Privacy Policy

1. Introduction

This Privacy Policy explains how Pyre Fitness ("Pyre Fitness," "we," "us," or "our") collects, uses, shares, and protects information when you use the Pyre Fitness mobile application, pyrefitness.com, and related services (together, the "Service").

Pyre Fitness is operated by Pyre Fitness LLC, the developer and legal entity responsible for the Service. If you have questions about this policy or your data, contact us any time at support@pyrefitness.com.

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use Pyre Fitness.

2. Information we collect

We collect only what we need to run the Service. Depending on how you use Pyre Fitness, that may include:

Account information

• Your name, username, email address, Firebase user ID, and sign-in-provider identifiers. Pyre no longer asks for or stores a phone number in your account profile and does not use phone numbers for contact matching.
• During signup, a date of birth is evaluated on your device. We do not store the full birth date, but we do store your age in whole years at signup, a 13-or-older marker, and the verification time and method so age-appropriate safeguards can be applied.
• Profile details you add, such as a profile photo, title, or display preferences.

Health & fitness data

• Workout and run data — exercises, sets, reps, logged weights, distance, pace, duration, elevation, and workout history.
• Training and body profile — goals, equipment, schedule, sex selection, height, body weight and measurements, calorie and macro targets, and meal logs you enter.
• Progression data — XP, levels, attributes (STR, AGI, END), streaks, quests, and other in-game stats derived from your activity.
• Health integrations — if you grant permission, the App reads steps, walking and running distance, active energy, and, on iOS, heart rate and completed workout summaries from Apple Health or Android Health Connect. Eligible Apple Health workouts and runs can award XP and update attributes, lifetime totals, quests, and workout history; Pyre stores the workout source, activity type, times, duration, distance, calories, and derived rewards needed to prevent duplicate credit and maintain progression. Pyre can also save completed runs and workouts to Apple Health.

Garmin watch companion

• If you choose a paired Garmin watch, Garmin Connect handles device authorization and Pyre exchanges the current run or workout state, live heart-rate samples, set actions, rest-timer actions, and run-finish requests directly between your iPhone and watch. Pyre and the watch may temporarily retain the latest mirrored state and pending actions so they can recover from a disconnect.
• During an active mirrored session, the watch may use its heart-rate and GPS sensors and save a standard FIT activity; that activity can sync to your Garmin account under your Garmin Connect settings. Pyre does not use the Garmin Connect cloud Activity API to import your Garmin account history in this version.

Location data

• If you grant permission, Pyre uses precise GPS location during an active run, including while that run continues with the screen locked or the App in the background, so it can map route, distance, and pace.
• Once permission has been granted, Pyre may also request your current or last-known location when the App opens or resumes and when you use trail discovery, route generation, trail challenges, directions, or trail-photo verification. Coordinates may be sent to our backend and mapping or trail-data providers to return nearby results.
• Outside an active run, Pyre does not continuously track location in the background.

Camera & photos

• Photos you choose for avatars, shared workout and run images, community trails, and AI meal analysis, plus camera input used for those features and food barcodes.
• Submitted images may be automatically screened for safety. Meal-scan image bytes are sent to Google Gemini for analysis but are not saved to your Pyre account or Firebase Storage after the result is returned.

Contacts & social graph

• Contact matching is optional. When you choose it, Pyre reads contact details on your device and sends up to 120 unique normalized email addresses per request to a protected Pyre backend matching service. Those email addresses are used transiently to find existing Pyre users and are not stored as an uploaded contact list.
• Contact names and phone numbers stay on your device for the invite interface. Pyre never sends invitations for you; tapping Invite opens your Messages app and you decide whether to send.

User content

• Feed posts, share images, likes, comments, direct messages, challenge messages and participation, community trails and reviews, reports, and other content you submit.
• We process reports, blocks, and automated or human moderation results to enforce our rules and protect users.

AI prompts & processing data

• Prompts, meal images, relevant fitness-profile inputs, and workout or trail context sent to AI features such as Pyro, meal scanning, training-plan generation, and content or image safety review. These inputs are processed by Google Gemini to generate the requested output or moderation result.

