Legal

Bellows Privacy Policy

Bellows Fitness LLC · Effective October 26, 2026 · Last updated October 26, 2026 · Version 2026-10-26

Bellows is a workout log for lifting, running, walking, riding, hiking and other training, made by Bellows Fitness LLC, a Pennsylvania limited liability company ("Bellows," "we," "us"). This policy explains what we collect, why, who else handles it, and the choices you have. It covers the Bellows iPhone app (including test versions through TestFlight), the Bellows Apple Watch app, the web app at app.bellowsfitness.com, the bellowsfitness.com website, and the Bellows artificial intelligence (AI) connection, including any content, features and services offered on or through them. It applies whenever you access or use Bellows, including by creating an account, signing in, or visiting the website, and by doing so you acknowledge that you have read and understood it. We record your acceptance at sign-in (see Acceptance records). Using Bellows is never, on its own, your consent to collect or share health data; that always takes a separate choice described in this policy. This version takes effect on October 26, 2026 and from that date applies to new accounts and to accounts created before it. Nothing in this policy limits any rights you have under the privacy laws where you live.

If you live in Washington, Nevada or Connecticut, or want the detail on health data, also read our Consumer Health Data Privacy Policy at bellowsfitness.com/health-data.

The short version

1. Your training is stored in your Bellows account so you, your devices, and the AI apps you choose to connect can reach it.
2. We don't sell your data, share it for advertising, or use it to train AI models.
3. Heart rate and workouts from Apple Health and your Apple Watch are saved only after you say yes on Bellows' own Health Data screen, and your birth year, gender, height and weight are saved only if you turn health data saving on. You can turn either off at any time.
4. An AI app sees your training only after you approve it by name, and loses access when you disconnect it.
5. Training partners see only what you choose to share with them (nothing by default).
6. Usage counts and crash reports are anonymous and not linked to your account. You can turn them off.
7. You can export everything at any time, and delete your account in the app.

1. What we collect

Your account. Your email address, or the private relay address Apple gives you if you use Sign in with Apple and choose "Hide My Email." Bellows has no passwords: you sign in with a one-time code sent by email, or with Apple. Our sign-in provider keeps a record of sign-ins.

Your settings. Display name, units, the day your week starts, your time zone (so dates match where you are), display and training preferences (such as color scheme, progression suggestions, voice updates and the voice used, rest alerts, route privacy distance, haptics, auto-pause, the RPE chip, the muscle-map figure, the sports pinned on Today, and how many sets and reps a new exercise starts with), your privacy choices (including whether crash reports are on), your AI approval setting and the go-ahead word an AI waits for. They're kept with your account so a new phone picks them up. Live Tracking contacts are the exception: they stay on your phone.

Acceptance records. Which version of the Terms of Use and this policy (including the health and safety statements on the sign-in screen) you accepted, when, and on which platform (iPhone or web). If we update them, we ask again and keep a record of that too.

Your training profile. If you answer About Your Training (every question is optional): the sports you train, your goals, your experience and your usual week. You can change or clear them in You → Goals and Experience.

Health data. Heart rate, calories and workouts from Apple Health, and heart rate and cadence from the Bellows Apple Watch app, only after you say yes on Bellows' own Health Data screen and then allow it in Apple's Health permission screen. Your birth year, gender, height and body weight, only after you turn on health data saving ("Save my birth year and gender as health data," off by default); you can enter them in You → Goals and Experience or fill them from Apple Health. A birth year must show you're 18 or older. How sore or fresh you mark each muscle on the recovery map is also treated as health data. Bellows works without any of these. See section 3 and our Consumer Health Data Privacy Policy.

Training you create. Workouts (exercises, sets, reps, weights, times, distances, effort ratings such as RPE, supersets, intervals and notes), routines, planned sets, your calendar, training blocks (including event names and dates), progression, recovery and training load figures, and custom exercises.

Activities you record or bring in. When you record an activity in Bellows, import a file (such as GPX, TCX, FIT, JSON or CSV, including exports from StrengthLog, Strong or Hevy), or bring workouts in from Apple Health, we store each activity's type, start and end time, distance, duration, elevation, heart rate, cadence, GPS route, splits, and a simplified series of pace, elevation and heart-rate points for charts.

Apple Watch. If you use the Bellows Apple Watch app, it records your workout on the Watch: heart rate, distance, cadence (per sample and per split), the GPS route of runs, walks and rides (using the Watch's own GPS, even without your phone), and the sets, reps and weights you log, including sets you log for training partners. The Watch also measures calories, which stay on the Watch and in Apple Health and aren't sent to Bellows. The Watch keeps each workout for 30 days after it has synced to your account, and never removes a workout that hasn't synced yet. During a workout with your iPhone nearby, the Watch sends live heart rate to the phone so Bellows can show it.

