Privacy Policy
Last updated October 17, 2026 · Montis Lab, Bozeman, Montana
The short version
Your training data is yours. We never sell it. We never use it to train third-party AI models. We use it for exactly one thing: making your training plan more accurate. Want a copy of your data? Ask, and you get it.
What we collect
Account: your email address, display name, and sign-in identity (email, or Apple/Google sign-in).
Training data you create: your program choices, planned outdoor weeks, logged sessions, sets and loads, effort ratings, assessment results, and optional profile fields (bodyweight, age range, training experience) you choose to provide for load recommendations.
Health and activity data, with your permission: via Apple Health (iOS app) we read workouts, heart rate, and related workout metrics — only the types shown on the permission screen, and only if you grant them. Via Strava (web) we read your activities after you connect your account. You can revoke either at any time in iOS Settings → Health, or by disconnecting Strava in Montis settings.
Screenshots you hand to Montis: when you ask Montis to read a workout screenshot, the image is sent once to our AI provider (OpenAI) to extract the numbers, shown back to you to confirm, and not stored — only the activity you confirm is saved. Strava data is never sent to an AI model.
Photo stories (Field members): when you publish a photo, we read its location and the time it was taken from the photo itself and store both with your story, so it lands on the map by itself at the place it was taken; you can change the place or the time before publishing. The image is re-encoded on your device with its embedded metadata removed and stored privately, shown only to signed-in members you choose (just you, or the invited community). You can remove a story at any time.
Payments: handled by Stripe. We never see or store your card number.
How we use it
To run Montis: compose and adapt your training week, calculate training load, personalize load and heart-rate zones, deliver your morning brief, and show you your own history. Comparisons are to your own baseline. We do not sell or rent your data, we do not share it with advertisers, and we do not use your data to train third-party AI models. Health data from Apple Health is used only to provide these training features, is never used for advertising, and is never disclosed to third parties for their own purposes, consistent with Apple’s HealthKit guidelines.
Who processes it
Montis runs on a small set of infrastructure providers acting on our instructions: Supabase (database and authentication), Netlify (hosting), Stripe (payments), Apple (push notifications and TestFlight), OpenAI (the coaching text and screenshot reads described above, under API terms that do not train on your data), OpenFreeMap / OpenStreetMap (map tiles for photo stories; your browser fetches tiles, no account data is sent), and Strava (only if you connect it). Each receives only what it needs to do its job.
Sharing you control
Crew and Field features are private by default. Nobody sees your training unless you explicitly opt in to the board, and what’s shown is limited to your display name and weekly summary counts — never raw activity detail or health data. If a coach or clinician invites you and you accept, they see what the consent screen describes, and you can revoke access.
Optional Teams routines
Joining a supported Teams routine is voluntary. We save the preferences you submit, your agreed activities, recorded completions, support requests and weekly check-ins. You, the coach assigned to your cohort and authorized Montis operators can access these records to deliver your program. Employer reporting contains group participation summaries for completed weeks, with small groups suppressed. It does not include your intake answers, individual activities or private coaching conversations.
You can export your routine records or withdraw from the routine screen. Withdrawal stops new assignments and removes the cohort coach’s access to your routine records; Montis retains your records with your account. An optional calendar reminder is added only when you choose to download it. You manage or remove that reminder in your calendar.
Retention and deletion
We keep your data while your account is active. Email hello@montislab.com to request an export of your data. You can delete your account yourself in Settings → Delete account: it removes your profile, training data and photos in one step; photo files are purged shortly after. Disconnecting Strava in Settings removes the connection and every activity Montis imported from Strava.
Not medical care
Montis is general fitness training, not medical advice, diagnosis, or treatment. The ACL Bridge track is clinician-directed; your relationship with your own clinician governs that care.
Changes and contact
If this policy changes materially, we’ll note it here with a new date. Questions: hello@montislab.com.