Privacy Policy

Power Mode On, by Happy Pixel Company LLC. Last updated: 2026-10-21.

The short version

There is no advertising from anyone else in this app, no third-party analytics tools, and no tracking in the app. We may make two studies of your data, and each happens only if you agree to it: disc golf rating research, and counts of favorite sports and activities, which are made only for adults who tick a separate box and are described in the table below, in the row on favorite sports and activities. Your data is not sold or shared with data brokers. The one thing we may send you is our own news, by email (or by text, once that is available), and only if you tick a separate, optional box on our race website. You can stop it at any time.
When the app crashes or hits an error it sends a diagnostic report so we can fix it: what went wrong and where in the code. No name, no account, no screenshot, and none of your food, health, or location data.
If you switch on motion capture on your Apple Watch, recordings of your wrist movement during workouts are uploaded to teach the app to recognise lifts. They are sent with no name and no email attached, and what links a recording to your account is kept for no more than 23 hours - the section on motion recordings below says exactly what remains. It is off unless you turn it on.
Your GPS routes from outdoor walks and runs stay on your phone. Power Mode On Racing is the one exception: during a race you join, your position on the course, your progress and your timing puck crossing times go to our servers and are shown to the other racers and that race's watchers, for that race only. Racing is only for people 18 or older.
In a race you have joined, phones can also measure the distance to the other racers' phones, using random race-only codes that are not your account or your name. The distance readings are sent to our server with your crossing times, so that a race time worked out from a nearby runner can be checked. No other racer, watcher or organizer can see them, and they are deleted thirty days after the race stops accepting crossings. You can turn this off in the race panel, or leave the race.
Social and Community are for adults 18 or older and are off until you join. What you post, comment, message or upload there is stored on our servers and shown only to the audience you choose: your approved followers, a group, or the person you are messaging. Location data is removed from photos. You can report and block, and deleting your account removes what you posted. The section on Social and Community below says exactly what is kept.
When you photograph a meal, a copy of the meal photo is uploaded to your account. The photo is deleted from your phone and from our servers after 7 days.
Watcher accounts for our race website, powermodeonracing.com, use Apple or Google sign-in only, and watchers say they are 18 or older. What we keep about a watcher lasts as long as the account, and the account can be deleted at powermodeonracing.com/delete-account. The section on watcher accounts below says exactly what is kept.
You can delete your account and what is attached to it at any time, from inside the app or on our race website. The few things that can outlast it are described below.

What we store on our servers

All of it is tied to your account and is removed when you delete that account, with five exceptions. Apple Watch motion recordings are a partial exception, described in their own section below. Golf and disc golf rounds stay for the other players in them, no longer linked to you, as their row below explains. Some disc golf club event, bag tag, social and course guardian history stays with the club, event or course, as their rows below explain. Reports other people made about you in Social and Community, and a record of moderation decisions with no content in it, are kept, as their row below explains. The do-not-contact record, described in the section on watcher accounts, is kept on purpose, so that we never send marketing to someone who said no.