Location. When you record a run, walk, hike or ride, we use your phone's or Apple Watch's precise location while recording, including with the screen locked if you allow it, to draw the route and measure distance and pace. We don't track your location at any other time. Routes also come with activities you import. Route maps hide a stretch at the start and end of each route (200 m by default; you can choose off, 500 m or 1 km). We don't store a home address.

Live tracking. Live tracking is off unless you turn it on in You → Live Tracking and choose who gets the link. Then, when you start recording a run, walk, hike or ride on your iPhone, Bellows makes a long random link and opens Messages with it filled in; nothing is sent until you tap Send. While you record, your phone sends your display name, the activity type, your recent positions, distance and time to our servers about every 15 seconds. Anyone with the link can see them on a map at bellowsfitness.com/live without signing in, so send it only to people you trust. Live tracking shows where you actually are, including at the start, so the hidden stretch on route maps doesn't apply to it. The link stops working a day after the last update, and the live data is deleted a week after the last update; the activity itself is saved as usual. The phone numbers you choose stay on your phone and never reach our servers.

Gear. Shoes, bikes and other gear you add, and which gear you used for each activity, so we can total its distance.

Profile. An optional photo, tagline and about-me. Only you and your training partners can see them. The photo is one you pick from your photo library (Bellows only receives that photo, not your library); it's resized on your phone and kept in private storage, shown only through short-lived links, and never shared with AI apps. Removing it, or asking to delete your account, deletes it right away.

Training partners. If you link with another Bellows user as training partners, either of you can log sets for the other, and you can plan weights for each other. A workout a partner logs for you is stored in your account, marked as logged by them, and waits for your review unless you turn review off. You choose what of your history each partner can see (nothing, some or everything) and whether their AI may see it too.

Guests. You can save a guest (a name only) and record sets and planned weights for them during your own workouts. Guest entries are stored in your account and don't count in anyone's stats. We never store health data for guests. If the guest later joins Bellows and links with you as a training partner, they can claim their sets, which then move to their account. Please only add someone as a guest if they're OK with it. A guest can ask us to delete their entries at privacy@bellowsfitness.com.

Gym card. The label and barcode number of any gym card you save, so it can be shown at the front desk. The camera is used only to read the barcode; we don't keep or send the image.

AI connection records. For each AI app you approve: the name it registered with, the website it returns you to, when you approved it, and its access. For personal tokens, where offered: the name you gave it, its permissions, when it was last used, and a one-way scrambled copy (we never store the token itself). And a change history: for every change to your training, who made it (you, a named AI app, a training partner, or an import), what changed, the values before and after, and when. This powers approvals, Recent changes and Undo.

Feedback you send. When you use Send Feedback or "Something wrong? Tell us": your note, an optional screenshot, an optional debug log, your app version and your phone model and iOS version. Your note is saved on your phone first, then emailed to us. A screenshot can show whatever was on your screen, so check it before you send it. If you turn on the screenshot prompt, Bellows only notices that you took a screenshot; it doesn't send the screenshot unless you choose to.

Anonymous usage counts. Unless you turn them off, the app sends short usage counts: a random number created when the app is installed, the name of the event (for example "screen viewed" or "workout finished"), a few fixed details (which screen, feature or setting, and a count), the app version, the platform and the time. They are sent without your sign-in, aren't linked to your account, and never include your name, email, workouts, health data, notes or anything you type.

Anonymous crash reports. Unless you turn them off (You → Privacy), the app sends a report when it crashes: the error, app version, device model and iOS version. They aren't linked to your account and don't include your training or health data.

Debug log. The app keeps a short log of screens opened, taps and errors on your phone to help find bugs. It stays on your phone unless you attach it to feedback.

TestFlight. If you test Bellows through Apple's TestFlight, Apple shares with us what its TestFlight terms describe, such as crash reports, the feedback and screenshots you send through TestFlight, and your name or email if you gave it to Apple for testing.

Emails you send us. If you email any bellowsfitness.com address, we receive your message and email address.

Technical data. Our hosting providers keep standard server logs (such as IP address, device or browser type and request times) for security and troubleshooting.

What we don't collect. Contacts, photos (other than a profile photo you choose and a screenshot you choose to send), advertising identifiers, payment details (Bellows is free during testing), or your location outside the recording described above. The website and web app don't use advertising or tracking cookies.

