← Back to Dashboard

Privacy Policy

Version 1.6Effective 10 October 2026
This Privacy Policy explains what personal data MetconIQ collects, how it is used, and the choices you have. It forms part of our Terms of Service.

1. Who We Are & Scope

MetconIQ Pte. Ltd. ("MetconIQ", "we", "us", or "our"), a company incorporated in Singapore (UEN 202636948M), operates the MetconIQ platform, mobile application, and related services (the "Service") and is the organisation responsible for the personal data described in this policy. This policy covers personal data we collect when you use the Service, whether as an individual athlete or as a member, coach, or owner of a gym on the platform. It also covers the details you give us through the chat assistant on our public website before you have an account (see sections 4 and 5).

2. Data We Collect

  • Account information — name, email address, date of birth, gender, country, and password (stored hashed)
  • Phone number — if you provide one to your gym, when enquiring about the Service, or when you opt in to WhatsApp alerts in Account Settings
  • IP address — used to derive approximate location for analytics, and recorded when you accept these terms or sign a gym waiver
  • Health & fitness data — workout scores, readiness check-ins, RPE, body weight, height, and injury information you choose to log; we treat this as sensitive data
  • Heart rate summary — only if you choose to add heart rate from your watch to a workout (see section 11)
  • Workout photos — only if you choose to take or pick a photo on Log Personal WOD. We send it to Anthropic to read the workout and fill in your log, then discard it; we do not store the photo
  • Payment data — processed by Stripe; we never store your full card details
  • Usage analytics — product events and session recordings via Amplitude. Recordings capture what is displayed on screen as you use the Service, which can include health and fitness data such as injuries, body weight and readiness check-ins
  • Push notification tokens — device tokens via Google Firebase, only if you enable push notifications
  • WhatsApp consent — the date you opted in to (or out of) WhatsApp alerts, only if you use that option
  • Communications — emails we send you and messages you exchange within the Service
  • How you found us — campaign tags in the link you followed, the website that referred you (its address only, never the page you were on) and the first page of our site you opened, recorded when you create an account to understand which channels work; not used for advertising and not shared

3. How We Use Data

  • Operating the Service — accounts, bookings, scoring, leaderboards, and gym administration
  • AI features — generating workout programmes and performance insights, and reading a workout photo you choose to scan; relevant training data and the photo are processed via Anthropic’s Claude API
  • Service improvement — aggregated, anonymised analytics; individual performance data is never sold to third parties
  • Communications — transactional emails and, where enabled, product notifications by push or WhatsApp

If you belong to a gym on the Service, that gym’s owner and coaches can see the training data you record while you are a member — including your class bookings and attendance, workout results other than those you mark private, readiness check-ins and training load — so they can run classes and plan your training. If you train on your own and belong to no gym, no gym’s staff can see your data. Heart rate you add from your watch is not shown to your gym or its staff (see section 11).

4. Sub-processors

We share data with the following providers only as needed to run the Service:

  • Amazon Web Services (AWS) — application hosting and databases
  • Stripe — payment processing
  • Anthropic — AI programme generation, insights, and reading workout photos
  • Amplitude — product analytics and session recordings
  • Google Firebase — push notifications
  • Google Places — business listings used to identify gyms we may contact about the Service
  • Meta (Facebook / Instagram / WhatsApp) — replies to messages sent to our Instagram account, and WhatsApp alerts if you opt in
  • Resend — transactional email delivery
  • Sentry — error monitoring

5. Retention & Deletion

We retain your data while your account is active. You can delete your account and personal data yourself at any time from Account Settings — see our account deletion page for step-by-step instructions and a full list of what is deleted and what is kept.

Your gym owner or coach can remove you from their gym, but they cannot delete your account. Only you can delete it, from Account Settings — see the Terms for the limited cases in which we may terminate an account. Removal from a gym does not delete your training history: results from gyms you have left stay visible to you.

Deletion takes effect immediately. Copies may persist in routine database backups for up to 7 days, after which they are overwritten. We keep records we are required to keep by law, such as payment and tax records. Signed liability waivers are retained indefinitely, including after you leave a gym or erase your records there, because they are necessary for the establishment, exercise or defence of legal claims.