What	Why, and how long it is kept
Email address, display name, and the account identifier every other row is filed under	To sign you in with Apple or Google. Password and email-code sign-in are disabled
Training goal, experience level, available equipment	To generate your workouts
Injuries and limitations you tell us about	To avoid prescribing movements that would hurt you
Height and weight	For bodyweight-relative targets, such as your water goal
Your answers to the onboarding wellness questions	So the plan the app generates reflects them. Kept until you delete your account
Workouts, sets, and your edit history	To show your training log and progress
Tennis and pickleball court record backups, only for a match or practice you choose to back up: the sport, when it started and ended, whether it was a match or practice, the point-by-point record and the score. Opponent and partner names, the court's name or location as you typed it, the surface and your notes are included only if you tick a separate box, which is off unless you tick it. No route, heart rate, contacts or video	So you have a private copy of your court records. Only you can see them. Kept until you remove a backup in the app or delete your account
Food, protein, calories, and hydration you log, and your nutrition targets	To show your nutrition against your targets
Meal photos you take when logging a meal	So a logged meal keeps its picture. Deleted from our servers, and from your phone, after 7 days
Favorite foods you save, and their photos	So you can log them again quickly. Kept until you remove them or delete your account
Course photos you add to a disc golf course page, with their caption and description	So other players can see the course. A photo is checked before it is published; once published, anyone who opens that course page can see it, signed in or not. Kept until you remove it, it is rejected, or you delete your account
Finish pictures you post to Social, only when you tap "Post photo"	So the followers you approved can see the picture with your workout summary. The location data stored in the photo file is removed, but anything visible in the picture is still visible. It never includes your route or a map. Only you and your approved followers can see it, through the app and never by a web address. Before anyone but you can see it, the picture is checked automatically by OpenAI's moderation model, as described under Who else receives data. A picture the check blocks is deleted at once and shown to no one; we keep only a record of the block (when it happened, which kinds of content the check found, and a checksum of the file, never the picture) for 90 days, or until you delete your account if that is sooner. If the check cannot run, the picture is not shown and you can try again. The check does not catch everything, so anyone who sees a picture can still report it. A picture that someone reports is hidden from everyone but you until we have reviewed it. Deleted when you remove the post, change it to Only me, withdraw from Social, a moderator removes it, or you delete your account
Golf and disc golf rounds you play: the course and holes, when the round was planned, started and finished, who played (including the name of any guest a player types in), every score and every change to it with who entered it, and, in disc golf, what a round's format or options add, such as teams, match play, skins points, hole-by-hole statistics like putts and penalties, and an independent scorekeeper's decisions and reasons. A finished disc golf round can also keep that day's weather at the course (temperature, wind, rain and the weather service it came from), with no location of yours in it	So everyone in the round keeps score on one card and can see who entered what. The players in a round see each other's first names (the first word of your display name) or guest names, never your account. Anyone with a round's 7-digit number can join it until the round ends. When you finish a round, your first name, your best score, how many rounds you have played there and when your best round was appear on that course's leaderboard, which anyone signed in to the app can see; a club's leaderboard shows the same to that club's members. Guests are never on a leaderboard. If you make a scorecard link, anyone who opens it, signed in or not, can see the course, when the round ended and every player's scores, with players shown only as numbers, until you revoke the link or it expires (thirty days unless you choose otherwise, never more than a year). Rounds are not deleted when you delete your account, so the other players keep a complete card: your place in each round stays with its scores, shown as a player number and no longer linked to you, and guest names stay with the round. Your scorecard links are deleted with your account
Disc golf throws you choose to record: for each throw, the hole, the lie, the result, any penalty, the shot type, the disc you picked from your bag, short notes you add, and, only if you choose to attach one, a location: your phone's GPS position at that moment with how accurate it was, or a point you press on the course map	So you can look back at your own throws. Only you can see them: no other player, leaderboard, scorecard link or feed gets them or their locations. A throw you correct or undo keeps its earlier record. Kept until you delete your account
Course reviews and condition reports you post on a disc golf course page, reports you send about someone else's review, note or photo, and any appeal you make against a moderation decision	So players can see what a course is like and so we can moderate it. A published review, with its ratings and your first name (the first word of your display name), and a current condition note, with no name, can be seen by anyone who opens the course page, signed in or not. Earlier versions of a review are kept with it. A condition note is hidden after one to three days but not deleted. Reports and appeals are seen only by you and our moderators. Kept until you delete your account
Course corrections you suggest for a hole, such as its par or where its tee and basket are, with any link and notes you add	So the course page can be fixed. Seen only by you and our reviewers. Kept until you delete your account
Temporary course layouts you make: a name and, for each hole, its par and the tee and basket positions you type in	So you can play a layout the course page does not have. Only you can see them. Hidden when they expire (seven days unless you choose up to thirty), and deleted the next time you make a layout or when you delete your account
Your disc golf course lists: favorites, courses you want to play, lists you name, the courses you have played and when, and the course collectibles and trophies you earn	To show your courses back to you. Only you can see them. When a round ends, every signed-in player in it has the course marked as played and their collectibles updated automatically. Kept until you delete your account
Course check-ins, only if you check in at a course or a club event: where, who may count you (only you, the club, or everyone), and when	So people can see how busy a course or event is. Others see only a rough count (none, one, some or many), never who; a course's guardians see monthly totals only when at least ten people checked in. Deleted once the check-in ends or expires, at most eight hours after it starts
Your disc bag: each disc's maker, mold, plastic, color, weight, flight numbers, nickname, which bag it is in, and when it was lost or found	So you can pick discs for practice and throws. Only you can see it. Kept until you remove a disc or delete your account
Disc golf practice and field throws: putting drills with each attempt's result, and field throw sessions, where each throw records your phone's GPS position, with how accurate it was, where you threw from and where you mark the throw's end	So you can track your practice and measure your throws. Only you can see them, including their positions. Kept until you delete the session or your account
Disc golf club events you organize, help run or play in: what an organizer adds (the description, schedule, check-in and parking details, sponsors and document links), your registration with any eligibility answers you give, your card and tee time, your announcement settings, official score decisions and their reasons, and the event feed, which lists registrations, start times, announcements and every score entered in an event round	To run the event. The club's members see registrations, cards and the leaderboard with first names. For a public event, anyone signed in can see its details and its feed, where scores appear under a club member code rather than a name. Anyone with an invitation link an organizer makes can see the event's name, club, course, start time and description, signed in or not, until the link expires (thirty days unless the organizer chooses otherwise). Your registration and settings are deleted with your account. The event's feed, the scores in it, score decisions and its change history stay with the event, with your account removed from them
Bag tags, if your club uses them: the tag number you hold, your opt-in, and challenges with their scores	So the club can track who holds each tag. The club's members see holders by first name and the last 100 changes. Your opt-in is deleted with your account; the tag history stays with the club, with your account removed from it
Disc golf social posts and comments you write (up to 500 characters each), people you mention, reactions, clubs you follow, people you mute, reports you send, your sharing settings, and open play games you host or ask to join (a course, a time window, how many players, skill level and a short pace note)	So you can share rounds and find people to play with. Your posts and comments go to the audience you pick, shown as Disc golfer, Friend or Club member rather than your name. A post or comment you delete is blanked but kept until you delete your account. Kept until you delete your account, except that notifications you caused stay with the people notified, without your account
Course guardian work, if a course invites you to help look after its page: your membership and invitations, the changes you propose (which can include tee and basket positions and the course's contact details), what is published, its change history, and any accounts left out of the course's statistics	So course pages stay accurate. What a guardian publishes, including contact details, can be seen by anyone signed in. Your membership and proposals are deleted with your account. Published versions and the change history stay with the course
Disc golf rating research, only if you agree to it: whether you agreed, the version you agreed to, and each change	So we can test a course rating model on rounds from players who agreed. While you agree, your finished rounds' scores, course, layout, end time and distance can be exported to us under a code made from your account identifier, not your name. You can withdraw at any time. Kept until you delete your account
Private Community photos and avatars, if Community is available to your account and you choose to upload one	To show the photo only to you or your currently approved followers, with current group access also required for a group-post photo. The app and server make a bounded PNG without the original location, EXIF, text or other image metadata; the original is not uploaded by this path. Approved photos are kept until you remove them, their parent/profile is erased, a moderator removes them, or you delete your account. Exact deletion records remain until storage confirms removal; account deletion stops for retry if that removal is not complete. Expired staging is eligible for cleanup after an hour, but eligibility does not promise that a cleanup job has already run.
