Privacy Policy
Last updated: September 1, 2026
This Policy explains what Magis Fitness LLC collects when you use Magis, why we collect it, who we share it with, and the choices you have. Magis collects health-related information, so this Policy errs toward telling you more rather than less.
1. Who we are
Magis is operated by Magis Fitness LLC, a Wyoming limited liability company, which is the controller of the personal information described here. You can reach us at privacy@magisfitness.com, or by post at Magis Fitness LLC, 30 N Gould St, Suite # 68072, Sheridan, WY 82801.
2. A note on health information
To build training programs we ask about your body and your health, including a Physical Activity Readiness Questionnaire, any injuries or limitations, and biometrics such as height, weight and date of birth. We treat this as sensitive. We collect it only to operate the Service, we describe below exactly how it is used and who sees it, and we ask for your consent where the law requires it. Magis is a fitness product. It is not a medical provider, and the information you give us is not used to diagnose, treat or manage any medical condition.
3. Information we collect
You give us most of it directly. • Account and identity. Your email address, your name, and a password, which our authentication provider stores only as a secure hash. Coaches get a shareable coach code; clients may enter one or use an invitation link. • Profile and biometrics. Date of birth, gender, height, weight, years of training experience, preferred units, time zone, and an optional profile picture. • Health screening and goals. Your PAR-Q answers, covering heart conditions, chest pain, dizziness or loss of balance, bone or joint problems affected by exercise, blood-pressure or heart medication, and any other reason you should not exercise, together with free-text notes. Also your training goals, any injuries or limitations you describe, available equipment, preferred training days per week, and session length. • Workout and performance data. The workouts you complete, the sets, repetitions, weights and perceived exertion you log, cardio details such as duration, distance and heart rate, session start and completion times, exercises you swap, skip or pair together, personal records, body measurements you choose to record, and free-text notes you or your coach add. • Days you mark as time away. You can mark dates when you are unavailable, so a holiday or an illness does not read as missed training. We store the dates only. We do not ask why, and there is no field for a reason. • Communications and feedback. If you contact support or submit in-app feedback we keep the content of your message, the category you chose, and basic context such as the page you were on. • Legal acceptances. When you accept our participation agreement we record the acceptance, the version, your role, and the date and time, as a permanent audit record. • Waitlist entries. If you join the waitlist on our public site, before you have any account at all, we collect your name, your email address, whether you are signing up as a lifter or a coach, and the single goal or roster-size answer that follows. We use it to contact you about early access and for nothing else. • Coaching insights generated about you. Magis generates a short written coaching read for you, and stores it along with a snapshot of the figures it was written from, such as recent volume, trends and personal records. See Section 5. Some information we collect automatically. • Device and usage information. Our infrastructure providers receive technical information such as your IP address, browser and device type, and basic performance data. • Cookies and local storage. A small number, described in Section 8. • Diagnostic logs. If the app hits an error we may log technical details, such as the error message, the component involved and the page address, to help us fix it. And some comes from other people. If you are a Coached Client, your coach creates or edits your programs and writes notes associated with your account. If you are a Coach, your connected clients' profile, intake and performance data is made available to you so you can program for them.
4. How we use your information
We use your information to create and manage your account and sign you in; to generate, schedule and adjust your training programs, including through AI as described in Section 5; to display your workouts, history, progress, streaks, records and analytics; to enable the coach and client relationship where you have one; to take exercise-readiness considerations into account and work around injuries and limitations you report; to provide support and respond to your feedback; to keep the Service secure and reliable and to detect abuse; to comply with our legal obligations and maintain records of waiver acceptance; and to send you messages about the Service. We do not sell your personal information, and we do not use your health information to serve advertising.
5. How we use AI, and what we send to our AI provider
Personalized program generation is a core feature of Magis. To create and progress your programs we send relevant parts of your information to our AI provider, Anthropic, through the Claude API. What we send. Depending on the request this can include your name, your age derived from your date of birth, gender, height, weight, training experience, your PAR-Q answers and notes, your goals, your injuries and limitations, your equipment and availability, and, when generating a follow-up program, a summary of your prior training and performance such as strength trends, adherence, recurring pain or injury flags you logged, bodyweight trend and cardio data. If you work with a coach, it also includes what your coach has written about your training. That covers the structured brief they maintain for you, such as your split, equipment constraints and exercise preferences, their free-text instructions for a given program, and any note they have flagged as affecting your next block. Coaches often use those fields to record injuries and constraints in their own words. What we store back. Magis also generates a short coaching read for you, shown on your home and progress screens. The text the model produces, and a snapshot of the figures it was written from, are stored on your account so the same read can be shown again without regenerating it. This is a cache rather than a history: it is overwritten each time the read is refreshed, so only the most recent one exists. How it is handled. Data is sent to Anthropic over an encrypted connection through its API. Under Anthropic's commercial API terms, inputs and outputs submitted through the API are not used to train its models, and retention is limited. We log technical metadata about each generation, such as timing and token counts, for performance monitoring, and that metadata is not used to identify you to anyone else. No automated decisions with legal effect. AI is used to draft and adjust fitness programming. For Coached Clients a coach can review and edit programs. The AI does not make decisions that produce legal or similarly significant effects about you.
