Privacy policy
PhysiqueIQ · physiqueiq.ai · Effective March 25, 2026
Operated by PIQ LLC · admin@physiqueiq.ai
This Privacy Policy describes how PIQ LLC (“Company,” “we,” “our,” or “us”) collects, uses, stores, and protects your personal information when you use PhysiqueIQ (the “Service”), located at physiqueiq.ai and available through associated mobile applications. By using the Service, you consent to the practices described in this Privacy Policy.
1. Information We Collect
When you create an account, we collect your email address, display name, and an authentication credential managed by AWS Cognito. We do not store your password directly; password hashes are managed by AWS Cognito’s authentication infrastructure.
You may provide additional profile information including your competition division, height, weight cap, federation affiliation (NPC, IFBB, etc.), competition schedule, weeks out from competition, and training goals. This information is used to calibrate AI analysis to your specific competitive context.
When you submit photos for analysis, those images are uploaded to and stored in Amazon Web Services (AWS) S3. Photos are stored at full resolution and are never downscaled. This is intentional — conditioning details such as striations, vascularity, and muscle feathering require pixel-level clarity for accurate AI assessment.
Each check-in generates AI-produced analysis results including structured assessments of muscle groups, conditioning, posing, and overall competitive readiness. These analysis results are stored in Amazon DynamoDB and associated with your account for progress tracking and historical review.
We collect information about how you use the Service, including the number of AI analyses performed, check-in history, feature usage patterns, analysis quota consumption, and subscription status. This data is used to enforce plan limits, track internal costs, and improve the Service.
When you submit feedback through the application, your user agent string (browser type, version, and operating system) may be included with the submission to assist with technical support and bug resolution.
Payment processing is handled entirely by Stripe, Inc. We do not receive, store, or have access to your full credit card number, CVV, or banking details. Stripe provides us with a limited payment reference (such as the last four digits of your card and card brand) for transaction identification purposes only.
If you use coaching features, we collect data related to your coach-athlete relationship, including roster membership, group assignments, coach review decisions (approvals and corrections on analysis sections), and in-app messages exchanged between coach and athlete. This data is used to facilitate the coaching workflow and generate labeled training data for model improvement (see Section 3).
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide AI physique analysis. Your photos are sent to Anthropic’s Claude API to generate structured physique assessments. Your profile data (division, height, weight cap, weeks out) is included in the analysis request to calibrate feedback to your competitive context.
- Track your progress over time. Check-in data, analysis results, and comparison records are stored to enable progress tracking, weekly delta calculations, and historical review.
- Process payments. Account and subscription information is shared with Stripe to process subscription charges, manage billing cycles, and handle cancellations or refunds.
- Send account-related communications. We may send you emails related to account verification, password resets, subscription status changes, and material updates to our Terms of Service or Privacy Policy.
- Improve the Service. We use aggregate, anonymized usage analytics to understand how the Service is used, identify bugs, and prioritize feature development. Individual user data is not shared externally for this purpose.
- Facilitate coach-athlete relationships. If you are linked to a coach on the platform, your check-in photos, analysis results, calibration notes, and progress history are accessible to your linked coach for the duration of the coaching relationship. Coaches may submit review decisions (approve or correct) on analysis sections, and these review decisions are stored as part of your check-in record.
- Model training (opt-in only). If you have explicitly opted into training data contribution via the training data consent setting in your account, your photos and associated coach review corrections may be used to train and improve our proprietary physique analysis models. This is strictly opt-in — we never use your photos for model training without your explicit consent.
- Monitor errors and performance. We use Sentry for error tracking and performance monitoring to identify and resolve technical issues. Error reports may include technical context such as browser type, operating system, and anonymized session identifiers, but do not include your photos or analysis content.
3. AI Processing and Third-Party Services
AI Data Processing
Your photos are processed by Anthropic’s Claude API to generate physique analysis. Under Anthropic’s API usage policy, data submitted through the API is not used by Anthropic to train their models. Your photos are not stored by Anthropic after analysis is complete.
Photos and associated profile metadata are transmitted to Anthropic’s Claude API for analysis. Anthropic processes this data solely to generate the requested analysis response. Under Anthropic’s commercial API terms, customer data submitted via the API is not used for model training purposes, and photos are not retained by Anthropic after processing.
We are developing a proprietary physique analysis model (“Arete”) designed specifically for physique assessment. If you have opted into training data contribution, your photos and coach-reviewed corrections may be used as labeled training data for this model. Arete is trained on infrastructure we control (AWS SageMaker) and your data is never shared with external parties for this purpose. You may opt out of training data contribution at any time through your account settings.
We use AWS for hosting, data storage, and authentication services. Specifically: Amazon S3 for photo storage (encrypted at rest), Amazon DynamoDB for application data, AWS Cognito for authentication, Amazon CloudFront for content delivery, and Amazon SageMaker for model training. All AWS services are deployed in the us-east-1 (United States) region.
Stripe processes all subscription payments and is PCI-DSS Level 1 compliant, the highest level of certification in the payment card industry. We do not handle or store raw payment card data at any point.
We use Sentry for application error tracking and performance monitoring. Sentry receives technical error data including stack traces, browser and device information, and anonymized session identifiers. Sentry does not receive your photos, analysis results, or personal profile information.