2. How we use it

1. To run Bellows: store, sync and show your training on your phone and the web, including offline.
2. To give you suggestions: progression, recovery, training load, heart rate zones and estimates.
3. To let the AI apps you approve read and change your training at your direction.
4. To share with your training partners only what you choose, plus your name, photo, tagline and about-me.
5. To keep your account and data safe: sign-in, approvals, the change history and Undo, Recently Deleted, protection against two phones overwriting each other, security monitoring and abuse prevention.
6. To fix problems and improve Bellows, using your feedback and the anonymous usage counts and crash reports.
7. To contact you about your account: sign-in codes, replies to your feedback and important service notices. We won't send you marketing email unless you opt in.

We don't sell or rent your data, share it for advertising, build advertising profiles, use health or fitness data for advertising, marketing or data mining, or use your data to train AI models. Bellows' own servers don't send your data to any AI model; only AI apps you approve can read it.

3. Health data and Apple Health

1. Your yes comes first. Before Bellows saves heart rate and workouts from Apple Health or your Apple Watch, it asks on its own Health Data screen (Allow or Not Now); Apple's permission sheet comes after, and Bellows doesn't ask Apple at all if you choose Not Now. A yes on your iPhone or your Watch counts for both. Bellows reads Apple Health, and records heart rate on your Apple Watch, only after that yes and only what you allow in Apple's screen. Separately, it saves your birth year, gender, height and weight only after you turn on health data saving ("Save my birth year and gender as health data"). We record that choice and when you made it. You can turn it off at any time in You → Privacy to stop saving them, and ask us to delete what's saved.
2. Reading from Apple Health. Bellows reads only what you allow in Apple Health, such as workouts, workout routes, heart rate and distance, and, if you use "Fill from Apple Health" with health data saving on, height and weight. You can change this at any time in the iPhone's Settings → Health → Data Access & Devices → Bellows.
3. Saving to Apple Health. If you allow it, Bellows saves workouts you record in Bellows, on your iPhone or Apple Watch, to Apple Health, with a reference so the same workout isn't saved twice. You can turn this off in the same place.
4. Where it's kept. Health data is stored in your Bellows account with the rest of your training, so it's on the web and your other devices. It isn't stored in iCloud by us.
5. Who it goes to. Only (a) AI apps you approve, (b) training partners you choose to share with, and (c) the service providers in section 5 that host Bellows for us. A connected AI can read your birth year, gender, height and weight only if you turn on "Connected AIs Can Read It" in You → Privacy (off by default, and only available once health data saving is on).
6. Never used for advertising, marketing or data mining, and never sold.

4. AI apps you connect

1. Nothing goes to an AI unless you approve it. To connect an AI app, you sign in to Bellows on our own page and approve that app on a screen that names it ("Connect [AI] to Bellows?"). The screen says the AI will be able to read your routines, schedule, training blocks and workout history, including Apple Health workouts and their heart rate, and that what it reads goes to the company behind that AI under that company's privacy policy. For AI apps we recognize from their secure return address, the screen names the company (for example, Claude by Anthropic, ChatGPT by OpenAI, Gemini by Google, Grok by xAI, Le Chat by Mistral AI, Perplexity, or Muse by Meta). If an app chose its own name and we haven't verified it, the screen warns you. Each AI app needs its own approval, so connecting a second AI asks again.
2. What it can do. Once approved, the AI can read your training, including workouts that came from Apple Health and their heart rate, and can propose or make changes on your behalf. Depending on your approval setting, changes wait for you to approve them on Today in Bellows. Every change an AI makes is labeled with that AI's name and can be undone.
3. Where your data goes. Data an AI reads goes to that AI's company and is handled under its terms and privacy policy, not this one. AI apps known to work with Bellows today include Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), Grok (xAI), Le Chat (Mistral AI), Perplexity (Perplexity AI) and Muse (Meta). Any other AI app you approve is handled the same way. Please read the privacy policy of any AI you connect.
4. Disconnecting. You can disconnect an AI app or revoke a token at any time in You → AI Connection. Its access ends right away. Data it already read stays with that AI's company under its policy.
5. Copy and paste. If you copy a Bellows prompt or export and paste it into an AI yourself, you choose what it sees; Bellows doesn't send it.
6. AI can make mistakes. Please check what it changes.

5. Who else handles your data

We use a small number of service providers to run Bellows. They process data only to provide their service to us.

