Nlongvity

Privacy Policy

Last updated: October 8, 2026 · Effective date: At App Store launch

The short version

Your data is yours. MAXIMIZE stores only what the app needs, on servers in the EU, shares it with nobody for advertising, sends the AI coach the minimum it needs to answer you, tells you when an answer was written by an AI model, and lets you export or delete everything from inside the app.

This summary is here to be read. It does not replace the sections below, and where the two differ the sections below are what apply.

This Privacy Policy describes how MAXIMIZE (listed on the App Store as "Maximize Performance", bundle identifier com.maximize.app) processes personal data. It is written to comply with the EU General Data Protection Regulation (GDPR) as incorporated into Norwegian law by the Personal Data Act of 15 June 2018 (personopplysningsloven). Our supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).

MAXIMIZE processes data concerning your health — training, sleep, recovery, body weight, injuries and limits you tell us about, and daily summaries from Apple Health if you connect it. This is a "special category" of personal data under Article 9 GDPR, requiring stronger protection than ordinary personal data.

1. Who we are

Nikolai Langsem (trading as Nlongvity), a sole proprietorship registered in Norway
Oslo, Norway
Contact: hello@nlongvity.com
Privacy contact: privacy@nlongvity.com

We are the data controller for the personal data described below. We have not appointed a Data Protection Officer, because Article 37 GDPR does not require one at our scale. We will appoint one if that changes.

2. How MAXIMIZE is built

  • You can use MAXIMIZE without an account. Your profile, goals, schedule, daily plan, check-ins, workouts and sleep entries then stay only on your phone, in the app's private storage.
  • An account syncs the same records to our servers so you can restore them on a new phone and use the AI coach. Accounts are created with Sign in with Apple, Sign in with Google or a one-time email code.
  • Our servers are in the European Union. Account data is hosted in the EU (Ireland) by Supabase, Inc. under a data processing agreement, encrypted in transit and at rest, and isolated per user by database policy (row-level security).
  • The coach's replies are generated in real time by an AI model. Your message, the last eight turns of the thread and a small, fixed set of your app data are sent to our AI provider (Anthropic) to write each reply. They are not used to train its models. Each coach reply carries an AI label in the app.
  • Calendar contents never leave your phone. Apple Health raw samples never leave your phone either; only daily summaries, and the sleep and weight entries derived from them, sync — and only after you turn health sync on.

3. What we collect and why

We collect only what the app needs to work. Most of it is data you enter yourself.

  • Account data — your email address (with Sign in with Apple, the address or private relay address you choose to share), the identifier Apple or Google passes to us, and the name Apple or Google passes on if you allow it. Sign-in and account emails (your email address and a one-time code) are delivered by Resend. Purpose: signing you in and syncing your data. Legal basis: performance of our contract with you (Article 6(1)(b)).
  • Profile and goals — birth year, sex (optional), height, weight, training experience, goals, schedule, equipment, injuries or limits you tell us about, and your mode. Purpose: building your plan. Legal basis: your explicit consent for health-related data (Article 9(2)(a)); contract for the rest.
  • Activity you log — workouts, sets and loads, check-ins (energy, stress, soreness, mood, sleep quality), sleep entries, body weight, plan outcomes and preferences. Purpose: tracking progress and adapting the plan. Legal basis: explicit consent for health-related data.
  • Apple Health summaries — daily totals for steps, walking and running distance, active energy, resting heart rate, heart-rate variability, VO2 max, sleep minutes and workout count. Body weight read from Apple Health is stored as a weight entry. Only if you connect Apple Health and turn on health sync. Raw samples never leave your phone. Legal basis: explicit consent, which you can withdraw in Settings → Apple Health & Calendar. See section 5.
  • Calendar — read on your device to find free time windows for your plan. Calendar contents are never uploaded. Legal basis: your device permission; no server processing.
  • Coach conversations — the messages you write and the coach's replies, together with the small context the coach receives (section 4). Purpose: answering you and keeping the conversation. Legal basis: your explicit consent (“Allow AI answers”, asked before the coach's first answer), which you can withdraw in Settings → Privacy & Security.
  • Research requests — the questions you ask the evidence feature, stored with your account, and the summaries it produces. The research topic itself is stored de-identified, under a title derived from the keywords in your question, and the resulting evidence claims are shared with other users who ask about the same topic; nothing in a shared topic identifies you. Purpose: answering you. Legal basis: contract.
  • Subscription data — your App Store transaction identifiers, the product you bought, its status, renewal dates and the store environment. Purchases are validated with Apple by RevenueCat, which links them to your MAXIMIZE account identifier (a random ID, never your email or name); our server then reads the result from RevenueCat and decides what your plan unlocks. Never your card details. Purpose: unlocking MAXIMIZE Pro. Legal basis: contract.
  • Technical data — server logs and audit records carrying your account identifier and timestamps. Purpose: keeping the Service secure and working, and demonstrating compliance. Legal basis: our legitimate interest in running a reliable service (Article 6(1)(f)).
  • Crash reports — only in builds where crash reporting is enabled: device model, operating system version, app version and the error text. Crash reports are not linked to your account. Legal basis: legitimate interest (Article 6(1)(f)).

