Privacy Policy

Effective September 30, 2026

This policy explains what the Loam iPhone app collects, how we use it, who we share it with, and the choices you have. It also covers loamfit.com. "Loam", "we" and "us" mean the operator of the Loam app. Questions go to support@loamfit.com.

1. What we collect

Account

Your email address and password. You sign in with email and password only. Passwords are stored in hashed form by our authentication provider, never in plain text.

Profile and settings

What you enter: display name, handle, date of birth, sex, height, weight, a short bio, and a profile photo or preset avatar. If you allow it, Loam can fill in date of birth, sex and height from Apple Health. We also store your settings, such as units, goals and notification preferences.

Profile photos are resized on your phone and uploaded to our file storage. Each photo gets a random web address that isn't listed anywhere. Anyone who has that exact address can view the photo.

Apple Health

Only if you connect Apple Health, and only the types you allow. Loam asks to read:

• Workouts and workout routes
• Heart rate, resting heart rate, heart rate variability, heart rate recovery, respiratory rate, blood oxygen and sleeping wrist temperature
• Sleep
• Steps, walking and running distance, flights climbed, and active and resting energy
• VO2 max, running speed, running power, stride length, ground contact time, vertical oscillation, physical effort and workout effort scores
• Weight, height, body fat percentage, lean body mass and waist circumference
• Date of birth and biological sex

When you first connect, Loam imports up to 180 days of history, then keeps syncing new data. The data Loam reads is copied to our servers so the app can build your history, trends and scores.

Loam writes one kind of data to Apple Health: workouts you record in Loam (activity type, start and end time, and calories), if you allow it.

Garmin and other wearables reach Loam through Apple Health. Loam only receives what the device maker writes to Apple Health.

Workouts and location

When you start a workout that uses GPS, Loam records your location to map your route and measure distance, pace and splits. Recording continues while your screen is locked or you are in another app, until you pause or finish the workout. iOS shows a location indicator while this happens. Loam does not access your location at any other time. You can decline location access and still use the rest of the app.

Routes are saved with the workout in your account. So are routes that come with workouts from Apple Health.

For workouts with a route, the app looks up the weather at the start. It sends the starting coordinates, rounded to about 10 meters, and the date directly to Open-Meteo, a weather service. No account details are included. Like any website, Open-Meteo can see your device's IP address.

Training and food logs

What you log in Loam: lifts (exercises, sets, reps and weight), runs and other workouts, how a workout felt, training plans and race goals, meals, custom foods, water, body measurements, sleep tags and notes.

When you search for a food or scan a barcode, the search text or barcode number is sent to our servers, which look it up in USDA FoodData Central and Open Food Facts. Those lookups come from our servers and don't include who you are. Food results are saved in a shared food catalog. The catalog holds food information only, not who searched for it.

When you search for a race, your search text and any city or state you enter are sent from our servers to RunSignup. No account details are included.

Coach conversations

Messages you send to the coach and the responses you get. See AI coaching.

Camera and photos

The camera is used to scan food barcodes and to take a profile photo. Barcodes are read on your phone and only the number is used. The photo library is used to choose a profile photo or a background for a workout share card. Share card photos stay on your phone and are not uploaded.

Notifications

If you turn on notifications, we store a push token for your device so we can send them.

Crash reports

The app includes Sentry, a crash reporting tool. When it is turned on, a crash report contains technical details such as the code location of the error, the app version and the platform. Our setup strips error messages and does not attach personal details, health data, location or screenshots.

Technical data

Our hosting provider keeps basic request logs, such as IP address, time and errors, to keep the service secure and working. The app also keeps your sign-in session and some cached data on your phone so it loads quickly.

What we don't collect

Loam does not access your contacts or microphone, does not use your device's advertising identifier, and does not track you across other companies' apps or websites.

2. How we use it

• To provide Loam's features: syncing, history and trends, scores such as readiness and Capital, training plans, logs, maps and coaching.
• To keep your account secure and the service working, including finding and fixing bugs.
• To answer support requests and send account emails, such as password resets.
• To send notifications you have turned on.

We don't sell your personal data. We don't use it for advertising or to build marketing profiles, and we don't share it with data brokers.

3. Apple Health data

• We use data from Apple Health only to provide Loam's health and fitness features to you.
• We never sell it, never use it for advertising or marketing, and never disclose it to third parties for advertising, marketing or data mining.
• We share it only with the service providers that run those features for us: our hosting provider and, when you use AI coaching, our AI provider.

Loam is a consumer fitness app. It is not a healthcare provider, and it does not provide medical care.