We also disclose information if the law requires it (for example, a valid court order), to protect the safety or rights of people or of Bellows, or as part of a merger, acquisition or sale of the business. In a sale, this policy would keep applying to your data and we would tell you first.

6. Where your data is stored, and how it's protected

1. Your data is stored in the United States. A copy is kept on your phone so Bellows works without a signal; it syncs when you're back online.
2. It is encrypted in transit and at rest. Each account is walled off from every other by the database itself, so one person can't reach another's data through the app, the web, or an AI. Training partners get only what you share.
3. Personal tokens and Apple Watch device keys are stored only as one-way scrambled copies.
4. We look at an account's data only to fix a problem you ask us about, to investigate a security issue, or when the law requires it.
5. No system is perfectly secure. If a breach affects your data, including any sharing of your health data that you didn't authorize, we will tell you without unreasonable delay and no later than 60 days after we discover it, and notify regulators as the law requires.

7. How long we keep it

1. Your training, health data and settings: until you delete them or delete your account.
2. Recently Deleted: items you delete stay there for 7 days so you can restore them, then our daily clean-up removes them for good.
3. Change history: as long as your account exists.
4. After you delete your account: we wait 7 days in case you change your mind (signing in during that time lets you keep it). Then everything is deleted at our next daily clean-up, and removed from backups within a further 30 days.
5. Acceptance records: after you delete your account, we keep a small record (your email address, which versions you accepted, and when) for 4 years, only to show what was agreed if there is ever a dispute.
6. Anonymous usage counts and crash reports: up to 24 months. Because they aren't linked to your account, we can't pick out yours.
7. Feedback emails: up to 24 months, unless you ask us to delete them sooner.
8. Server logs: kept by our providers for a limited time, generally no more than 90 days.
9. Profile photo: until you remove it. If you ask to delete your account, it's deleted right away rather than after the 7-day wait.
10. Live tracking: the link stops working a day after the last update, and the live data is deleted a week after the last update. The activity itself is kept like any other.

8. Your choices and rights

1. See and change your data in the app.
2. Export all your data as a file under You → Import and Export.
3. Turn health data saving (birth year, gender, height and weight) on or off, and choose whether connected AIs can read it ("Connected AIs Can Read It"), under You → Privacy.
4. Turn off usage counts and crash reports under You → Privacy.
5. Choose what each training partner can see, or end the partnership.
6. Disconnect AI apps and revoke tokens under You → AI Connection.
7. Turn live tracking on or off under You → Live Tracking.
8. Stop Apple Health access in the iPhone's Settings → Health.
9. Delete your account in the app under You → Delete Account. After a 7-day wait (sign in to cancel), this deletes your training, health data, settings, guests and AI connections. Workouts you logged for a training partner, and sets a guest claimed, belong to them and stay in their accounts. Data an AI already read stays with that AI's company.

Depending on where you live, you may have the right to know what we collect, get a copy, correct it, delete it, withdraw consent, and opt out of sale, targeted advertising or profiling (we do none of these). To use these rights, use the app or email privacy@bellowsfitness.com from the address you sign in with, so we can confirm it's you. We respond within 45 days and won't treat you differently for using your rights. If we decline your request, you can appeal by replying to our answer with "Appeal" in the subject; we answer appeals within 45 days.

Do Not Track and Global Privacy Control. We don't track you across other sites or apps, so a Do Not Track signal doesn't change anything. We treat a Global Privacy Control signal as a request to opt out of sale and targeted advertising, which we don't do anyway.

App Store privacy label. On the App Store, Bellows lists Contact Info, Health & Fitness, Location, User Content, Identifiers, Customer Support and Other Data as linked to you; anonymous Usage Data, Diagnostics and an install ID as not linked; and nothing used to track you.

9. Who Bellows is for

Bellows is for adults 18 and older in the United States. If you enter a birth year, it must show you're 18 or older. We don't knowingly collect data from anyone under 18. If we learn that we have, we will delete it. If you believe a child is using Bellows, email privacy@bellowsfitness.com.

10. Changes to this policy

We'll post any update here and change the version and date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect, and ask for your consent again where the law requires. If you keep using Bellows after an update takes effect, the updated policy applies to you, but we never treat continued use as your consent to collect or share health data. If you object to an update, stop using Bellows and delete your account.

11. Contact us

Bellows Fitness LLC, 121 S Broad St., 15th Floor PMB 1100, Philadelphia, PA 19107, USA. Privacy questions and requests: privacy@bellowsfitness.com. Security issues: security@bellowsfitness.com. Everything else: contact@bellowsfitness.com.