Private Community records: your full date of birth and policy acceptance, group memberships and invitations, authored posts/comments and mutually authorized private messages, event schedules and responses, photo metadata and deletion records, and inbox/reminder pointers	To check adult eligibility and current access, deliver the Community features you choose, and show your records back to you. Private messages require current mutual approved follows; groups and events require current membership. Event meeting places and details are entered by the organizer, not taken from your device location. Only a public event caption that its organizer separately reviews and enables is publicly readable; private meeting details, attendees and media are excluded. Records follow their actual account/parent deletion rules. Withdrawal, cancellation and expiry close access without claiming immediate physical purging of every record.
Community notification preferences and installation records, only if you explicitly turn them on	To honor your notification types, quiet hours and daily cap, and deliver an opaque event pointer to the currently authorized installation. Provider tokens are cleared on opt-out/revocation or an invalid-token response; installation records are removed with their actual account/session. The delivery request stops being eligible after one day and the bounded retries, and a received pointer expires within a minute. These expiries prevent delivery; they are not a promise that old database rows are physically purged at that instant.
Social: your Social profile (handle, display name, an optional bio), people you follow and who follow you, workout summaries you choose to share (the sport, a title, an optional description, the start time, how long it took, and distance and climb if there are any), Power Ups and comments	So you can share your training with people you approve. Social is for adults 18 or older and is off until you turn it on. Your profile is private: people follow you only after you approve them. Each summary goes to the audience you pick, Only me or Followers, meaning followers you approved. A shared summary never carries your route, map or GPS, and a photo goes with it only if you post a finish picture, as described above. Kept until you delete it, delete your Social profile, it is removed by moderation, or you delete your account
Reports you send, and people you block, in Social and Community	So we can deal with abuse. You can report a post, comment, person, message or photo; the report goes to our moderators, the content is hidden from you at once, and the person reported is not told who reported them. A block hides the two of you from each other everywhere in Social and Community and ends your conversation. Your reports and blocks are deleted with your account. A report someone else made about you, and a record of each moderation decision with no content in it, are kept after your account is deleted so that a decision can be explained
Your AI Coach conversations	So the coach remembers the conversation
Gym notes you write	To show them back to you. Kept until you remove them or delete your account
Favorite sports and activities, only if you choose some: up to 5 picks from our list, up to 2 phrases you type yourself, the version of the list they were picked from, and whether you ticked the box to be counted	To show the groups and activities that match your picks first; you get this whether or not you tick the box. If you also tick the box "Help Power Mode On decide what to build next (counts only)", your picks are added, with no name or account attached, to totals that the owner reads to decide what to build next. This is separate from disc golf rating research, and it only ever produces counts. Only people 18 or over are counted: because we keep only your birth year, counting begins at the start of the year in which you turn 19, never earlier. A sport appears in those totals only when at least 5 counted people picked it, a phrase people typed only when at least 10 counted people typed it, and no totals are shown at all until at least 20 people are counted. People aged 13 to 17 are never counted, and neither are accounts with no recorded birth year. The box starts unticked, and you can untick it in Settings. Kept until you change or clear your picks, or delete your account. Totals the owner has already read hold only counts, with no name or account
Bug reports you send from the app: the note you write, a screenshot if you attach one, and the app build number and platform	So we can find and fix what you reported. Kept until removed or until you delete your account. The note, with the build number and platform, is also copied to GitHub, as described below; screenshots are not
WHOOP recovery, sleep and workout records, only if you connect WHOOP	To show them in the app. Kept until you disconnect WHOOP or delete your account
Apple Watch motion recordings, only if you turn them on	To teach the app to recognise exercises. See the section on motion recordings below
Your birth year	To check that you are 18 or older before any racing feature is available to you. Kept until you delete your account
Races you create or join: the race's name, course, code and start time, who is in it, whether each racer is ready, and each racer's finishing time and place	To run the race and show it to its racers and watchers, and to show you the result afterwards in your race history. Kept until you delete your account
Clubs you create or join: the club's name, its 7-digit club number, who is in it, and which races are its events	So the club's members can see the club, join its events, and see its leaderboards. Your first name, and your places and times in the club's events, are shown to that club's members. Kept until you leave the club, its organizer deletes it, or you delete your account
Races you delete from your race history	So a race you deleted stays out of your own history. Kept until you delete your account
Live race positions, only while you are racing in a race you joined: your phone's GPS position, where that puts you along the course, which lap you are on, and whether you are running, off the course or finished	So the other racers and the people watching that race can follow it. They are shown where you are on the course, your progress and your place, for that race only. Stored with your account and removed when you delete your account
Spectator timing points, only if you choose "Be a timing point" in a race you are watching: where your phone stood, as a distance along the course and not as a map position, a random code that means something only inside that race, and the readings kept with it. The race's organizer also sees your profile name.	So runners who pass your phone can be timed there, and so the organizer knows who is timing. Runners see only where the point is. All of it is deleted 30 days after the race's results are final, and the organizer's view of who opened a point ends then too. Deleting your account removes it sooner.
Timing puck crossings, only in a race you joined: which timing puck you passed, when, and how strongly your phone heard it	To work out your progress and your finishing time and place, which the other racers and that race's watchers see, for that race only. Stored with your account and removed when you delete your account
Race ranging device codes, only while you are in a race you joined and have race ranging switched on	So phones in the same race can find each other and measure the distance between them. A random code made for that race, and a second code that changes every 15 minutes; neither is your account or your name. Removed when you turn it off or leave the race, and when you delete your account
Race distance readings, only while you are in a race you joined and have race ranging switched on: the distance your phone measured to each nearby racer's phone, when it measured it, how sure the measurement was, and how strongly your phone heard each timing puck around the same time	So that a race time worked out from a nearby runner, whose phone missed a timing puck, can be checked against what both phones measured. Each reading names the other phone by its race-only code, and our server matches that code to the racer in that race. No other racer, watcher or organizer can see them. Readings from around your own crossing are sent only after the crossing itself has been accepted; until they are sent they are kept on your phone, left out of device backups. Deleted thirty days after the race stops accepting crossings, and removed when you leave the race or delete your account. When you cross a timing puck, a few readings from around that moment can also go over Bluetooth to nearby racers' phones in the same race, which use them only to work out a time and do not save them
Race pass readings, only for a race you joined: each time you pass a timing puck, the signal strengths your phone heard from it, the timing settings that pass was judged by, and your phone's model	So the race's organizer can re-check a timing result against what your phone actually heard. Sent only after your crossing itself has been accepted, and seen only by the race's organizer. Deleted thirty days after the race stops accepting crossings, and removed when you delete your account. Until they are sent they are kept on your phone, left out of device backups
Watcher account, if you sign in to watch on our race website: your statement that you are 18 or older and your acceptance of the terms (each with its time and the wording you saw), a first name if you choose to give one, how you would like a club welcome message (email, text or none), how you first reached us (for example a watch link or a club code), the first race you watched, and roughly when you last watched	To let you watch, to know who our watchers are, and to send the welcome you chose. Never shown to racers, clubs or other watchers. Kept as long as your account exists, or until you delete your watcher profile
Club links, if you use a club code on our race website: the club, whether you are a member or a fan, when you joined, and which code you used	To link you to the club and send its welcome. The club's organizer sees only how many members and fans there are, never who they are. Kept until you leave the club, delete your watcher profile or your account, or the club is deleted
Club codes a club's organizer makes for watchers on our race website	So watchers can link to the club. Each code is stored only in a scrambled form with its last three characters, never the code itself. Kept until the club or the organizer's account is deleted
Marketing choices you make on our race website: each time you say yes or no to our news by email or text, or to a welcome text, with the wording you saw, the time, and where you did it	So we can show what you agreed to and honour it. No IP address and no device information is recorded with it. Kept as long as your account exists, or until you delete your watcher profile
Phone number, only if you choose texts on our race website, once texts are available	To send the texts you asked for. Kept in its own protected place, shown back to you with all but the last two digits hidden, and never written to logs. Removed when you clear it, delete your watcher profile, or delete your account
Do-not-contact record, only if you agreed to our marketing or to texts on our race website at some point	So that we never send marketing to an address or number that said no, including after the account is deleted. It holds a scrambled, one-way form of the address or number that cannot be turned back into it, and it is linked to no account. Kept after deletion, on purpose; the section on watcher accounts explains it