4. AI coaching

Loam's coaching features use Claude, an AI model made by Anthropic. They include the coach chat, the daily read on Today, the morning brief and evening wrap-up, lift briefings, Capital insights, and meal estimates from a description. Some of these run when you open a screen, such as Today.

To write a response, our servers send Anthropic the data that feature needs. Depending on the feature, that can include:

• your display name
• health metrics such as sleep, heart rate variability, resting heart rate and readiness
• workouts, runs (splits, pace, heart rate and weather), lifts and training plans
• meals and nutrition targets
• Capital scores
• what you type, such as chat messages and meal descriptions

We don't send your email address, your password or your GPS coordinates.

Anthropic processes this data to produce the response for us. Under Anthropic's commercial terms, Anthropic does not train its models on this data. We store the responses and your coach conversations in your account so you can see them again. We also keep a record of each AI request, such as the time, the feature and its size, to enforce usage limits.

AI responses can be wrong. See the Terms of Use.

5. Connected services

Loam may offer direct connections to other services, such as WHOOP. If you connect one:

• You approve the connection, and the data it shares, on that service's own permission screen. Depending on what you approve, this can include recovery, strain, sleep, workouts and body measurements.
• We use that data only to provide Loam's features to you, such as your history, scores and coaching. When you use AI coaching, it can be part of what is sent to our AI provider, as described above.
• We don't sell it, use it for advertising, or share it for marketing.
• You can disconnect at any time in You > Devices & Apple Health. Disconnecting stops new imports. Data already imported stays in your account until you delete your account or ask us to remove it.

6. Who we share it with

We share personal data only with service providers that help run Loam, and only what each one needs:

• Supabase: hosting, database, sign-in, account emails, file storage and server functions. Our servers are in the United States.
• Anthropic: AI coaching, as described above.
• Expo: app updates and push notification delivery. When the app checks for an update, Expo receives basic device and app details. Notification text passes through Expo and Apple.
• Apple: Apple Health, maps shown in the app, and push notifications.
• Sentry: crash reports, when turned on.
• Open-Meteo: rounded workout start coordinates and date, for weather.
• USDA FoodData Central and Open Food Facts: food search text and barcode numbers, without your identity.
• RunSignup: race search terms, without your identity.

We may also disclose information if the law requires it, or when needed to protect someone's safety. If Loam is sold or merged, your data may move to the new owner, and this policy will keep applying to it.

7. Social features

Loam has social features (friends, groups and sharing) that are not turned on in the app yet. When they are and you use them, other Loam users can find you by your handle and see your display name, photo and bio. Friends you accept can see your lifetime totals, streaks and tier unless you turn that off. Workouts are shared only if you choose to share them. We will update this policy if that changes.

8. Keeping and deleting data

• We keep your data while your account exists.
• You can delete individual items in the app, such as workouts, lift sessions, meals and water logs.
• You can delete your account in You > Delete account. This deletes your account, profile, photos and everything Loam stores for it: workouts and routes, data synced from Apple Health, logs, plans, coach conversations and scores. It happens right away and can't be undone. Steps are on the Support page.
• Deleted data may remain in our providers' backups and logs for a limited time before it is overwritten.
• Data in Apple Health stays in Apple Health. Loam does not delete it.
• If social features are on and you used them, comments and reactions others left on your content are deleted with your account. Reports about content may be kept for moderation.

9. Your choices and rights

• See and correct: most of your data is visible in the app. Edit your profile in You > Profile.
• Delete: in the app, as described above, or by email.
• Get a copy: email us and we will send you a copy of your data.
• Permissions: change Apple Health, location, camera, photo and notification access at any time in iOS Settings.

Depending on where you live, such as the EEA, the UK or California, you may have other rights, including the right to object to or restrict processing and to complain to a data protection authority. Email us to use any of these rights. We will respond within the time the law requires, and we won't treat you differently for using them.

If you are in the EEA or UK, we process your data to provide the service you asked for, with your consent for health data and location (which you can withdraw in iOS Settings), and for our legitimate interest in keeping Loam secure and working.

10. Security

Data is encrypted in transit. Our hosting provider encrypts stored data at rest. Our database uses row-level security so each account can reach only its own data. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

11. Children

Loam is not directed to children under 13, and you must be at least 13 to use it, or older where local law requires (for example, 16 in some EU countries). We don't knowingly collect data from children under that age. If you think a child has given us data, email us and we will delete it.

12. Where data is stored

Our servers are in the United States. If you use Loam from another country, your data is transferred to and processed in the United States.

13. Changes

We will post changes here and update the effective date. If a change is significant, we will tell you in the app or by email before it takes effect.

14. Contact

Email support@loamfit.com.