We do not run product analytics, we do not sell personal data, and we do not use it for advertising.

4. What is sent to our AI provider when you talk to the coach

Nothing is sent until you allow it. The first time you open the coach or research, the app shows this list and asks you to allow AI answers. You can turn that off again in Settings → Privacy & Security; the coach and research then stop, and the rest of MAXIMIZE keeps working.

The coach's replies and the evidence summaries are generated by an AI model operated by Anthropic (Claude); in the app, each coach reply carries an AI label. The context the coach receives is an allow-list enforced on our server: anything outside it is dropped before the request is made. This is the fullest disclosure in this policy, and it is the one to read closely. With each message we send:

  • Your message (up to 2,000 characters) and the last eight turns of the same conversation thread.
  • The local date and time on your phone, and your units (metric or imperial).
  • Your mode (for example Build, Shred or Longevity) and how you described today (normal, busy, low energy, travel or recovery).
  • Up to five goals, your training experience, your equipment, and up to ten constraints or limits you have told us about — for example an injury, a heart condition, daily medication, or that you are pregnant or postpartum.
  • Your recovery band for today (low, moderate or good) and the reasons behind it, and today's check-in scores for energy, stress, soreness and sleep quality (each 1 to 5).
  • Today's plan items — their titles, durations, status and scheduled times. Nothing from your calendar is sent.
  • A training summary: your programme title, your next session, sessions in the last seven days, up to five recent sessions with effort and sets logged, and up to five top lifts with an estimated one-rep max.
  • Today's protein and calorie figures, and last night's and your seven-day average sleep minutes.

Two of these deserve to be named. If you have turned on Apple Health sync, the sleep minutes and the recovery band can be derived from Apple Health summaries. That is the only route by which anything read from Apple Health reaches our AI provider. Turning health sync off in Settings stops it.

What is never sent: your calendar contents, your notes, your email address or name, your full log history, and raw Apple Health samples. Your account identifier is not sent either; the request is made by our server on your behalf.

Anthropic processes these requests as our processor under its commercial terms. It does not use them to train its models. It may retain the inputs and outputs for a limited period for abuse and misuse monitoring, after which they are deleted.

Evidence lookups send keyword search terms derived from your question — never your name, account or other personal data — to the public research databases PubMed (run by the US National Center for Biotechnology Information) and Semantic Scholar. The text of your question and the abstracts of the papers found are then sent to the same AI provider to be summarised.

5. Apple Health and calendar

If you allow it, MAXIMIZE reads the following from Apple Health on your device:step count, walking and running distance, active energy, resting heart rate, heart-rate variability (SDNN), VO2 max, sleep analysis, workouts (count only) and body mass. Access is read-only: MAXIMIZE never writes to Apple Health and requests no write permission.

Raw samples are read and reduced to daily summaries on your phone. Body weight is stored as a weight entry, and sleep as a sleep entry. Those summaries and entries are uploaded to your account only if you turn on health sync ("Sync daily summaries to my account") in Settings → Apple Health & Calendar; with health sync off, nothing read from Apple Health leaves your phone. A health-derived entry never overwrites something you typed in yourself for the same date.

MAXIMIZE reads your device calendar, on the device, to find free time windows. Calendar entries are never uploaded and never stored by us. You control both permissions in iOS Settings at any time.

6. Legal basis for health data (Article 9)

We rely on Article 9(2)(a) — your explicit consent, asked for twice and recorded separately with the version you agreed to: in onboarding, for processing your health-related data to build your plan; and the first time you use the coach or research, for sending the data listed in section 4 to our AI provider (“Allow AI answers”). The rest of MAXIMIZE works without the second one. That consent is:

  • Freely given — MAXIMIZE is not required for anything else, and nothing else is conditional on it.
  • Specific — it covers operating MAXIMIZE as described in this policy.
  • Informed — this policy states what is processed and what is sent to our AI provider.
  • Unambiguous — you confirm it with an explicit action (a switch in onboarding, a button in the coach or research); it is never pre-ticked.
  • Withdrawable at any time:
    • Delete your account in Settings → Privacy & Security. That removes everything our servers hold about you and clears the app's data on your phone.
    • Turn off “Allow AI answers” in Settings → Privacy & Security. The coach and research then send nothing until you allow it again.
    • Erase the data on this phone in Settings → Privacy & Security if you use MAXIMIZE without an account.
    • Turn off health sync in Settings → Apple Health & Calendar, or revoke Apple Health access in iOS Settings.
    • Revoke a permission (Apple Health, calendar, notifications) in iOS Settings at any time.

Withdrawing consent does not undo processing that already took place lawfully.