Finish pictures and Power Mode On Social. The finish picture you make after a workout is kept on your phone. Share and Save to Photos send nothing to us. Only if you choose "Post photo" in Power Mode On Social is a picture uploaded to our storage: the copy we receive has the location data in the photo file removed, and your route and map are never included. Only you and the followers you approved can see it, anything visible in the picture is still visible to them, and anyone who sees it can report it. It is deleted when you remove the post, change it to Only me, withdraw from Social, a moderator removes it, or you delete your account.

What stays on your phone and is not stored on our servers

Your finish photos and the pictures made from them. The photo you take or choose for a finish picture, and the picture made from it, are kept on your phone. Share and Save to Photos send nothing to us; only a picture you choose to post to Social is uploaded, as described above.
Community recorded-workout links. Private links to your existing completed workout history stay under your account on the phone and are erased with that account. They contain no title, meeting location, members, health measurements, route or attendance/sharing claim. Pickleball links retain their separate occurrence producer.
Pending public event links. One opaque event ID can wait through sign-in for up to 15 minutes. It contains no account or private event data and grants no membership. An expired or invalid value is removed when it is next restored; an unopened value can remain until restore, explicit clear or app/device data cleanup.
Outdoor walk and run GPS routes. Location is recorded only during a session you started, and stops when you finish it. The save screen says so: "This activity stays on your phone. Nothing is uploaded." A race you join is the one exception, described under Power Mode On Racing below.
Bird ID photos and your life list. Bird photos you take or choose are kept on your phone, with their location and other photo data removed, and are left out of iPhone backups. Your sightings and life list are kept on your phone too, with no map position, and are never synced. Nothing from Bird ID is uploaded, and all of it is erased with your account.
Saved trails, your trail passport and recorded hikes. A hike you record is saved like any other walk, on your phone. Looking up trails sends only an approximate area, as described below. The river fishing guide sends nothing.
Nature collection. Bird-call recordings, wildlife photos, species suggestions and your confirmed collection are saved for your account on this phone, excluded from device backups, and removed when you delete the encounter or your account. Bird-call recording runs only while its capture screen is open; backgrounding the app stops capture. Bird-call recognition runs on the phone after you choose to download a public recognition model from its hosting provider. Calls are not uploaded. If you separately agree to identify a bird, bug or butterfly photo online, a re-encoded copy without location metadata is sent through our recognition service to our AI provider for suggestions. Your collection, precise location and audio recordings are not sent with that photo. Suggestions do not become collected species until you confirm them.
Your gym entry card photo.
The exact location of the gym you choose. A gym search sends only a rounded location. If you add your gym pass to Apple Wallet or Google Wallet, the gym's location goes into the pass, passing through our servers without being kept, so your wallet can show the pass when you arrive. Both are described below.
Your exact location when you look for disc golf events near you. Near me sends our servers only a location rounded to about 10 kilometres, which is used to measure the distance to each event and is not kept.
Equipment photos. One you choose to scan is sent to OpenAI for that one answer, as described below, and is not stored on our servers.
Scale photos. A photo of your scale that you choose to have read is sent to OpenAI for that one number, as described below, and is not stored on our servers. The weight you confirm is kept on your phone, the same as one you type.