Purchases & subscription state

• Subscription and purchase status processed through the Apple App Store, Google Play, and our subscription provider RevenueCat. We do not receive or store your full payment card details — those are handled by Apple and Google.

Diagnostics & crash data

• In release builds, diagnostic, performance, log, and crash data collected through Firebase Crashlytics to help us find and fix bugs. This data is used for reliability and support, not advertising.

Device & network information

• Operating system, device model, App version, an OS vendor/device identifier that is not an advertising ID, IP address, App Check signals, notification token, and related security logs.
• To protect accounts and prevent abuse and ban evasion, Pyre keeps a per-account device record when you sign in or open the App — the device model, OS version, vendor/device identifier, the IP address our servers received, and first-seen and last-seen times — along with security events (for example, a sign-in from a new device) and short-lived per-action rate-limit counters.
• We use these for service delivery, support, security, fraud prevention, abuse investigations, and reliability — never for advertising.

Usage analytics

• In release builds, Pyre collects first-party product-analytics events through Firebase Analytics so we can understand which features are used and improve the Service — for example, which screens are opened; when a run, workout, or campaign mission starts or completes (recorded as events only); app version; device model; and operating system.
• Analytics events never include your workout metrics, health data, GPS coordinates or routes, messages, photos, or contact details. Analytics identifiers are app-scoped and are not advertising IDs. Analytics data is never used for advertising, never used to track you across other companies' apps or websites, and never sold.
• You can turn Usage Analytics off at any time in Settings → Privacy. Product analytics is disabled entirely for users under 18.

Website & communications

• Firebase Hosting and normal internet infrastructure receive technical request data such as IP address, browser, requested page, and time.
• If you join the launch list, your email address and any optional name or fitness goal you submit are processed by Formspree and retained so we can send the updates you requested.
• The website loads fonts and code from Google Fonts and jsDelivr, which receive ordinary request information such as your IP address and browser headers.

3. How we use your information

We use the information above to:

• Provide and operate core features — the Lair, quests, campaigns, workouts, run tracking, trails, food tracking, and squads.
• Calculate XP, levels, streaks, attributes, leaderboards, and other progression.
• Map your runs and surface nearby trails and routes.
• Power AI features, including the Pyro assistant and AI meal scanning.
• Manage your account, subscriptions, and entitlements.
• Keep the Service secure, prevent fraud and abuse, and debug problems.
• Send you service messages and, where permitted, product updates you can opt out of.
• Comply with legal obligations.

Automatic activity summaries

When you complete a workout or run in the App, Pyre automatically posts a non-sensitive summary to your feed — for example the workout title, total volume, personal-record count, and duration, or the run distance, pace, and time. The summary also appears in your allies' Stories for about 24 hours and as a short recent-activity line (activity type and time) on your in-App profile. Automatic summaries never include your route, precise location, community-trail identity, heart rate, or photos. If a summary cannot be posted because of a temporary network problem, your device retries it for up to seven days and then discards it.

Optional route and heart-rate sharing

Pyre does not post your completed-run route, community-trail identity, or average heart rate to the social feed merely because you recorded a run. Only if you explicitly use a feed/share action can the resulting post or image include the full route, trail name, and average heart rate. Feed posts are intended for accepted, unblocked friends in the same age tier under the feed's access controls; community content may have broader in-App visibility. A route may still be processed privately for map display, trail or challenge validation, safety, and rewards.

Social visibility and moderation

Accepted, unblocked friends in the same age tier may see your feed posts — including automatic activity summaries — and comments. Community trails, trail photos, reviews, and other community content may be available more broadly within Pyre. Direct messages are intended for conversation participants. Challenge participant lists and chat are intended for the creator and members. Authorized administrators or moderators may access content for support, safety, and enforcement. Blocking prevents new direct interactions covered by the block controls, but it does not automatically erase content or messages that already exist.

Shared media links: Avatars, run or workout share images, community-trail images, and some chat images are delivered through public or tokenized file URLs so they can render in the App or in shares. Anyone who obtains a valid file URL may be able to view or copy that image even if they are not in the original in-App audience, until the file is deleted or its access token is revoked. Do not include information you do not want redistributed.

