Privacy policy

Threk is made by Punctilious Permutations, LLC. This policy explains what the app stores, why, who else sees it, and how to get it back or get rid of it. It covers the Threk app and threk.fit.

The short version: your training data is yours, it is stored against your account and nobody else's, we do not sell it, and you can export or permanently delete all of it from inside the app without asking us.

What we store

• Account — your email address, and the sign-in method you used. We never store a password; sign-in is a one-time emailed code, a passkey, or Google.
• Training — your plan, the workouts you complete, sets, weights, reps, perceived effort, session notes, and the duration and distance of cardio.
• Location, when you turn GPS on for a workout — distance, elevation gain, pace, and a downsampled route of the session. Recording only happens during a workout you started, continues when the screen is locked so the distance stays honest, and stops when the workout ends.
• Health and lifestyle you choose to log — body weight, sleep, mood, meals, and the answers you gave when building your plan (age, training history, injuries or conditions you disclosed, equipment).
• Technical — ordinary server logs, and a small amount of data in your device's own storage so a workout survives a lost signal or a reload.

Health and location data are sensitive, and we treat them that way: every table is scoped to a single user and access is enforced in the data layer, not just the interface.

Why we store it

To do the thing you downloaded the app for: build and adjust your training plan, run your workouts, and show you honest patterns over time. We also use it to keep the service working and secure. We do not use it to advertise to you, and we do not profile you for anyone else.

Who else sees it

We do not sell your data and we do not share it for advertising. We use a small number of services to run Threk:

• Render — hosting and the database, in the United States.
• Resend — sends your sign-in codes. It sees your email address.
• Anthropic — when you use a feature that needs it (parsing a dictated meal, scoring an activity you invented), the text of that request is sent to Anthropic's API to process the response. It is not used to train their models. These features are optional and off unless enabled on your account.
• Strava — only if you connect it, and only to post workouts you choose to post. You can disconnect at any time.
• Open Food Facts and the USDA FoodData Central database — when you scan a barcode, the barcode number is sent to look up the nutrition label. Nothing about you goes with it.

We may also disclose data if the law requires it, or to protect the rights and safety of users — and we will tell you unless we are legally prevented from doing so.

Your data, your call

• Export — Settings gives you everything we hold: your account record, body weight, workout sessions, logged sets, and life log, as CSV or JSON.
• Delete — Settings also deletes your account permanently. It is a real deletion, not a flag: your rows are removed by database cascade, and it cannot be undone.
• Correct — almost everything is editable in the app. If something is not, email us.

Depending on where you live you may have further rights (access, portability, objection, or to withdraw consent). The two buttons above satisfy most of them immediately; for anything else, email dev@punctiliouspermutations.com and we will respond within 30 days.

How long we keep it

For as long as you have an account, because a training history is only useful over years. Delete your account and it goes. Backups roll off within 30 days. Server logs are kept briefly for debugging and abuse prevention.

Children

Threk is not for under-18s and we do not knowingly collect their data. If you believe a minor has an account, email us and we will delete it.

Security

Data is encrypted in transit and at rest. Access is scoped per user and enforced in the repository layer. No system is perfect; if we ever discover a breach affecting your data, we will tell you.

Changes

If this policy changes in a way that affects what we do with your data, we will say so in the app before the change takes effect — not quietly, and not only by moving the date at the top.