If you use the chat assistant on our public website, we keep the name, email address and gym name you provide, together with the conversation, for 90 days so that we can follow up with you, after which they are deleted. This applies whether or not you go on to create an account.

6. Your Rights

In line with the Singapore Personal Data Protection Act (PDPA), you may request access to the personal data we hold about you, request correction of inaccurate data, and withdraw consent to further collection or use (which may limit your ability to use the Service). To exercise these rights, contact legal@metconiq.app.

You may also request a copy of your data in a portable format. You can download it yourself at any time from Account Settings; it includes any heart rate you have added to your results.

7. Cookies & Local Storage

We use browser local storage for authentication tokens and preferences, and analytics identifiers to recognise your device across sessions. We do not use third-party advertising cookies.

The signup-source details described in Section 2 are also held in local storage, on your device only, until you create an account.

8. Minimum Age

The Service is not intended for anyone under 18 years of age, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us personal data, contact legal@metconiq.app and we will delete it.

9. Anonymous Benchmark Data

With your consent, we add your workout results to an anonymous dataset used to show every athlete how they compare to others. A contribution holds no name, email, or link to your account — only broad groupings: an age range, a gender grouping, a country, how long you have trained, a weight range, and a fitness score.

Contributing is optional. You can turn “Anonymous benchmark data” on or off at any time in Account Settings. Turning it off deletes your contribution.

Because a contribution cannot be traced back to you, it is retained after your account is deleted and remains part of the community averages. If you want it removed, turn off anonymous benchmark data before deleting your account. We only display a comparison when a group is large enough that no individual can be singled out.

Erasing your records at a past gym does not remove your anonymous benchmark contribution. Those are separate — use the “Anonymous benchmark data” toggle in Account Settings.

10. Security

We protect your data with the following measures:

  • All traffic between your device and the Service is encrypted in transit using TLS 1.2 or higher
  • Passwords are stored hashed with bcrypt and are never stored or logged in plain text
  • Our database is not reachable from the public internet
  • The database holding your account and training data is encrypted at rest, including its backups
  • Service credentials are held in a managed secret store with restricted access

No system is perfectly secure. If you believe you have found a vulnerability, contact legal@metconiq.app and we will investigate.

11. Heart Rate from Your Watch

This section applies only if you choose to add heart rate from your watch to a result. It is optional, and the Service works the same without it.

What we collect: for a workout you confirm, a summary of that workout — average and maximum heart rate, minutes in each of five heart-rate zones, the maximum heart rate the zones were calculated against, the workout’s duration and start time, the name of the device or app it came from (for example “Apple Watch”), and the health store’s identifier for the workout, so the same workout is not attached twice. We collect it only for workouts you confirm. It is never a continuous recording: we do not keep a second-by-second heart-rate series.

Where it comes from: Apple Health or Health Connect on your phone. We read it only with your permission, and only to read — we do not write to your health store. We read it only when you open the “Add heart rate” card on a result; there is no background syncing. To work out the zones we use your date of birth: your maximum heart rate is taken as 220 minus your age.

What we use it for: showing it on your own results.

Who can see it: only you can see it. It is not shown to your gym, your coach, other athletes or any third party, and it does not appear on leaderboards. It is not used for AI insight unless you turn that on separately. It is not used for advertising or sale. It is not written to our logs or sent to our error-monitoring provider, and our analytics events record that you connected, added or removed heart rate but not the values. Heart-rate values are hidden in the session recordings described in section 2.

Where it is held: in our production database in Singapore (AWS region ap-southeast-1), with the rest of your account data.

How long we keep it: heart rate is removed when you remove it or delete your account, and we keep it until then. On the Free plan a solo log and its heart rate are removed after 30 days.

How to remove it: in Settings, choose Disconnect under heart rate from Apple Health or Health Connect, which deletes every heart-rate summary we hold for you, or remove it from a single result.

12. Changes & Contact

We may update this policy from time to time; material changes will be notified via the Service or email, and the Version and Effective date above will be updated.

MetconIQ Pte. Ltd.Privacy Enquiries: legal@metconiq.app
© 2026 MetconIQ Pte. Ltd. All rights reserved.