (which may include entries related to prescription medications or other injectable protocols you choose to track)
• Custom labels, dosages, or amounts as typed by you (we do not verify accuracy)
• Reminder preferences and notification settings associated with these entries

How we store and use this data

• Data is stored on secure servers associated with your account so you can view and manage your personal log within the app
• We use this data solely to power the tracking and reminder display features you initiate
• We do not analyze this data to provide medical advice, dosing guidance, or clinical recommendations
• We do not sell Wellness & Protocols data or share it for third-party marketing

Sensitivity of wellness data

Because you may choose to log sensitive health-related information, we treat this data with heightened care within our infrastructure. We limit internal access to personnel who need it for engineering, security, or support purposes. We do not disclose the contents of your wellness logs to other users or to third parties except as described in the “When We Share Data” section (for example, essential cloud hosting providers bound by contractual confidentiality obligations).

We process personal information to:

• Create and manage your account and authenticate your identity
• Deliver core app features, including workouts, nutrition, Run plans, mapped routes, and wellness logs
• Access and use Location to record outdoor runs and display GPS routes when you grant permission
• Personalize your experience and maintain your history across sessions
• Process transactions and manage subscriptions through app store platforms
• Send service-related communications and respond to support requests
• Monitor performance, fix bugs, and improve reliability and security
• Comply with legal obligations and protect against fraud or abuse

We do not use Wellness & Protocols or Run tab data to render medical opinions, and we do not share either dataset with advertisers.

We may share information only in these limited circumstances:

• Service providers: Trusted vendors who help us operate the Services, including:
  • Supabase — database, authentication, and file storage
  • Stripe — payment processing for merch checkout
  • Resend — transactional email delivery
  • Vercel Analytics — privacy-focused, cookieless page-view metrics on this website
  • hCaptcha — bot protection on public forms
  These providers process data under contractual confidentiality and data-processing obligations.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, subject to continued protection of your information
• Legal requirements: When required by law, regulation, legal process, or to protect the rights, safety, and security of Altus, our users, or others
• With your direction: When you explicitly request or authorize a disclosure

Users may contribute food items to the OpenFoodFacts database through our integration. By contributing, you agree that:

• You will only upload original photos taken with your own camera
• You will not upload copyrighted or protected third-party content
• Contributions are shared with OpenFoodFacts and subject to their licensing terms
• You are solely responsible for legal consequences arising from content you upload

We use cookies and similar technologies on our website to enhance experience, remember preferences, and understand usage patterns. You may control cookies through your browser settings.

• Essential cookies: Authentication sessions, guest order access, and checkout claim tokens for merch orders
• Vercel Analytics: Cookieless, aggregated page-view metrics on this website (no personal profiles)
• Google Analytics (optional): If enabled via site configuration, we may use Google Analytics to measure traffic. See Google's privacy policy for how they process data.

If you sign in with a third-party account (such as Apple or Google), we receive basic profile information permitted by that provider. Processing is governed by this policy and the provider's own privacy terms.

We retain personal information for as long as your account is active or as needed to provide the Services, including Run plans, Location / GPS routes, and Wellness & Protocols logs. We may retain certain data longer when required by law, to resolve disputes, or to enforce agreements.

When you delete your account or submit a verified deletion request, we will delete or anonymize your personal information within a reasonable period, except where retention is legally required.

We implement technical and organizational safeguards, including:

• Encryption of data in transit and at rest where supported by our infrastructure
• Access controls limiting employee access to production data
• Secure cloud hosting with industry-standard protections
• Monitoring and review of security practices

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other countries with different data protection laws. By using the Services, you consent to such transfers.

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Delete your data, including Run records, Location / GPS routes, and Wellness & Protocols records
• Object to or restrict certain processing
• Receive your data in a portable format where applicable
• Withdraw consent where processing is consent-based

To exercise these rights, email support@altus.fit. We may need to verify your identity before fulfilling a request.

Some browsers offer a Do-Not-Track (DNT) signal. We do not currently respond to DNT signals because no uniform industry standard has been adopted.

We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Contact us if you believe a child has provided us data.

Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, and Utah) may have additional rights under applicable privacy laws, such as the right to know categories of data collected, request deletion, and opt out of certain processing. Contact us for state-specific requests.

We may update this Privacy Policy to reflect changes in our practices, features, or legal requirements. The “Last updated” date at the top indicates the current version. Material changes may be communicated through the app or website where appropriate.

Questions or concerns about this policy? Email support@altus.fit.

To review, update, or delete your personal information — including Run tab plans, Location / GPS routes, and Wellness & Protocols logs — submit a request to support@altus.fit. We will respond within the timeframe required by applicable law.