Legal

Privacy Policy

Effective date: August 14, 2026 · Replaces the version of May 21, 2026 · Applies to the Versus iOS application and to versus24.net

This privacy policy applies to the Versus app (referred to as the "Application") for mobile devices, developed by Aadit Singal (referred to as the "Service Provider") as a freemium service, and to the versus24.net website. This service is provided "AS IS".

Information We Collect

The Application collects information you provide when you register and use it. This includes:

• Email address
• First and last name
• Age (stored as approximate date of birth)
• Gender

The Application also collects the training and body data you enter or import: sessions, exercises, personal records, skill-tree progress, competition and fight records, body measurements, progress photos, the nutrition you log (calories, macronutrients, fibre, sugar, sodium, and water), and the GPS route of any outdoor endurance session you record.

The Application also collects certain information automatically, including the type of mobile device you use, your device's unique ID, IP address, mobile operating system, browser type, and information about how you use the Application.

This website. versus24.net is covered by this policy too. If you join the waitlist, it records your email address along with the page you signed up from and any campaign parameters in the link you followed. Every page also loads PostHog product analytics, which records page views and the technical details above, and derives an approximate city-level location from your IP address. The pricing pages additionally read your device's time zone and language setting to choose which currency to show. That reading happens entirely in your browser and the time zone itself is never transmitted, but the conclusion drawn from it, which storefront you were shown, is recorded as an analytics event. The privacy, terms and DMCA pages load no analytics at all.

Health and Fitness Data

The Application reads health and fitness data from Apple HealthKit, including heart rate variability (HRV) and sleep data. It is used to calculate your daily readiness score. If you switch on cycle aware training, the Application also reads menstrual cycle data from Apple HealthKit and uses it for one purpose: reflecting your cycle phase in that readiness score. This is optional and off unless you turn it on, the Application never asks for it in order to work, and you can revoke it at any time in iOS Settings under Privacy and Security, Health. Cycle data is treated as special-category health data: it stays on your device and in your own account, it is never sold, and it is never shared with advertisers. That score, and the training context derived from it, is also used by the Sensei coaching feature described below, and is visible to training partners you have accepted. Health data is never sold and never shared with advertisers. All health data processing is performed in accordance with Apple's HealthKit guidelines and applicable privacy laws.

How We Share Your Data with Other Users

The Application includes social features that share certain information with other users in your gym network and with users you have accepted as training partners. The following information may be visible to other users depending on your settings:

• Gym feed (when enabled): Your workouts (modality, duration, sRPE, training load, notes, and feed caption), personal records (exercise name, weight, reps), photos attached to feed posts, comments, and reactions are visible to members of the gyms you join.
• Training partners (when accepted): Your daily readiness score, latest session summary, and weekly training load (in arbitrary units) are visible to users you have accepted as training partners. During an active partner challenge, weekly training load is also visible to your opponent.
• Profile identity: Your display name (first name), profile photo, and gym membership are shown alongside any content visible to other users.

You control what is shared through the privacy settings in the Application, including the "Share to gym feed" and "Share PRs" toggles and per-partner acceptance. Turning a setting off prevents future sharing; it does not retroactively remove content already posted (you can delete individual posts and PRs at any time).

Information shared via these social features is shared only with the other Versus users you have a relationship with through the Application (gym co-members or accepted partners). It is never sold or shared with advertisers.

User-Generated Content

The Application allows users to submit progress photos and record body measurements through the Vanity Vault feature, and to share workouts, photos, captions, comments, and reactions through the gym feed. Vanity Vault content is stored securely in the Service Provider's cloud infrastructure and is never shown to other users. It leaves that storage only when you ask for an analysis of it, which is described under "Artificial Intelligence" below. Gym feed content is shared with other users as described in the section above. None of this content is sold to third parties or used for advertising purposes.

You can delete any individual post, comment, photo, or measurement from within the Application at any time. You can also report or block other users from the same interface; see the "Content Moderation and Safety" section below.

