This policy explains what data the app keeps, what for, who else sees it and what you can do about it. It's written in plain words; if anything isn't clear, write to us at felipe@maipo.us.
MAIPO LLC, a company registered in Texas, United States, is responsible for your data. For anything about it: felipe@maipo.us.
Your account: your email and your password. The password is never stored as is, only a fingerprint that can't be reversed.
What you log: your workouts, your meals and their photos, your weight, your measurements, your goals and your profile (for example, age, sex and height).
My cycle, only if you turn it on: the first day of your period and how you feel each day.
Garmin, only if you connect it: your activities, your heart rate and other health data Garmin provides.
Apple Health, only if you connect the iPhone app: your Apple Watch workouts, your heart rate and your daily activity. Each person uses one watch: Garmin or Apple Watch.
Technical data: each sign-in to your account (when, from which device and from which internet address) and a server error log.
Only to provide the service: keep what you log, analyze it and give you training and nutrition advice. Also to protect your account: tell you about sign-ins from new devices and stop anyone trying to guess passwords.
We don't sell your data, we don't show ads and we don't use it for anything else.
Much of this data is health data (weight, heart rate, meals, menstrual cycle). We keep it because you expressly agree when you create your account and, for My cycle, when you turn it on. You can withdraw that permission at any time: by deleting your account or turning My cycle off.
The app is about training and nutrition: it doesn't give medical advice.
If you request an invitation from our website, we keep your email, the message you choose to leave us (it is optional), your language, the date, and whether you ticked the news box. We also keep a fingerprint of your connection (not your address), only to stop abuse.
We use it to reply to you. Only if you ticked the news box, also to write to you when there is something new from MAIPO LLC; in every email you will be able to ask us to stop. If you did not tick it, we write nothing besides the reply to your request.
If you did not tick the box, we keep it 180 days and then it deletes itself. If you did, we keep it until you ask to unsubscribe. In both cases, if you create your account it is deleted at that moment. To have us delete it sooner, write to us at felipe@maipo.us.
Render (United States): the server where the app and its backups live.
Anthropic (United States): the artificial intelligence that writes your analyses and reads the photos of your meals. It only receives what each analysis needs and, according to its terms, doesn't use it to train its models.
Google (Gmail): sends the app's emails, such as codes and notices. It sees your email and the content of those emails.
Cloudflare (United States): the check that you're a person and not a program, when you create an account or ask for an email code. It sees your connection's address and details about your browser; it doesn't see your app data.
Garmin: if you connect it, your activities come from there. Your Garmin password isn't stored.
Apple: if you use the iPhone app, your Health data goes from your phone straight to our server; Apple doesn't receive it on our behalf, and it's never used for advertising.
MAIPO LLC runs the server and can technically access the data. It only does so to keep the app working, give support or for security.
Nobody else, unless a law requires it.
In the United States. If you live in another country (for example, in the European Union), your data travels to the United States for the app to work.
As long as you have your account.
When you delete your account, everything is deleted from the server right away. The encrypted backups keep it for up to 7 days on the server and up to about 3 months in the administrator's copies; after that it's gone from there too.
Sign-ins to your account are kept for 180 days, and the error log for 90 days. Its last 30 days also go into the administrator's encrypted copies, to look into problems, so they can stay there for up to about 3 more months.
What the artificial intelligence spent stays in MAIPO LLC's accounts, without your name.
See and take your data: “+” button → “Account” → “Download my data”.
Correct it: you edit it in the app.
Delete it: “+” button → “Account” → “Delete my account”.
Withdraw your permission: by deleting your account, turning My cycle off, tapping “Log out” in the iPhone app or asking us to disconnect Garmin.
Ask or complain: write to us at felipe@maipo.us. You can also complain to the data protection authority in your country.
Encrypted connection, passwords stored as fingerprints, two-step verification (required for the administrator), email notices of sign-ins from new devices, encrypted backups and a browser protection that only lets the app's own code run.
The app is only for people 18 and older. If we learn an account belongs to a minor, we delete it.
If we change this policy, we'll tell you in the app and ask you to accept it again.
Version of 2026-10-27. Terms of use