Privacy Policy
Mizar is a workout tracker with an AI coach called Alcor. This policy explains what we store, why, who we share it with, and the control you have over it. We keep it plain.
Who we are
Mizar is built and operated by Albert Carmona. If you have any question about your data or this policy, email support@mizar.fit.
What we store on your account
When you use Mizar, we store the information tied to your account so it can sync across your devices:
- Your email address, a hashed password, and (if you set one) a two-factor secret.
- Your training data: workout logs, programs, notes, your Playbook, your pain log, and body readings.
- Photos you add: profile picture, workout selfies, and custom exercise images.
- Apple Health data you choose to sync (see below).
This is stored on our own server, encrypted at rest. It is not stored in iCloud. We do not run any advertising or analytics trackers, and we do not sell your data or share it with data brokers.
Apple Health
If you connect Apple Health, Mizar reads data such as your Apple Watch workouts, heart rate, calories, distance, steps, and sleep. We use it only to show your health data alongside your training and to give your weekly review real recovery context. Apple Health data is read-only, is never used for advertising or marketing, and is never sold or shared with data brokers. It is shared with the AI coach only if you turn that on yourself (see below). You can disconnect Health at any time in the iOS Settings app.
AI features (Alcor)
When you use an Alcor feature, Mizar sends the data needed for that request to Anthropic, the company behind the Claude AI model, to generate your answer. Depending on the feature, that can include your profile (name, age, height, weight, training goal), your Playbook notes, summaries of your workout history and session notes, your body readings, your pain log, and your chat messages.
Apple Health data is only included in AI requests if you turn it on in Settings > AI features. The first time you use an Alcor feature, Mizar shows a consent screen and asks you to allow this before anything is sent. You can withdraw consent at any time in Settings > AI features. Anthropic processes the data to provide the answer. Alcor gives training guidance, not medical advice, and your data is never used for advertising.
ChatGPT app
You can connect Mizar to ChatGPT. You sign in on a Mizar page, and from then on ChatGPT can, when you ask it to:
- Read your programs, logged lifts and workouts, personal records, weekly sets per muscle, the body weight readings you logged in Mizar, and the exercise library.
- Change your programs: create a program, edit one (exercises, sets, rest, days, name), and undo its own last change. It cannot delete or archive a program or change your logged workouts.
ChatGPT never receives your Apple Health data (Watch workouts, sleep, steps, Apple Health weigh-ins), body composition, pain log, photos, nutrition or your password. We use this access only to answer your questions and build or edit your program when you ask. OpenAI receives what you ask ChatGPT to read, under OpenAI's own privacy policy; Mizar sends nothing to OpenAI on its own and does not see your ChatGPT conversations.
Sign-in tokens expire after 1 hour and renew for up to 30 days while you use the app. The record of ChatGPT's program changes, kept so a change can be undone, is deleted after 30 days. Disconnect Mizar in ChatGPT's settings at any time. Changing your Mizar password or two-factor setting also disconnects it, and deleting your account deletes all of it.
Other services we use
- Resend sends account emails such as verification and password resets.
- HEVY and Craft are only involved if you choose to connect them. You add your own keys, and you can remove them in Settings at any time.
How long we keep your data
We keep your data for as long as your account is active. Server backups rotate on a schedule, so deleted data can persist in encrypted backups for up to about five weeks before it ages out. Results from AI requests are kept only briefly (up to a few hours) to deliver your answer. We do no analytics or ad tracking of any kind.
Deleting your account
You can delete your account from inside the app, in Settings > Account. When you confirm:
- Your account and all of your data are permanently deleted right away, and you are signed out.
- This is immediate and cannot be undone. Your email and password stop working at once, and there is no way to restore the account.
- Copies in encrypted backups age out on the backup rotation (up to about five weeks) and are not restored.
Your controls
- Export everything in Settings > Import & Export.
- Reset all of your data, or delete your account, in Settings.
- Turn AI data sharing on or off, and include or exclude Apple Health, in Settings > AI features.
- Disconnect Apple Health from the iOS Settings app.
- Disconnect the ChatGPT app in ChatGPT's settings, or by changing your Mizar password.
Children
Mizar is not directed at children under 13, and we do not knowingly collect their data.
Changes to this policy
If we change this policy we will update the effective date at the top. Material changes will be reflected here before they take effect.