Privacy.

The short version. We store what you tell us and what you do here, we use it to build your plan and run the community, we do not sell it, there is no advertising or tracking pixel anywhere in this product, and you can download everything or delete all of it yourself at any time from your settings.

Cookies

Three, and all of them do a job you asked for. One keeps you signed in and disappears when you sign out. Two more exist for ten minutes if you connect X, purely to make that handshake safe, and are deleted the moment it finishes. None of them follows you, none is shared with anyone, and there is no advertising or analytics cookie because there is no advertising or analytics. That is also why you have never seen a consent banner here: a banner asks permission for the tracking cookies, and there are none to ask about.

The board

Pariter has a public leaderboard at /board. You are not on it. It lists only members who have turned it on in settings, and it shows a name, a tier, a badge count and a session count — never a video you watched, never a plan, never anything from your health profile. Turning it off removes you immediately and permanently; nothing about you is kept on the board after that. We will never add someone to it by default, including in a future version of this page.

What we hold

Your account. Your email, name and profile picture come from Google when you sign in. We also keep your timezone, the body goals you picked, and the timestamps recording that you confirmed you are 18 and accepted the terms — those timestamps are how we prove the gate was not skipped.

Health details, which are the most sensitive thing here. If you complete the intake we store your height, weight, optionally your sex, your injury notes in your own words, structured injury tags, medical flags, and any dietary pattern, allergies or disliked foods. Your sex is used only to work out your calorie targets — two formulas, the Mifflin-St Jeor equation and a clinical minimum-calorie floor, and nothing else. Injury information is used for one thing only: excluding movements that would be unsafe for you. In UK and EU law this is special-category data, and we treat it that way — it is never shown to other members and never leaves the database except in your own export.

What you do. The plans generated for you, workouts you mark complete, your weight log, the videos you open and save, trainers and members you follow, groups you join, posts and comments you write, and sessions you schedule or attend.

Messages and matching. Direct messages between connected members, and — only if you opt in to partner matching — the training times, languages and pairing preferences you enter for that purpose.

Google tokens, encrypted. If you grant calendar access we store the resulting tokens encrypted at rest so we can put your sessions on your calendar. Revoking access in your Google account stops that immediately.

Who else is involved

We use Google for sign-in and calendar, Neon for the database, Vercel for hosting, LiveKit for live workout rooms, and Resend to send email. They process data so the product can function, and nothing is sold to anyone.

Embedded players are the honest exception. Workouts play in YouTube’s and TikTok’s own players, because that is how creators keep their views and their ads. Those players are theirs, and they can set cookies and collect viewing data under their own policies, which we do not control. We use YouTube’s no-cookie player for every video, which reduces this but does not remove it — the small script that lets a live room start and stop the video together still comes from YouTube’s ordinary address, so if you are signed in to YouTube, they will know you opened a room.

Because the library is built on YouTube’s API, using Pariter also means agreeing to YouTube’s Terms of Service, and what Google does with anything it receives is covered by the Google Privacy Policy.

What we do with Google’s data, in their words. Pariter’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Plainly: we use your calendar data only to show and manage the sessions you schedule here, we never transfer it except as that policy allows, we never use it for advertising, we never sell it, and no human reads it.

The same is true of anything else that draws in your browser rather than on our servers, and it is a longer list than the players alone: workout thumbnails come from Google’s and TikTok’s image servers; a Twitch stream plays in Twitch’s player; the soundtrack you pick plays in Spotify’s player, with whatever Spotify already knows about you; and turning on camera blur downloads the blurring model from a public code CDN. Each of those sees your IP address and which page you were on. The blurring itself runs on your own machine — no frames are sent anywhere.

If you connect X to share a workout, we store the handle and an encrypted token until you disconnect. Disconnecting deletes our copy; it does not withdraw the permission at X, which you do in your X account settings. If you give us a phone number so a connection can reach you, it is shown only once you and that person have each chosen to share it, and never anywhere else.

Live rooms are not recorded. Recording is switched off at the provider. Nobody, including us, gets a copy of a session afterwards.

What you can do about it

Take it. Download a complete JSON file of everything above from your settings, whenever you like, without asking us.

Delete it. Deleting your account is immediate and permanent: your profile, health details, plans, logged workouts, posts and messages go. There is no grace period and we cannot bring it back. Two things deliberately survive — groups you founded pass to their longest-standing member rather than being destroyed under the people still using them, and workouts you submitted to the library stay with your name removed, because they may already be part of someone else’s training.

The other side of that is worth saying plainly, because it affects other people too: a training plan you published goes when you go, and so does anyone’s copy of it, and a live session you scheduled disappears along with the list of who was coming. If you have built a plan that others follow, tell them before you delete, or hand it over first.

Ask. For anything else — a correction, a question, or an objection to how we handle something — write to us and a person will answer.

Not yet lawyer-reviewed. This notice describes honestly what the product does today, but it has not been checked by a qualified professional and does not name a legal entity, a data controller, a retention schedule or a supervisory authority. Those have to be in place before Pariter is advertised publicly, and we are telling you rather than implying otherwise.