Power Mode On Racing

Racing is the one part of the app built to show where you are to other people, so this section says exactly who sees what.

Only for people 18 or older. The app asks your birth year during setup and stores it with your account. Our server refuses every racing request - creating or joining a race or a club, broadcasting, or sharing a position - from an account whose birth year does not show 18 or older, and it treats a missing birth year as a no. Leaving a club and deleting a race from your race history never depend on your age.
Joining a race is agreeing to share your position in it. The app tells you this before you join. While you are racing, your phone sends your position, and the times you pass the race's timing pucks, to our server. Your position on the course, your progress and your place are shown to the other racers in that race and to anyone watching the race through its watch link, watch code, or QR code, for that race only. Leave the race, or finish it, and your position stops being sent. Phones in the race also measure the distance to each other, using random race-only codes that are not your account or your name. Those distance readings are sent to our server with your crossing times, and no other racer or watcher can see them. You can turn that off in the race panel, or leave the race to stop it.
What watchers see. The race's name and course, and each racer's position, progress, and place. Watchers are not shown your email address or your account identifier; on the public race page each racer is labelled with a code that is different for every watch link, so two links cannot be matched up to follow one person.
Watching shares nothing. When you open a race you say whether you are watching or racing. A watcher's position is never sent. Watching on our race website, powermodeonracing.com, needs the sign-in described in the next section.
Clubs. A club has a name and a 7-digit club number, and anyone who has the number can join it; its organizer decides who to give it to. The club's members see the club number, each other's first names, the club's races, and each member's results in those races - wins, podium places, and best times on each course - on the club's leaderboards. The rest of your display name, your email address and your account identifier are never shown; if your display name has no usable first word, members see "Member" and a number instead. Nobody outside the club sees its number, its members or its leaderboards. You can leave a club at any time (an organizer deletes their club instead), and your results then come off its leaderboards; the results of a race you ran stay part of that race. When an organizer deletes a club, its races carry on as ordinary races.
Your race history. The races you raced in or organized stay in your race history, with their final places and times, until you delete them or your account; the newest 200 are listed. Deleting a race from your history hides it from you only: it does not change anyone else's history, the race's results, or any club's leaderboard.
The race camera. A race's organizer can stream it live from their phone. The video and sound from that phone's camera and microphone go to Cloudflare, which delivers them to the race's watchers while the organizer is broadcasting. Recording is switched off: neither we nor Cloudflare keep a copy of the video for us once it has been delivered.

Social and Community

Social lets you share workout summaries with people you approve. Community adds groups, group posts, events, photos and private messages. Both are off until you join, and this section says who sees what.

Adults only. Social and Community are only for people 18 or older, and our server checks this on every request. To join, you give your full date of birth. It is kept private, used only to confirm that you are 18 or older, never shown to anyone, and deleted with your account.
Your name and what you post. Other people see your display name and handle. Your posts, comments, Power Ups, messages and photos are stored on our servers and shown only to the audience you choose: your approved followers, the members of a group, or the person you are messaging. Your profile is private, and nobody follows you until you approve them. A shared workout summary never includes your route, map or GPS.
Groups, events and messages. Group posts, comments and events are seen only by the group's current members. An event's meeting place is typed in by its organizer, not taken from anyone's location. An organizer may publish a short public preview of an event (its title, area and times); attendees, private details and photos are never in it. Messages are text only, and only between two adults who have each approved the other as a follower.
Photos. Location and other photo data are removed from a photo on your phone, and again on our server, before it is stored. Photos are kept in private storage, not on a public web address, and each one is checked by OpenAI's moderation model before it is stored, as described under Who else receives data.
Reporting and blocking. You can report a post, comment, person, message or photo from the app. A person on our side reviews every report, and the person reported is not told who reported them. You can also block someone: the two of you are hidden from each other everywhere in Social and Community, and your conversation is deleted. To report abuse outside the app, write to abuse@powermodeon.net.
Notifications. Community notifications are off until you turn them on. They are delivered through Google Firebase Cloud Messaging, and through Apple's push service on an iPhone, and carry no names and no message text.
Leaving and deleting. You can delete your Social profile at any time. Deleting your account removes your posts, comments, Power Ups, messages (for both people in the conversation), photos and event replies. Reports other people made about you, and a record of moderation decisions with no content in it, are kept so that a decision can be explained.

Watching on the race website: watcher accounts

Watching a race on our race website needs a signed-in account, as well as the race's watch link, watch code, or runner link. This section says what that account holds and what happens to it.