Content Moderation and Safety

To keep the gym feed safe, the Application provides in-app tools to report any post or comment you find objectionable and to block any other user. Reports are reviewed by the Service Provider within 24 hours. When you block a user, you no longer see their posts, comments, or reactions, and they no longer see yours. The Service Provider may also remove content or suspend accounts that violate the Terms & Conditions. We retain a record of reports, blocks, and moderation actions for safety and abuse-prevention purposes for as long as is reasonably necessary.

Push Notifications

If you grant permission, the Application sends push notifications through the Apple Push Notification Service (APNs). Notifications may be triggered by events such as a training partner logging a workout, a partner-challenge result, a new reaction or comment on your feed posts, or a partner invite. We store an opaque device token in our infrastructure so notifications can be routed to your device, and we log delivery metadata for rate-limiting and reliability purposes. You can disable push notifications at any time from iOS Settings → Notifications → Versus.

Account Discoverability

Other Versus users may look up your account by your email address in order to send you a training-partner invite. Lookups are rate-limited (currently 20 per user per day) and return only your public profile (display name and profile photo). You cannot currently opt out of email lookup; deleting your account removes you from this index.

Artificial Intelligence

The Application uses AI technologies to enhance user experience through the Sensei coaching feature. AI components may process your training history, readiness data, session logs, fight records, voice transcripts, and (where you opt in) progress photos to generate personalised coaching advice, session plans, sparring analysis, and body-composition estimates. Specifically:

• Personalised coaching responses based on your logged sessions and readiness score
• AI-generated daily session recommendations based on your training history
• Sparring debrief analysis based on post-session input
• Opponent scouting and gameplan suggestions based on structured profile data
• Structured session extraction from voice logging (see below)
• Body-composition estimates from progress photos you explicitly submit for analysis (see below)
• Meal recognition from a photo of a meal, a spoken description, or typed text (see below)
• Physique reports generated from your check-in photos and body measurements (see below)

Sensei is powered by the Claude API operated by Anthropic. The same API also performs the image and meal analysis described below. Session context, chat messages, voice transcripts, and the photos you submit for a body-fat estimate, a physique report, or a meal scan are transmitted to Anthropic for processing and returned to the Application. Anthropic acts as a data processor on the Service Provider's behalf.

None of this runs on its own. No photo, recording, or session is analysed in the background, on a schedule, or because you saved it. Each analysis below happens at the moment you ask for that particular thing, covers only the material that request needs, and does not happen otherwise.

Voice Logging. When you use the voice-logging feature, your speech is transcribed by Apple's Speech Recognition framework. If your device has a network connection, Apple performs that transcription on its own servers, which means the audio is sent to Apple; when the device is offline, transcription happens on the device instead. Apple's handling of that audio is governed by Apple's privacy policy. The resulting text transcript, and never the audio, is then sent to Anthropic's Claude API to extract structured session data such as exercise, duration, or perceived effort. The Service Provider's own servers never receive the audio.

AI Body-Composition Analysis. If you choose to use the optional body-composition estimate feature, the progress photo you submit is sent to Anthropic's Claude API to produce an estimated body-fat percentage and related metrics. The photo is fetched from storage by the Service Provider's own server function, encoded, and included in that request. A check-in you save to the Vanity Vault without asking for an estimate goes to storage and no further. Estimates are approximate and are not a medical assessment.

AI Meal Scan. If you log a meal by photograph, by voice, or by typed description, that input is sent to Anthropic's Claude API to identify the food and estimate its calories and macronutrients. A photograph you take for this purpose is sent in the same way as the photos described above. Voice input follows the same path as voice session logging described above. Nutrition estimates are approximate and are not dietetic advice.

Physique Report Card. If you request a physique report, your most recent front, side and back check-in photos are sent to Anthropic's Claude API together with your previous check-in photos, your body measurements, and your weight trend, so the report can describe what has changed over time. This is a comparison across multiple photographs rather than a single-image estimate. Reports are an opinion, not a medical or dietetic assessment.