We do not use advertising networks, data brokers, social media tracking pixels, or any form of behavioral advertising technology. Your data is never sold, rented, or shared with third parties for marketing purposes.
4. Photo Privacy and Sharing
By default, your photos are private. They are visible only to you and, if you are linked to a coach, to your linked coach for the duration of the coaching relationship.
If you are on a coach’s roster, your coach can view your check-in photos, analysis results, and progress history. This access is automatically revoked when you leave the coach’s roster. Coaches are bound by these Terms and may not redistribute or publicly share your photos.
The Service may offer a Competitor Insights feature that allows athletes to optionally share check-in photos in a public or semi-public gallery. Photos are never shared in Competitor Insights unless you explicitly opt in. You may remove your photos from Competitor Insights at any time.
Your photos may be used for training our proprietary AI models only if you have explicitly enabled the training data consent setting in your account profile. This consent is recorded via the trainingDataConsent field on your account. You may revoke this consent at any time, and revocation applies to all future model training runs. Photos already incorporated into trained model weights cannot be individually extracted or deleted from those weights.
5. Data Storage and Security
- All application data is stored in AWS us-east-1 (Northern Virginia, United States).
- Data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.
- Photos are stored at full resolution in encrypted S3 buckets with server-side encryption enabled.
- Photos are uploaded and accessed via presigned URLs — direct S3 access is not available to users or external parties.
- Access to production systems and stored data is restricted to authorized PIQ LLC personnel only, on a need-to-know basis.
- Authentication credentials are managed by AWS Cognito, which enforces secure password hashing and token management.
- We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
Your personal information, photos, analysis results, and check-in history are retained for the duration of your active account. You may access, modify, or delete your data at any time through your account settings or by contacting us.
Upon receiving a valid account deletion request, we will delete your personal account information within thirty (30) days and permanently delete your photos from active storage within thirty (30) days. Data may persist in encrypted backup systems for up to ninety (90) days after deletion from active storage.
Coach review decisions (approvals and corrections) associated with your check-ins are retained as part of your check-in history. If you have opted into training data contribution, anonymized corrections may persist in training datasets after account deletion, but can no longer be associated with your identity.
Feedback submitted through the in-app feedback feature is retained for service improvement purposes. Feedback data is anonymized after one (1) year, at which point it can no longer be associated with your account.
Email addresses submitted through the early access waitlist are retained until the Service launches publicly. Waitlist emails are deleted after launch unless the individual creates an account.
Accounts that have been inactive for twelve (12) consecutive months may be deleted after thirty (30) days’ written notice to the email address on file.
7. Your Rights
You have the following rights regarding your personal information:
- Access. You may request a copy of the personal information we hold about you at any time by contacting admin@physiqueiq.ai.
- Deletion. You may request deletion of your account and all associated personal data. See Section 6.2 for deletion timelines.
- Correction. You may update or correct your profile information at any time through your account settings.
- Data Portability. You may export all of your data in JSON format at any time from the Data tab in your account Settings. The export includes your profile, check-ins, analysis results, photos, and usage history.
- Withdraw Consent. Where processing is based on your consent (including training data consent), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
- Opt Out of Training Data. You may disable the training data consent setting at any time to prevent your photos from being used in future model training.
To exercise any of these rights, contact us at admin@physiqueiq.ai. We will respond to all requests within thirty (30) days.
8. Cookies and Local Storage
- Authentication tokens. We use cookies and/or local storage to maintain your authenticated session via AWS Cognito session tokens. These are required for the application to function and cannot be disabled while using the Service.
- User preferences. Application settings and preferences are stored in your browser’s localStorage to persist your configuration between sessions.
- No third-party tracking cookies. We do not use any third-party tracking cookies, analytics cookies, or advertising cookies.
- No advertising cookies. We do not serve advertisements and do not allow any third party to place advertising or tracking cookies through our Service.
9. Children’s Privacy
The Service is not intended for users under eighteen (18) years of age. Given the nature of physique photography and competitive bodybuilding content, we require all users to be at least eighteen years old.
We do not knowingly collect personal information from children under the age of eighteen (18). If we become aware that we have collected personal information from a user under eighteen, we will take steps to delete that information and terminate the account promptly. If you believe we have inadvertently collected information from a minor, please contact us at admin@physiqueiq.ai.
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know. You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete. You have the right to request that we delete your personal information, subject to certain legal exceptions.
- Right to Opt-Out of Sale. We do not sell your personal information to third parties. We have not sold personal information in the preceding twelve (12) months.
- Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, quality of service, or access levels for exercising your rights.
To submit a CCPA request, contact us at admin@physiqueiq.ai. We will verify your identity before processing any request and respond within forty-five (45) days as required by law.
11. International Users
The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your jurisdiction.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by email at least thirty (30) days before the changes take effect and update the “Effective Date” at the top of this document.
Your continued use of the Service after the effective date of any revised Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you must discontinue use of the Service and may request account deletion.
13. Contact Information
If you have questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us:
Last updated: March 25, 2026 — PIQ LLC — physiqueiq.ai
This document has been prepared for informational purposes and must be reviewed by a licensed attorney before enforcement. It is not legal advice.