Who can have one. Watcher accounts are only for people 18 or older. When you sign up, you say you are 18 or older and accept the terms, and we record that you did, when, and the wording you saw. We do not ask for your birth date. If the account's own birth year shows someone under 18, the server refuses it.
How you sign in. With Apple or Google only. Your browser goes to your provider's own sign-in page and back; no provider code runs on our race website. The race website keeps your sign-in in your browser's local storage, in three entries: the sign-in itself, a one-time check used while Apple or Google sign-in finishes, and the race page to bring you back to. The race website sets no cookies.
What we keep, and why. Your email address and account identifier, as for any account; your 18-or-older statement and your acceptance of the terms; a first name if you choose to give one; how you would like a club welcome message; how you first reached us; the first race you watched; and roughly when you last watched. We keep it to let you watch, to know who our watchers are, and, only if you agree, to send you our news. None of it is shown to racers, clubs, or other watchers. The table above lists each item. If Apple or Google supplies a name when you sign in, it is stored with your account as it is for the app; the race website never shows it to anyone or uses it.
Marketing is your choice. Marketing is a separate, optional choice that is never ticked for you, and you can watch without it. If you tick a box to get our news by email (or by text, once texts are available), we record that you said yes, the exact wording you saw, the time, and where you did it, for example the sign-up form or your account page. We do not record your IP address or anything about your device with it. You can change your mind on your account page at powermodeonracing.com/account.
Unsubscribing. Every marketing email has an unsubscribe link, and we stop sending at once. Texts, once available, stop when you reply STOP.
Clubs. A club's organizer can give you a club code. Entering it on your account page links you to that club as a member or a fan, as the code says. A club's organizer sees only how many members and fans there are, never who they are, and being a member this way does not make you a member of the club's racing side. When you join a club this way, we may send you one welcome message by the means you chose (email, or text once available). It is an account message about the club you joined, not marketing, and agreeing to it is not agreeing to marketing.
How long we keep it. Everything about you as a watcher is kept as long as your account exists, unless you remove it sooner: on your account page you can clear your phone number, leave a club, or delete your watcher profile.
Deleting it. You can delete your watcher profile, or your whole account, at powermodeonracing.com/delete-account; an account you made in the app can also be deleted in the app, in Settings. Deleting removes your watcher profile, your club links, your history of marketing choices and your phone number. The one thing we keep is a do-not-contact record, and only if you agreed to our marketing or to texts at some point: a scrambled, one-way form of your email address or phone number that cannot be turned back into an address or number and is not linked to any account. It lets us check that we never send you marketing again, and it is used for nothing else.
Nothing is sent yet. We have not started sending marketing messages, club welcome messages, or texts. Before the first one is sent, the company that sends our email will be named on this page.

Apple Watch motion recordings

This is off until you turn it on, on the watch itself. It exists so the app can learn to recognise exercises from wrist movement instead of asking you to tap everything in.

What is recorded. Accelerometer and gyroscope readings during a workout, labelled with the exercise you already logged, or as rest. Never location, audio, video, or heart rate. If you undo a set, its recording is deleted with it.
What is sent. The movement readings and the exercise label. Your name, email, height and weight are not attached.
How it is stored. Motion recordings are stored with the day they were captured, never the time of day. One timestamp we cannot round off remains: our storage system records when each file was written. A short-lived record linking an upload to an account exists for up to 23 hours so that a recent upload can be deleted on request; after that nothing connects a recording to a person except that write timestamp, which we do not use to identify anyone.
What deleting your account removes. Deleting your account removes the recordings that short-lived record still links to you. Older recordings stay in the training set: once that link has expired there is nothing in them we can search by to find yours. That is why this is opt-in and described here rather than folded in with everything else.
Turning it off. Switching it off on the watch stops capture immediately, including mid-workout, and nothing further is sent. Recordings made before you first agreed to this are kept on your phone and are never uploaded.

Apple Health

With your permission the app reads steps, walking and running distance, active and resting calories, Apple Watch workout heart rate, body weight, body fat, lean mass, body mass index, heart rate variability, resting heart rate, and sleep, so it can show your activity and your weight and body composition trend and, for members without a WHOOP strap, provide Power Mode On's own recovery estimate from Apple Health. On Apple Watch it saves the workout itself to Health. Health data is used to display your activity, your body composition trend and your recovery estimate and is not sent to any third party.

Microphone: the Live voice coach and spoken entry

The app uses your microphone in two places. One is a Live voice conversation with Coach. The other is spoken entry, where your phone's own speech recognizer turns what you say into text - for example, saying what you ate instead of typing it. Coach's Live voice mode is a separate feature from the typed AI Coach described below, with its own data path.

The microphone never opens without your permission. Before either can use it, your phone or your browser shows its own microphone permission prompt, and nothing is heard before you answer it. Saying no, or closing the prompt, leaves the microphone off and the rest of the app works normally.
A Live conversation can begin in two ways. You tap the coach button, or Coach greets you out loud when you open the app, which opens a Live session for the length of that greeting. That opening greeting is on by default whenever Live is your selected coach voice, which is the starting setting for a new install - so on a phone, opening the app is itself one of the two ways. The "Speak on open" switch in Settings turns the greeting off, and choosing a different coach voice stops it as well. In a web browser the greeting never runs until you have answered a one-time in-app prompt asking whether you want the Live voice coach at all.
While a Live conversation is open, your voice audio streams directly from your device to Google's Gemini Live service in real time, so the coach can answer out loud. This audio does not pass through or get stored on Power Mode On's own servers - see the Gemini Live row below for what Google does with it.
A live text transcript of both sides of the conversation is generated as you speak, so you can see what was heard and said. The transcript of what you said is checked, on your own device, against a small built-in safety filter that looks for things like a medical emergency or self-harm language before anything else happens with it - that check runs locally and is not a separate network call.
Nothing from a Live conversation - audio or transcript - is saved to Power Mode On's database. The only thing our servers record about a Live session is how many seconds you used, so we can enforce the usage limit on the feature.
You can also type to Coach instead of talking. Typed conversations are a different feature, described in the next section, and are stored so the coach remembers the thread.