Automated systems and authorized reviewers may examine submitted content, account signals, and reports to detect abuse, enforce the Terms, respond to safety issues, and comply with law.

We do not use your data — including health, fitness, location, photos, or contacts — for cross-app tracking or for advertising.

4. Health & fitness data (HealthKit / Health Connect)

If you choose to connect Pyre Fitness to Apple Health (HealthKit) or Android Health Connect, the App reads fitness data to keep your progress in sync. This includes steps, walking and running distance, and active energy. Heart rate and completed workout summaries are read from Apple Health on iOS only — for example, from an Apple Watch during a run — and heart rate can be used to show an average for that activity. Eligible Apple Health workouts and runs can award XP and update attributes, lifetime totals, quests, and workout history; Pyre stores the workout source, activity type, times, duration, distance, calories, and derived rewards needed to prevent duplicate credit and maintain progression. Pyre can also save completed runs and workouts to Apple Health.

If you explicitly share a run or workout, an average heart-rate value or share image containing it may be stored with that post. Pyre does not publish that value merely because you connected Apple Health or recorded an activity.

You control this connection and can revoke it at any time in your device's Health settings.

5. We do not sell your data or track you across apps

We do not rent or trade your personal information, and we do not track you across other companies' apps or websites for advertising. We use information to provide and secure the Service, perform moderation, communicate with you when requested, and meet legal obligations. We disclose it only to the service providers described below, at your direction, when required by law, or to protect the rights, safety, and security of users and the Service.

6. Service providers

We rely on service providers to operate Pyre Fitness. They receive information only as needed to deliver their services, at your direction, or for the legal and safety purposes described in this policy:

• Google Firebase, Crashlytics, and Firebase Analytics — authentication, App Check, database, file storage, Cloud Functions, push messaging, crash reports, diagnostics, and first-party product analytics.
• Google Gemini — Pyro, meal and workout analysis, training-plan support, trail content, and automated text or image safety review.
• RevenueCat — subscription and purchase management.
• Map and trail services — Mapbox, Google Maps and Places, OpenStreetMap and Overpass, openrouteservice, Mapillary, Wikimedia, and U.S. National Park Service data sources for maps, routing, geocoding, trail discovery, elevation, and trail imagery.
• Open Food Facts — barcode and food-search lookups.
• Apple and Google platform services — App Store and Google Play distribution, store purchases, sign-in, and optional HealthKit or Health Connect integrations.
• Garmin — paired-watch authorization through Garmin Connect, direct iPhone/watch communication, watch-side activity recording, and Garmin Connect activity sync under your Garmin settings.
• Website providers — Firebase Hosting, Formspree, Google Fonts, and jsDelivr.

We do not give service providers permission to use HealthKit, Health Connect, or Garmin wearable data for advertising, marketing, or their own unrelated purposes.

This list may change as the Service evolves; we will update this policy to reflect material changes.

7. Data retention

We generally keep account data and user content while your account is active or as needed to provide the Service. Contact-match inputs are handled transiently rather than stored as a contact list. Meal-scan image bytes are not saved to your Pyre account after analysis. Launch-list submissions are retained until you unsubscribe, request deletion, or the list is no longer needed.

Specific retention periods:

• Device and security records (per-device sign-in records, IP addresses, security events) — up to 12 months after the device was last seen, then deleted automatically.
• Per-action rate-limit counters — up to 30 days.
• User-level analytics data — up to 14 months; aggregated statistics that identify no one may be kept longer.
• Crash and diagnostic reports — about 90 days.
• Reports, moderation, and enforcement records — up to 5 years, or longer where reasonably necessary for legal, safety, or compliance obligations — including child-safety reporting laws. Records needed to enforce an active permanent ban, including device signals associated with ban evasion, are kept for as long as the ban remains in effect.
• Stories — about 24 hours. Unsent share retries — up to 7 days.

Transaction and accounting records may be retained as required by store or tax obligations. When information is no longer needed, we delete or de-identify it.

8. Account & data deletion

You can delete your Pyre Fitness account and associated data at any time:

• In the App: go to Settings → scroll to the Account section → Delete Account.
• By email: contact support@pyrefitness.com with the subject line "Account Deletion Request" and include the email or username tied to your account.

