Skip to content

Privacy Policy

Effective October 7, 2026

MNTM ("MNTM", "we", "us") is operated by MNTM, Inc., a Delaware corporation, 14530 Byron Hwy Spc 21, Byron, CA 94514. This policy explains what we collect when you use the MNTM website and app, why, who can see it, and what you can do about it. Questions: support@mntm.fit.

1. What we collect

Account. Your email address, the name you enter, an optional username, an optional profile photo, and the sign-in method you use (email and password, Google, or — in the iOS app, when it is released — Apple). If you sign in with Apple and choose Hide My Email, we receive Apple's private relay address instead of your real one.

Training data you record. Workouts, sets, reps, loads, rest, notes, personal records, training maxes, programs you build or follow, and the schedule you train on.

Body and readiness data you choose to record. Bodyweight and body measurements, body-composition scans you enter, readiness check-ins, and progress photos you upload. You never have to record any of this to use MNTM.

Coaching data. If you are a coach: your client roster, the clients you create and manage on their behalf, notes about clients, invitations you send, enquiries from your public coach page, and messages between you and your athletes. If you are an athlete with a coach: the messages, program assignments and comments that pass between you.

Preferences and settings. Units, appearance, notification choices, training preferences, and anything else you set in Settings.

Technical data. The minimum needed to run the service: your session token while signed in, and standard server logs (IP address, browser or device type, time) kept for security and to keep the service working. We do not use analytics or advertising SDKs, and we do not track you across other apps or websites.

What we do not collect. We do not read data from wearables, HealthKit or any fitness device. We do not use your device's location. We do not sell personal data.

2. How we use it

To run the service: to sign you in, store and show your training, run your coaching relationships, deliver the features you use, and keep the service secure. To support you when you write to us. Nothing else — no advertising, no profiling for marketing, no sale or rental of data.

3. Who processes your data

We use a small number of service providers, each of which processes data only to provide the service to us:

  • Supabase — database, file storage and authentication. All account and training data lives here.
  • Cloudflare — hosting: the website and its server code run on Cloudflare's network.
  • Resend — transactional email only: the sign-up confirmation and password-reset messages.
  • Google and Apple — only when you choose to sign in with them; they tell us who you are, we do not share your training data with them.
  • An AI model provider — only if Ask MNTM, the in-app assistant, is turned on and you use it. It is not available today. When it is, the relevant parts of your training history are sent to the model together with your question, and nothing is sent unless you ask. The assistant is switched off; no request is sent to any AI provider.
  • Google Calendar, Microsoft Outlook and private Google Sheets — these connections are switched off at the moment and no such data is processed. If they return, they will be offered only to coaches who choose to connect one; access tokens would be stored encrypted and used solely to sync your calendar or read the sheet you chose, and disconnecting would revoke the token.

We do not use any other third party to process personal data.

4. Who can see your data

Your data is visible to you. A coach sees an athlete's data only after the athlete accepts that coach's invitation, or a share is granted, and only for as long as the relationship is active; an athlete can end it at any time from their settings. Coaches see the clients they created and manage. Access rules are enforced on the server, not only in the interface. Your public coach page, if you are a coach, shows only what you put on it.

5. Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time from Settings → Account → Delete account. Deletion removes your profile, your training and body data, your programs, messages and preferences, and — if you are a coach — the clients you created and manage on their behalf who have no account of their own. Athletes who have their own accounts keep their data when their coach leaves. Records that reference you as an actor in other people's data (for example, that you assigned a program) are anonymised rather than deleted. When paid plans are introduced, we will also keep a record of subscription and billing events (which plan was started, changed or cancelled, when, and by which payment provider) for as long as tax, accounting and payment-dispute rules require; when your account is deleted, those records are stripped of your identity and of the payment provider's original notification, so they can no longer be linked to you. Database backups are kept for 7 days and then purged. Uploaded files are not held in backups, so a deleted file is gone at once.

6. Your rights and controls

You can view and change your profile and settings at any time. You can export a complete copy of your data as a JSON file from Settings → Account → Export my data, free, whenever you like. You can delete your account as described above. You can revoke a coach's access from your settings. If you are in a jurisdiction that grants additional rights — including access, correction, portability, restriction and objection under the GDPR, or the rights granted to California residents under the CCPA/CPRA — you can exercise them through the controls above or by writing to support@mntm.fit. We do not sell or share personal information for cross-context behavioural advertising.

7. Children

MNTM is not directed at children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal data from anyone under 13; if you believe a child has created an account, contact support@mntm.fit and we will delete it.

8. Security

Data is encrypted in transit and at rest by our hosting provider. Access to your data is controlled per user by database-level rules. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

9. International transfers

Our providers store data in United States (Oregon) — database and files; the website runs on Cloudflare's network. If you use MNTM from elsewhere, your data is transferred to and processed there.

10. Changes

We will post changes here with a new effective date. Material changes will be announced in the app before they take effect.

11. Contact

MNTM, Inc., a Delaware corporation, 14530 Byron Hwy Spc 21, Byron, CA 94514. support@mntm.fit.