Who else receives data

Who	What they get
Google Firebase Cloud Messaging	Only for explicitly opted-in and configured Community notifications: the destination installation token and opaque event, kind, installation, registration and expiry pointers. The message payload contains no private message body, actor name, meeting location, account ID or credential. Google provides delivery and server authorization; Apple APNs carries the iOS background envelope. Current account/session and separate device/type consent are required. Configuring these sources alone does not establish actual delivery.
OpenAI	Only when you use these features: the question you type into the typed AI Coach, sent with the injuries and limitations you have told us about and your planned workout and logged sets; the meal, scale or equipment photo you choose to scan; a food you describe in text in the nutrition search; and the text of Coach's replies when the app reads them aloud, which OpenAI turns into speech. Coach questions and photos are sent with a setting that tells OpenAI not to store them. The food search text and the reply text read aloud are sent without that setting, so how long OpenAI keeps those is governed by OpenAI's own terms for its API, not by us. The account identifier sent with a Coach question is a one-way hash, not your account. If private Community photos are available and you choose to upload one, separately configured and approved moderation also sends its canonical PNG to OpenAI before storage. That moderation uses the provider's terms for retention; it does not claim the Coach request's no-store setting. If you post a finish picture to Power Mode On Social, the picture is sent to OpenAI's moderation model once, to check it before your followers can see it, and for nothing else. That check uses OpenAI's terms for its API; it does not claim the Coach request's no-store setting.
Google - Gemini Live (voice coach)	Your microphone audio, streamed in real time, only while you have a Live voice conversation with Coach open, so it can generate the coach's spoken replies. When a session starts, Gemini Live is also sent today's planned workout: each session title and its planned minutes, the exercise names with their prescribed sets and reps, and any cardio with its minutes and distance. If you have saved injuries or limitations that rule exercises out, it is also sent those limitations and the exercises they rule out, so it does not suggest them. If the experience level in your training profile rules exercises out, it is also sent that level and the exercises it rules out, so it does not suggest them. This audio is not stored on Power Mode On's servers; Google's own handling of it is governed by Google's terms for the Gemini API, not by us.
Google - Places (gym search)	Your search text when you look for a gym, plus an approximate location rounded to about 10 kilometres. Your precise location is never sent.
Google - Play Integrity (race app check, Android)	Not switched on in the Android app yet. When it is, once per race in which you share your position, an Android phone asks Google Play for a token saying whether this is the genuine Power Mode On app on a genuine device. Our server sends that token to Google to be checked, with no name, email or account identifier, and keeps only the answer: genuine, or not and why. The answer never stops you racing. On an iPhone the same check uses Apple's App Attest, and our server checks it itself without sending anything to Apple or Google.
Google Wallet and Apple Wallet (gym pass)	Only if you choose Add to Wallet for your gym pass. The pass holds your gym's name, the membership number from the card you scanned and its barcode type, and your saved gym's location, so your wallet can bring the pass up when you arrive. If you set your gym's location by using the spot you were standing on, that is the exact spot your phone measured. The pass also carries a pass number worked out from your account and membership number in a way that cannot be reversed. Our server builds and signs the pass and keeps none of it. On an iPhone the pass goes to Apple Wallet on your phone; on Android, Google receives it when its save page opens. The pass stays in your wallet until you remove it, under Apple's or Google's own terms.
USDA FoodData Central, Nutritionix, and Open Food Facts (food lookup)	The food search text you type or say, or the barcode you scan, when you search for a food. It is sent from our server with no account identifier.
Visual Crossing (disc golf weather)	Only once weather for finished disc golf rounds is switched on, which it is not yet. When you finish a round, our server asks Visual Crossing for that day's weather at the course. It sends the course's location, which is public course information rather than your phone's position, and the date the round ended, never the time of day. It is sent from our server with no account identifier. Visual Crossing's own handling of the request is governed by its terms, not by us.
OpenStreetMap and Mapbox (maps)	Requests for the map tiles covering the area a map is showing, while a route, a trail or a live race is on screen. A tile server sees the area being viewed, not your position, and, as with any web request, the network address the request comes from. Mapbox is used only in a build that has been given a Mapbox key; otherwise the tiles come from OpenStreetMap.
Overpass, Photon and Wikimedia (trails)	Only when you use Hiking & Trails. These requests go straight from your phone to these public services, not through our servers, and we keep nothing from them. When you ask for trails near you, the app sends Overpass, a public OpenStreetMap service, your phone's position rounded on your phone to about 1 km, and the search distance you chose plus 800 metres to make up for that rounding. Your exact position stays on your phone, where the trails that come back are checked against your chosen distance. When you search for a city or park by name, Photon, a public place search run by komoot, receives only the words you type, and no position. To show a credited photo of a trail, the app asks Wikimedia (Wikidata, Wikipedia and Wikimedia Commons) for it using the trail's public map references, without your position. None of these requests carries your name or your account, though, as with any web request, each service sees the network address the request comes from. Each service's own handling of a request is governed by its terms, not by us.
Apple (speech recognition)	When you use spoken entry, the audio your phone's built-in speech recognition turns into text. Apple handles that audio under its own terms; the app receives the text and does not store the audio.
Cloudflare (race camera)	The live video and sound from a race camera, only while a race's organizer is broadcasting, so it can be delivered to the race's watchers. Recording is switched off, so no copy is kept for us. Each camera's stream also carries your account's identifier as a label, which we delete with the stream when the race ends, when the camera is revoked, or when you delete your account (a camera not attached to a race is deleted after a day). Cloudflare's own handling of the stream is governed by Cloudflare's terms, not by us.
Apple and Google - sign-in	Only the provider you choose to sign in with. Apple or Google confirms who you are and gives us your account identifier, email address and, when supplied, name. Your browser goes to your provider's own sign-in page and comes back; no provider code runs on the race website. Your provider handles sign-in under its own terms.
Supabase	Hosts the database and accounts described above, on our behalf.
Apple	Only if you signed in with Apple. When you delete your account we send Apple the sign-in token your device gave us, so that your Sign in with Apple connection to Power Mode On is revoked instead of being left in place. Nothing else is sent, and it happens only as part of deleting your account.
WHOOP	Only if you connect a WHOOP account yourself. We then read your Recovery, Strain, sleep and workout records from WHOOP so the app can show them and take them into account. Sleep includes how long you slept, the time spent in each sleep stage, your respiratory rate, and WHOOP's estimate of how much sleep you needed. We do not send your Power Mode On training or nutrition data to WHOOP. You can disconnect at any time in Settings, which also revokes our access at WHOOP's end.
Wahoo	Only if you connect a Wahoo account yourself (not yet available in public builds of the app). We then receive the rides you record with Wahoo, as ride files, so the app can show them. Any location in those files is removed on our server before the ride reaches your phone, and no Wahoo location is stored. If you choose Send to Wahoo after planning your race weeks, we send Wahoo those planned cycling workouts, so they appear on your Wahoo device. We do not send your rides, nutrition or health data to Wahoo. You can disconnect at any time in Settings, which also revokes our access at Wahoo's end; deleting your account does the same.
Sentry (crash reports)	A report when the app crashes or hits an error, so it can be fixed: the error and where in the code it happened, the app version, and the model of phone and the operating system version. It carries no name and no account - the app never tells Sentry who you are - and never a screenshot or a copy of the screen. Web addresses in the diagnostic trail have everything after the "?" removed before they are sent, so a report can say that reading your nutrition log failed without carrying any of what was in it.
GitHub (bug report triage)	The text of the bug reports you send from the app, with the time you sent it, the build number and platform, is copied from our database into a private GitHub repository that we use to track and fix them. So is the number of screenshots attached to each report and the report's own reference number, which is not your account identifier. Screenshots themselves stay in our storage and are not copied. Screenshots attached to earlier reports were copied before this changed, and they remain in that repository's history.