6. How we share your information
We share personal information only as described here. With your coach or your clients. If you are a Coached Client, the coach you are connected to can see your profile and biometrics, your intake and PAR-Q answers, your goals and reported injuries, your programs, your logged workouts and performance, your records, your body measurements and your notes. If you are a Coach, your connected clients' corresponding information is available to you for coaching. Access is limited to the specific coach and client in a relationship and is enforced by database-level access controls. With service providers. We share information with the vendors listed in Section 7, who may use it only to provide services to us. For legal reasons. We may disclose information where required by law, regulation, legal process or governmental request, or where we believe it necessary to protect the rights, property or safety of Magis, our users or others. In a business transfer. If Magis is involved in a merger, acquisition, financing or sale of assets, your information may transfer as part of that transaction. We will tell you about any change in ownership or use of your personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
7. Service providers
We rely on these providers to run Magis. • Supabase. Database, authentication and file storage, holding your account, profile, health and intake, workout and performance data. Hosted in the United States. • Anthropic. AI program generation through the Claude API, receiving the information described in Section 5. United States. • Vercel. Application hosting and delivery, receiving technical, device and usage data and request logs. United States and global edge. We do not currently use a payment processor, a third-party email marketing provider, or a third-party analytics provider. If that changes, this section and Section 8 will change with it.
8. Cookies and local storage
We use a limited set of cookies and browser storage. • Authentication cookies, set by our authentication provider to keep you signed in and secure your session. These are strictly necessary for Magis to work. • Local storage, holding a small marker recording which version of our legal agreement you have accepted, so we do not prompt you unnecessarily. • Offline workout storage, using IndexedDB, so you can log a workout without a connection. Your in-progress session is held in your browser and synced to your account when you reconnect. We do not set analytics or advertising cookies, and we do not use a third-party analytics provider.
9. Communications
We send messages needed to operate the Service, such as account confirmations, password resets, coach invitations and important notices. If you joined our waitlist, we will email you about early access. You can ask us to stop at any time by replying or by writing to the address in Section 1. We do not currently send marketing newsletters or product-update campaigns.
10. How long we keep your information
We keep your personal information for as long as your account is active and as long as we need it to provide the Service. The coaching read described in Section 5 is a cache and is overwritten each time it refreshes, so we hold only the most recent one. When you delete your account we delete or de-identify your personal information, except where we must keep it, such as the record of which version of our agreement you accepted, which we retain as a legal record, and anything needed to comply with legal obligations, resolve disputes or enforce our agreements.
11. How we protect your information
We use technical and organizational measures to protect your information, including encryption in transit and at rest through our infrastructure provider, row-level access controls that restrict each user to their own data and limit a coach to their connected clients, and secure password hashing. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Your privacy rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent you have given. To exercise any of these, write to privacy@magisfitness.com. We will verify your request and respond within the time applicable law requires. You will not be treated differently for exercising your rights.
13. United States, including California
We do not sell your personal information and we do not share it for cross-context behavioral advertising. California residents have the rights described in Section 12 under the CCPA and CPRA, including the right to know, delete and correct, and the right to limit the use of sensitive personal information. We use sensitive information, such as health information, only to provide the Service you asked for, and not for purposes that would require a limit option.
14. Europe, the United Kingdom and Switzerland
Where the GDPR or UK GDPR applies, our legal bases for processing are: performance of our contract with you, to provide the Service; your consent, for health information and optional features; our legitimate interests, to keep the Service secure and improve it; and compliance with legal obligations. You have the right to complain to your local data protection authority.
15. International data transfers
We are based in the United States and our providers process data in the United States and other countries. If you use Magis from outside the United States, your information will be transferred to, stored and processed in the United States and wherever our providers operate.
16. Children
Magis is for adults. You must be at least 18 to create an account or use the Service, and we apply an age check during onboarding. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.
17. Changes to this Policy
We may update this Policy as Magis develops. When we do we will change the date at the top of this page. If a change is material we will take reasonable steps to tell you.