Privacy policy

Last updated 29 September 2026

The short version. Sport MCP stores the workouts and measurements you log so the app can show them and so an assistant you connect can read them. We count how the app is used, without looking at what you lift, and you can switch that off. We do not sell your data, show ads, or use your data to train AI models. You can delete everything from the app at any time.

Who we are

Sport MCP is operated by David van IJzendoorn, who is the controller of your personal data. You can reach us at support@sport-mcp.com.

What we collect

Your account

When you sign in with Apple, Google or email we receive a user identifier, your email address and, if you share it, your name. With Sign in with Apple you can choose to hide your email; we then receive Apple's relay address. We never see or store your Apple or Google password. Email passwords are handled by our authentication provider and stored as a salted hash.

Your training data

Everything you or your connected assistant put into Sport MCP: workout templates, scheduled workouts, logged sets (exercise, weight, repetitions, time), notes, custom exercises, your body weight if you enter it, and your preferences such as units.

Apple Health

Apple Health is off until you turn it on in Settings. When it is on:

Finished workouts are written to Apple Health as strength training workouts.

Sport MCP does not read your Health data. Nothing connected with Apple Health is used for advertising or marketing, or sold. You can turn the connection off in the app, or change what Sport MCP may access in the Health app.

Connected assistants

When you connect an assistant we store which app connected and when, so you can see and end the connection. We do not store your conversations. They stay with the assistant's provider.

Technical data

Our hosting provider keeps standard server logs (such as IP address, time and the page or endpoint requested) for security and troubleshooting.

Usage statistics

To understand how Sport MCP is used and what to improve, we record events such as “workout finished”, “assistant connected” or “page viewed”, with simple counts (for example the number of sets) and technical details (app version, iOS version, country).

We never record what is in your workouts: no exercise names, weights or notes, and no conversations with your assistant.
Events are sent to our own server, which passes them to our analytics provider, Mixpanel, stored in the European Union. No analytics software runs in the app or on the website.
In the app, events are linked to your account identifier, not your name or email. On the website we use no cookies and store nothing in your browser; visits are counted with an identifier that changes every day and cannot be traced back to you.
Your IP address is not passed on to the analytics provider.
You can switch this off in the app under Settings, then Privacy. The website respects the Global Privacy Control and Do Not Track settings of your browser.

How we use it

To show your workouts, history, records and charts in the app, and keep them in sync.
To let an assistant that you connected read and update your training data, when you ask it to.
To keep the service secure and working.

Assistants you connect

Connecting is your choice. When you connect an assistant and allow access, it can read your workouts, history and records, and can create templates, schedule workouts, and log workouts. Data the assistant reads is sent to that assistant's provider (for example Anthropic for Claude) and is then handled under that provider's terms and privacy policy. You can end the connection in the app under Profile, then Connect Claude.

Where it is stored and who processes it

Your data is stored with Google Firebase (Google Cloud), in data centres in the European Union. Google acts as our processor for authentication, database and hosting. Mixpanel acts as our processor for usage statistics, also in the European Union. We share your data with no one else, except when the law requires it.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile, workouts, measurements and connections are deleted from our database. One-time connection codes expire after ten minutes. Server logs are kept by our hosting provider for a limited period.

Your choices and rights

Delete. In the app, open Settings, then Delete Account. This permanently deletes your account and data.
Disconnect. End an assistant's access in the app at any time.
Access, correction and export. You can see and edit your data in the app. Email us for a copy of your data.

If you live in the European Economic Area or the United Kingdom you have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to complain to your data protection authority. We process your data to provide the service you asked for; on the basis of your consent for Apple Health and for connected assistants, which you can withdraw at any time; and on the basis of our legitimate interest in improving the service for usage statistics, which you can object to by switching them off.

Children

Sport MCP is not intended for children under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date above and tell you in the app.

Contact

Questions or requests: support@sport-mcp.com.