Privacy policy

Effective October 3, 2026

Apple Health (iPhone)

With your permission PeakFuel can read workouts, active energy, steps, sleep, body mass, body fat percentage, heart rate variability and resting heart rate, and can write the nutrition, water and weigh-ins you log. Health data is used only to compute your targets on the device. It is never sent to us or to any third party, never used for advertising or marketing, never sold, and never shared with data brokers; it leaves the phone only in your own iCloud device backup or inside a backup or research file you export yourself. What PeakFuel writes to Apple Health is available to other apps only if you allow them in the Health app.

Health Connect (Android)

With your permission PeakFuel can read from Health Connect: exercise sessions, active calories burned, steps, sleep, weight, heart rate variability and resting heart rate — and, if you allow it, it reads them in the background so a workout reaches the day's targets while the app is closed. With your permission it writes the nutrition, water and weigh-ins you log. PeakFuel uses this data only on your phone, to compute your energy, fueling targets and readiness. It is never sent to us or to any third party, never used for advertising or marketing, never sold, and never shared with data brokers; it leaves the phone only inside a backup or research file you export yourself, or in a direct transfer to your new phone. No person at PeakFuel can see it. What PeakFuel writes to Health Connect is available to other apps only if you allow them in Health Connect. You can review or withdraw these permissions at any time in Health Connect (in Android Settings on Android 14 and later, or in the Health Connect app on earlier versions). PeakFuel's use of information received from Health Connect adheres to the Health Connect Permissions policy of Google Play, including its Limited Use requirements.

Camera and microphone

The barcode scanner reads the code from the camera on the phone itself, and "Describe a meal" can turn your speech into text with the phone's on-device speech recognition. No camera images or audio leave the device. On an Android phone without on-device speech recognition, PeakFuel suggests your keyboard's own dictation instead, which your keyboard app handles under its own privacy terms.

Network requests

PeakFuel has no server. These features connect directly from your phone to the services below, over encrypted HTTPS connections:

• Food search and barcode scanning query Open Food Facts (openfoodfacts.org) with the search text or barcode you entered. To keep foods you saved from Open Food Facts up to date, PeakFuel also looks them up again by barcode when the app opens. Open Food Facts is an open database run by a non-profit; its own privacy policy applies to these requests.
• Training-calendar sync fetches the calendar link you pasted (for example from TrainingPeaks or Intervals.icu) when the app opens and during background checks. The link is stored on your device, and in any backup you export.
• Strava and Intervals.icu, if you link them (see below).
• Purchases are handled by Apple through the App Store on iPhone, and by Google through Google Play on Android.

Each request carries only what its feature needs — the search text or barcode, the calendar link, or your Strava or Intervals.icu credentials — and never your health data or your logs. Like any internet request, it shows the receiving service your phone's IP address.

Google libraries in the Android app

Two Google libraries in the Android app send Google technical data of their own. The barcode scanner uses Google's ML Kit, which runs on the phone but sends Google device and app information, performance metrics, error codes and a per-installation identifier that is not meant to identify you, so that Google can measure and improve ML Kit (Google Play's Data safety section lists this as analytics). Google Play's billing library sends Google diagnostics about purchase connections. Neither receives your health data, your food logs or camera images, and Google's privacy policy applies to this data.

Strava and Intervals.icu

You can optionally link a Strava account or an Intervals.icu account. Strava sign-in happens on Strava's own page and gives PeakFuel read-only access to your profile and your activities, including private ones; Intervals.icu uses your athlete ID and personal API key. PeakFuel then fetches your activities and planned workouts directly from those services to your phone (and from Intervals.icu, unless you turn Wellness off, your daily heart rate variability, resting heart rate, sleep and weight, to fill in your morning check-in), when the app opens and during background checks. The access token or key is stored in the iPhone's Keychain, or on Android encrypted with a key held in the Android Keystore, and is used for nothing else; the linked account's name and ID are kept on the phone to show which account is linked. PeakFuel never posts to these services and never shares your data with them. Disconnecting deletes the token from the phone and asks Strava to revoke PeakFuel's access; activities already imported stay in the app until you delete them or erase. You can also revoke PeakFuel in Strava's settings, or delete the key in Intervals.icu. Their own privacy policies govern the data they hold.

Background activity

With your permission, iOS wakes PeakFuel briefly when Apple Health receives a new workout, weigh-in or step batch; iOS also runs an occasional background refresh that reads Apple Health and refreshes linked services and training calendars. On Android, PeakFuel runs a background check about once an hour while the phone is online (Android may run it less often): it refreshes linked services and training calendars and, while Background sync is on and background reading is allowed, reads new data from Health Connect. These checks only read data into the app on your device.

Purchases

Subscriptions and the lifetime purchase are processed by Apple on iPhone and by Google on Android. PeakFuel uses only the subscription status they report (whether Pro is active, the plan, and trial and renewal status and dates) and never sees your name or payment details. If you rate PeakFuel from the in-app prompt, the rating goes to the App Store or Google Play under your account there.

How your data is protected

Your data sits in the app's private storage, which other apps cannot read and which the phone's built-in storage encryption protects (on iPhone, and on Android 10 and later). Strava and Intervals.icu keys are additionally encrypted (in the iPhone Keychain, or with the Android Keystore). Every network request uses encrypted HTTPS.

Your data, your control

Your data stays on your phone for as long as you keep it there. From the You tab you can export a JSON backup (all your app data, including calendar links and linked account names) or research CSV files (your daily and session data, including health readings) at any time — they go only where you send them — restore a backup on another device, or erase everything. Erasing deletes your profile, logs and history from the app. On Android it also disconnects Strava and Intervals.icu and cancels reminders. On iPhone, erasing hides the disconnect buttons and resets the reminder switches without cancelling reminders already scheduled, so before you erase, disconnect Strava and Intervals.icu under Wearables & apps and switch off the reminders on the You tab (otherwise a scheduled reminder keeps arriving until you switch it on and off again or delete the app). A recovery copy of your data is removed the next time the app starts, a copy the app set aside because it would not open stays until you delete the app, and iOS clears the app's temporary export files on its own. Deleting the app deletes its data; on iPhone, a Strava or Intervals.icu sign-in you never disconnected can remain in the Keychain, and you can always revoke PeakFuel in Strava's settings or delete the key in Intervals.icu. Nutrition, water and weigh-ins PeakFuel wrote to Apple Health or Health Connect stay there until you delete them in those apps. Because there are no accounts and we hold none of your app data, there is nothing for us to delete on your behalf, and nothing we could hand over. Data held by Open Food Facts, Strava, Intervals.icu, Apple or Google is covered by their own policies and deletion tools.

Young athletes

PeakFuel is designed for athletes aged 16 and over. It is not directed at children under 13 and does not knowingly collect information from them. Under-18 athletes receive more conservative targets and should use the app with a parent, coach or dietitian.

Not medical advice

PeakFuel is not a medical device and does not diagnose, treat, cure or prevent any medical condition. Consult a healthcare professional for medical advice, diagnosis or treatment. Targets are educational and built from published consensus statements. They are not a diagnosis or a treatment plan. Athletes with an eating-disorder history, diabetes, kidney disease, or who are pregnant should follow their clinician's guidance.

Changes and contact

If this policy changes, the effective date above changes and this page is updated. Questions and data requests: open a ticket from the support page (tickets are public, so leave out personal details; ask for a private contact and we will reply with an email address), or, once PeakFuel is on Google Play, email the address on its listing. If you contact us, we receive only what you send, use it only to answer you, and do not share it.