Deletion removes or de-identifies the account and associated data from active Pyre systems, except limited records that must be retained for legal, transaction, security, fraud-prevention, or safety purposes.

For a full walkthrough, see our Account Deletion page. Note that deleting your account does not automatically cancel an active Apple App Store or Google Play subscription — you must cancel that separately through Apple or Google (see section 10).

9. Security

We use industry-standard safeguards — including encryption in transit, access controls, and trusted infrastructure providers — to protect your information. No method of transmission or storage is ever completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

Where your device supports it, we use Face ID, Touch ID, or your device passcode to confirm sensitive actions such as deleting your account. This authentication is performed entirely by your device's operating system — Pyre never accesses, receives, or stores your biometric data.

If we ever become aware of a data breach affecting your information, we will notify you and the appropriate authorities as required by applicable law.

10. Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Request a copy of your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email support@pyrefitness.com. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.

Subscriptions

Subscriptions purchased through the App are billed and managed by Apple or Google. To cancel a subscription, use your Apple App Store or Google Play account's subscription settings. Deleting your Pyre Fitness account does not cancel a store subscription.

11. Permission controls

Sensitive features are opt-in and stay under your control. You can grant or revoke each of these permissions at any time in your device settings or within the App:

• Location — active-run tracking (including an active background run), nearby trail and challenge discovery, routing, directions, and trail-photo verification. If permission already exists, the App may prefetch nearby trail boards when it opens or resumes.
• Camera & Photos — profile, meal, workout, run, and community-trail images, plus food barcodes.
• Contacts — optional friend matching. Up to 120 normalized contact email addresses per request are sent transiently to Pyre's protected matching service. Contact names and phone numbers stay on your device for the invite interface. Pyre does not retain an uploaded contact list or send invitations for you.
• Health data — optional HealthKit (iOS) / Health Connect (Android) sync of steps, walking and running distance, and active energy. Heart rate and completed workout summaries are read from Apple Health on iOS only. Pyre can save completed runs and workouts to Apple Health. An average heart-rate value appears in social content only if you explicitly share content containing it.
• Garmin watch — optional watch mirroring. You can change or remove an authorized Garmin watch at any time from Settings → Watches → Garmin Watch in the App and in Garmin Connect.
• Notifications — reminders, streak alerts, and squad activity.
• Usage analytics — you can turn Usage Analytics off at any time in Settings → Privacy in the App.

If you revoke a permission or remove a watch, the related feature may stop working, but the rest of the App will continue to function. Revoking a permission or removing a watch does not remove data already submitted or an activity already synced to Garmin Connect — use the relevant deletion control or contact us for that.

12. Children's privacy & teen data minimisation

Pyre Fitness is for users age 13 and older and is not directed to children under 13. Signup includes an age gate. The full birth date entered at signup is not stored, but Pyre stores age in whole years at signup and age-verification fields for safety controls.

For users under 18, Pyre applies additional data minimisation:

• No product analytics. Usage-analytics collection is disabled entirely for under-18 accounts.
• No advertising, for anyone. Pyre shows no third-party ads and performs no cross-app ad tracking, so minors are never profiled for advertising.
• Age-tier social feeds. Feed posts and automatic activity summaries are shared only with accepted, unblocked friends in the same age tier.
• Purpose-limited collection. Data collected from minors is limited to what the Service needs to function and to keep users safe and secure.

Where the operating system provides a declared age range or parental-control signal (for example, Apple's Declared Age Range), Pyre may use it to apply these safeguards. Users under the age of majority should use Pyre with a parent or guardian's involvement where required.

If you believe a child under 13 has provided us with personal information, contact support@pyrefitness.com and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy as Pyre Fitness evolves or as the law requires. When we make material changes, we will update the "Last updated" date above and the App will ask you to review and accept the updated documents before continuing. Your continued use of Pyre Fitness after changes take effect means you accept the updated policy.

14. Contact us

Questions, requests, or concerns about your privacy? We are happy to help.

• Email: support@pyrefitness.com
• Operated by: Pyre Fitness LLC
• Support: pyrefitness.com/support

Email a Privacy Request