Deleting your account

Settings has a Delete account control. It permanently removes your profile, training history, nutrition log, body measurements, AI Coach conversations, the photos, notes and bug reports described above, your court record backups, what you posted in Social and Community, anything you added as a watcher on our race website, and your account itself, and clears the app's data from the device. It cannot be undone. An account can also be deleted on our race website, at powermodeonracing.com/delete-account. The do-not-contact record described in the section on watcher accounts is the one thing kept on purpose.

Your rights, and how to reach us

You can do most of this yourself, inside the app, without writing to anyone. The app's own screens show what is stored about you, and you can correct it in place. The Delete account control in Settings removes your account and what is attached to it, as described above. If you watch races on our race website, your account page there shows your watcher details and choices, and powermodeonracing.com/delete-account deletes them.

If you cannot use that control, for example because you have lost access to your account, write to us at privacy@powermodeon.net to ask what is stored about you, to have it corrected, or to have it deleted. Our postal details are Happy Pixel Company LLC, St. Petersburg, Florida.

Depending on where you live, the law may give you rights over your personal information. Whatever the law where you live says, we offer these to everyone:

Access. You can ask what personal information we hold about you and get a copy of it.
Correction. You can ask us to correct information that is wrong.
Deletion. You can ask us to delete your information, and the in-app control does this directly. The motion recordings section above explains the one kind of recording we cannot find after its link to you expires.
Portability. You can ask for a copy of the information you gave us in a common, machine-readable format.
Marketing. You can withdraw your marketing permission at any time, on your account page on our race website or with the unsubscribe link in any marketing email.
Withdrawing permission. Where we use something only because you allowed it - Apple Health, the microphone, motion recordings, WHOOP, racing, Social or Community - you can switch it off at any time, and stopping does not affect the rest of the app.
No selling, no sharing for advertising. We do not sell your personal information and we do not share it for advertising, so there is no sale or sharing to opt out of.
Fair treatment. Using any of these rights never costs you anything or changes how the app treats you.

To use any of these rights, write to us at the address above. We will need to confirm the request comes from the account holder before we act on it, and we will answer as quickly as we can. If you are not satisfied with our answer, reply and ask us to look again; you can also complain to the data protection or consumer protection authority where you live.

If we change this policy in a way that matters, we will say so in the app or on this page before the change takes effect, and the date at the top of this page will change.

Children

Power Mode On is not directed to children under 13, and we do not knowingly collect personal information from them. Power Mode On Racing is only for people 18 or older: the server refuses every racing and live-sharing request from an account whose birth year does not show that, including an account with no birth year at all. Watcher accounts on our race website, and Social and Community in the app, are also only for people 18 or older. If you believe a child under 13 has given us information, write to us at the address above and we will delete it.

Health disclaimer

Power Mode On provides general fitness and nutrition information. It is not a medical device, does not provide medical advice, and does not diagnose, treat, or clear anyone for physical activity. Always consult a qualified healthcare provider before starting a new exercise program, and stop and seek medical attention if you experience chest pain, severe shortness of breath, dizziness, or any symptom that concerns you.