7. Sub-processors and international transfers

We share personal data only with processors that act on our instructions:

  • Supabase, Inc. — under a data processing agreement: your account, synced records, coach conversations, subscription status, export files, logs and audit records. Hosted in the EU (Ireland).
  • Anthropic — your message, the last eight turns of the thread and the context described in section 4; for research, your question and the abstracts of the papers found. Processed under Anthropic's commercial terms: not used for training, and retained only for a limited period for abuse monitoring. United States, under the European Commission's Standard Contractual Clauses.
  • Apple — Sign in with Apple; App Store subscriptions, where Apple is the seller; and, if you enable it, Apple Health on your device.
  • RevenueCat, Inc. — validates App Store purchases and keeps subscription status: your MAXIMIZE account identifier, your App Store receipts and purchase history, and technical data its software sends with each request (app and operating system version, store country and IP address). No health data, email address or name. United States, under Standard Contractual Clauses. Deleting your account deletes your RevenueCat record.
  • Google — only if you choose Sign in with Google: Google confirms who you are and passes us your email address and name. Google handles your Google account under its own privacy policy.
  • Resend, Inc. — delivers sign-in and account emails: your email address and the one-time code. United States, under Standard Contractual Clauses.
  • Sentry — crash and error diagnostics, only in builds where crash reporting is enabled: device model, OS version, app version and error text, not linked to your account. May process data in the United States under Standard Contractual Clauses.
  • PubMed (NCBI) and Semantic Scholar — receive keyword search terms derived from your question for evidence lookups, never your personal data.

Where a processor outside the EEA is certified under the EU–US Data Privacy Framework we rely on that; otherwise on Standard Contractual Clauses with additional safeguards.

8. Your rights under GDPR

  • Access (Article 15) — most of your data is visible in the app. For a full copy, use Settings → Privacy & Security → Export, or email privacy@nlongvity.com.
  • Rectification (Article 16) — edit your profile, goals and entries in the app, or ask us.
  • Erasure (Article 17) — delete your account in Settings → Privacy & Security, or see Delete your account.
  • Restriction (Article 18) — email us.
  • Portability (Article 20) — Settings → Privacy & Security → Export gives you everything as machine-readable JSON, on the spot. "Export data on this phone" works offline; "Export account data" builds a file from the server and hands you a signed download link that is valid for 15 minutes. The file itself is deleted after 24 hours; you can request a new one at any time.
  • Object (Article 21) — email us, for processing based on legitimate interest.
  • Automated decision-making (Article 22) — MAXIMIZE builds your daily plan and coach replies automatically from your data, the latter with an AI model, and each coach reply carries an AI label in the app. These are recommendations you can ignore or change; they have no legal or similarly significant effect on you. No profiling is used for advertising.
  • Withdraw consent (Article 7(3)) — see section 6.

We answer within 30 days (Article 12(3)). You may also complain to Datatilsynet (postkasse@datatilsynet.no), or to the supervisory authority where you live.

9. Security

  • Everything in transit is encrypted with TLS.
  • Server-side data is encrypted at rest by our hosting provider and isolated per user by database policy.
  • Data on your phone lives in the app's private storage; your session token is held in the iOS Keychain, encrypted by the operating system.
  • Sign-in is handled entirely by Supabase Auth, Sign in with Apple and Sign in with Google. MAXIMIZE has no passwords: email sign-in uses a one-time code.
  • Purchases are validated with Apple (through RevenueCat) and confirmed by our server before Pro is unlocked; the app cannot unlock Pro on its own.
  • Access to production systems is limited to the operator, and is logged by Supabase, our hosting provider, in their own access logs.
  • Rate limiting and request size limits are enforced server-side.

No system is perfectly secure. Tell us at privacy@nlongvity.com if you find a problem.

10. Children

MAXIMIZE is not for anyone under 16, and onboarding does not let you continue if the birth year you enter makes you younger than that. We do not knowingly collect their data; if you believe a child has created an account, contact us and we will delete it.

11. How long we keep things

  • On your phone: until you reset it in Settings, delete your account, or delete the app.
  • Account and synced records: for as long as you have an account.
  • Coach conversations and research requests: for as long as you have an account. There is no separate button to clear them; deleting your account removes them.
  • Export files: the signed download link is valid for 15 minutes, the file is deleted after 24 hours, and in any case when you delete your account.
  • Server logs and audit records: purged after 12 months, identifying you only by account identifier.
  • Subscription records: after you delete your account, the App Store subscription record (transaction identifiers, product, status and store environment) is kept with your account identifier removed, so that Apple renewals and refunds can still be handled and our bookkeeping obligations met. It is no longer linked to any profile. Your RevenueCat record is deleted at the same time.

If you delete your account, your data is removed from our servers within minutes. Our hosting provider's backups roll over on their own schedule, so deleted data drops out of backups typically within 30 days.

12. Changes to this policy

We will update this page and change the date above. We will tell you in the app before material changes take effect, and ask again for consent where the law requires it.

13. Contact

Nikolai Langsem (trading as Nlongvity), a sole proprietorship registered in Norway
Oslo, Norway
General enquiries: hello@nlongvity.com
Privacy questions and requests: privacy@nlongvity.com