← Back to State Performance

Privacy Policy

Last updated: April 16, 2026

State ("the app") is developed and operated by Nepo Peña, an independent developer based in the Dominican Republic. This policy describes how the app collects, uses, and protects your data.

Contact

For privacy-related questions or requests, contact: privacy@stateperformance.app

Data We Collect

Account data: Email address, name, and authentication credentials you provide when creating an account.

Health and fitness data: Workouts, body measurements, nutrition logs, hydration, supplement intake, nightly journal entries, bloodwork results, and readiness scores. This data comes from your manual input, Apple HealthKit (with your permission), and third-party services you choose to connect (Whoop, Strava, Withings, Fitbit).

Location data: GPS route data collected during tracked cardio sessions (runs, walks) when you grant location permission. Location tracking is only active during a tracked session and stops automatically when the session ends.

Photos: Progress photos are stored locally on your device in the app's private storage and are not uploaded to our servers.

How We Use Your Data

We use your data exclusively to provide app functionality directly to you, including readiness scoring, training guidance, workout tracking, nutrition tracking, meal planning, body composition tracking, supplement recommendations, and data sync across devices.

We do not use your HealthKit data, fitness data, health data, or location data for advertising, marketing, or cross-app tracking. We do not sell your data to third parties.

Data Processing and Storage

Data is processed both on-device and through our backend infrastructure (Convex). OAuth tokens are stored securely in the device Keychain. Client secrets for third-party services are stored server-side and never included in the app.

Data Retention

We retain your data for as long as your account is active. You can delete your data at any time:

Third-Party Services

The app integrates with Apple HealthKit, Whoop, Strava, Withings, and Fitbit – each governed by their own privacy policies. We only access data you explicitly authorize. You can disconnect any integration at any time from Settings.

Your Rights

You have the right to access your data (visible within the app), export your data (PDF reports), delete your data (Delete Account in Settings), and withdraw consent for connected services (disconnect in Settings).

Children's Privacy

State is not directed at children under 17. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app after changes constitutes acceptance.

Governing Law

This policy is governed by the laws of the Dominican Republic.