Privacy Policy

This service is operated by 18072132 Canada Inc. ("we," "us"), a corporation incorporated under the Canada Business Corporations Act, based in Toronto, Ontario, Canada. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Health and fitness data is among the most sensitive personal information there is, and this policy describes exactly how we handle it.

What we collect

• Account information: your name, email address, and beta-application details you provide.
• Wearable and training data: heart rate, HRV, sleep, resting heart rate, activities, steps, blood oxygen, respiration rate, VO2 max, active energy, body weight and composition if you connect a scale or record them in your phone's health store, and similar metrics from the wearable device you connect. There are two ways to connect. Through your device account (for example Garmin Connect): you authorize the connection yourself, through that account’s own sign-in, and it is carried out by our wearable connectivity provider, Terra (Terra Enabling Developers, Inc.), which receives the data from your device account and passes it to us. Or through your phone's health store (currently Apple Health) in our mobile app: the data is read on your phone and sent directly to us, and does not pass through Terra. Either way we then normalize it and store it in Canada. You choose what is shared and can revoke access at any time, from the app or from your device account.
• Self-reported data: notes, effort ratings, goals, constraints, and training history you enter.
• Calendar events (only if you connect a calendar): the time, title, location and calendar name of your events, read when your plan is written so training can be placed around your commitments. We do not keep a copy of your calendar; an event may be mentioned in the plan written around it. The link or authorization you give us to read the calendar is held where only our server can read it and is never shown back in full.
• Meals (only if you log them): photos, product barcodes or short descriptions of what you eat, and the calories and nutrients estimated from them. Meal photos are used only to make the estimate and are not stored — the photo is sent once to our AI provider and is not retained; only the entries you confirm are kept. A barcode you scan is looked up by its number alone in Open Food Facts, a public food database operated from France.
• Gym sessions (only if you log them): the exercises you choose from our list, sets, repetitions and weights, an optional effort rating and note, and your own balance and stability self-assessment.
• Health documents you choose to upload: such as laboratory results or body-composition reports, if and only if you provide them. Uploaded files are not stored — each document is sent once to our AI provider to transcribe the values and is not retained; only the values you confirm are kept, and identifier-like fields (names, dates of birth, health-card numbers) are automatically discarded. Please don't upload documents showing your health card number — black it out first; a stray number is discarded, not stored.
• Technical data: basic logs (timestamps, error reports) needed to operate and secure the service, and, if you turn notifications on, the notification address your phone or browser issues for this app (a device token), used only to send the notifications you chose. We use no analytics or third-party tracking, and our emails are transactional only.

How we use it

Your data is used for exactly one purpose: generating and adapting your coaching. That includes building your training plans, adjusting them to your recovery, applying safety guardrails, and presenting your own trends back to you. We do not sell your data, share it with advertisers or data brokers, or use it to train general-purpose AI models.

Consent

We collect and process your data only with your express consent, captured in-app at signup through a consent gate covering the Terms of Use, Privacy Policy, Health-Data Consent, and Medical Disclaimer. We do not use your health data to improve products or to train AI models; if we ever propose product-improvement use, we will ask for your separate, optional opt-in first. You may withdraw consent at any time by deleting your account in the app (Settings › Account › Delete your account), or by emailing privacy@cantaigalabs.com; withdrawal stops future processing of that data.

Storage and security

Your data is stored in Canada, encrypted in transit and at rest, with row-level isolation so users cannot see each other's data, and sensitive medical fields (lab values, medications, health flags) are additionally encrypted at the application level (AES-256-GCM), with the encryption key held by our server rather than by our database provider. AI processing is performed by Anthropic (Claude API) on servers in the United States, under commercial terms that prohibit the use of your data for model training; the context we send is designed to exclude your name and email. Our application and background-job hosting also runs on servers in the United States, and wearable data connected through a device account reaches us through Terra, which processes it outside Canada — currently on servers in the United States, the United Kingdom, and the European Union — before we store it in Canada; data connected through Apple Health is sent from your phone directly to us; and a product barcode you scan is looked up in a public database operated from France. While your information is processed outside Canada it is subject to the laws of that jurisdiction; we protect it by contract (including Terra's Data Processing Agreement, with the EU Standard Contractual Clauses and the UK Addendum) and by pseudonymization.

Service providers

We use a small number of processors, each only for its function: Supabase (database and authentication, stored in Canada, ca-central-1), Terra (wearable data connectivity for device-account connections such as Garmin — receives data from your device account and passes it to us; processed outside Canada, currently in the United States, the United Kingdom, and the European Union; Apple Health data does not pass through Terra), Anthropic (AI plan generation, United States), our application-hosting providers (United States), Open-Meteo (weather by approximate location; no account data is sent), Open Food Facts (a scanned barcode number only; operated from France; no account or personal data is sent), and, if you turn notifications on, your phone or browser maker's notification service (Apple, Google or Mozilla), which learns that a notification was sent to your device and when — notification content is encrypted so that service cannot read it, and a notification never states a health value. They process data on our instructions only. We never sell or rent personal information to anyone.

Retention and deletion

We keep your data only while you use the service. You can delete your account yourself at any time — Settings › Account › Delete your account — which removes your plans, wearable history, labs, supplements, injuries and notes, and disconnects your watch. Deletion is immediate and cannot be undone; residual copies in encrypted backups are purged on our normal backup cycle, and we keep only the minimal records we are legally required to retain. You can also ask us to delete your data by email, and we action such requests within 30 days.

Your rights

You may request access to the personal information we hold about you, ask us to correct it, withdraw consent, or request deletion. Deletion is available directly in the app; the rest by contacting us at the address below. We respond within 30 days. If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Who can use the service

The beta is offered by invitation to adults aged 18 and over who are residents of Canada; it is not currently offered to Quebec residents. Age is confirmed at signup and under-18 dates of birth are blocked. We do not knowingly collect data from anyone under 18.

Changes to this policy

We post updates here, with the date. We will ask you to re-accept in the app before we (a) collect a new category of personal information, (b) use your information for a new purpose, (c) share it with a new category of recipient, or (d) process it in a country this policy does not name. Other updates — naming a replacement or additional provider within a category already described, clarifications and corrections — are posted here and noted in the app, and do not require you to re-accept.

Posted updates

October 3, 2026. Food and gym logging are now available to every beta member. Two clarifications of what we already describe above; nothing new is collected or shared, and you do not need to re-accept.

• Gym sessions: you can rate effort for a whole session or for a single set (how many more repetitions you could have done), and record a weight for each hand or for both hands together.
• Food page: a weekly nutrients card shows the amounts your listed supplements provide, each beside the published reference value and the body that publishes it (for example, NIH). It reports amounts; it does not judge whether your intake is adequate.

Contact

Privacy questions or requests: privacy@cantaigalabs.com
18072132 Canada Inc., Toronto, Ontario, Canada.