All AI outputs are recommendations the user acts on voluntarily. No automated decisions with legal or significant personal effect are made by the Application. All AI processing is performed in accordance with this privacy policy and applicable laws.

Location Data

Outdoor endurance sessions. When you record an outdoor session (a run, a ride, or a hike), the Application uses your device's precise location to trace your route, measure distance, and record elevation, and it draws that route on a map for the session. Location is read only for the duration of such a session, including while your screen is locked so the route is not lost mid-run. It is not read at any other time, and no other part of the Application uses it.

The permission requested is "While Using the App", asked for the first time you start an outdoor session. You can withdraw it at any time in iOS Settings → Privacy & Security → Location Services → Versus. Declining does not block endurance logging: you lose the route, satellite-measured distance, and elevation, and can still log the session by hand or by voice.

The route is stored on your device with the session and synced to your account so it is available on your other devices. It is deleted when you delete the session or your account. Route data is never sold and never shared with advertisers, and it is not part of what the gym feed shares: the fields listed under "How We Share Your Data with Other Users" do not include your route.

This website is a separate case. As described under "Information We Collect", PostHog derives an approximate, city-level location from the IP address of anyone who loads a page. That is server-side geolocation of an IP address, not access to your device's location services, and it does not happen on the privacy, terms or DMCA pages.

Third Party Access

The Application relies on the third-party services listed below, each acting as a processor on the Service Provider's behalf. What each one receives differs and is stated alongside it: analytics and error tracking receive pseudonymised usage and diagnostic data, while the storage, payment, email and AI services necessarily receive the content you submit. Nothing on this list receives your data for its own advertising purposes.

The Application and this website use the following third-party services, each with their own privacy policies:

• Supabase: authentication, database, cloud storage (including photo storage), and serverless functions
• RevenueCat: subscription and payment management
• Anthropic: operator of the Claude AI used by Sensei; receives session context, chat messages, voice transcripts, and the photos you submit for body-fat estimates, physique reports, and meal scans, in order to generate coaching responses, structured session data, and those estimates
• Sentry: error tracking and diagnostics
• PostHog: product analytics
• Apple HealthKit: health and fitness data
• Apple Speech Recognition: transcribes voice logging. Receives the audio when your device is online, as described above
• Apple Maps: renders the route of an outdoor session on a map
• Apple Push Notification Service (APNs): delivery of push notifications to your device
• Google: Sign in with Google, if you choose that sign-in method. Receives the authentication request only.
• USDA FoodData Central: the public food database behind nutrition search. Receives the food term you type, and nothing that identifies you.
• Resend: delivery and list management for waitlist and product emails you sign up for on this website
• GitHub Pages: hosting for versus24.net. Server logs, including IP addresses, are handled by GitHub

Services you connect yourself. If you import training history, you export a file from that provider and upload it to the Application. The Application currently supports Strava, Garmin, Hevy, Strong and Fitbod. These imports are optional, are done one at a time by you, and the Application does not sign in to any of those services on your behalf. Imported sessions are then stored the same way sessions you log yourself are.

The Service Provider may disclose your information:

• As required by law, such as to comply with a subpoena or similar legal process
• When disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud
• With trusted service providers who work on our behalf, who have no independent use of the information disclosed to them, and who have agreed to adhere to this privacy policy

Permissions You Grant, and How to Take Them Back

The Application asks for each of the following separately, at the point it first needs it. Every one can be refused at the time and withdrawn later, and refusing one never blocks the rest of the app.

• Location (outdoor endurance sessions): iOS Settings → Privacy & Security → Location Services → Versus. Without it you lose route, satellite distance, and elevation.
• Microphone and speech recognition (voice logging): iOS Settings → Privacy & Security → Microphone, and → Speech Recognition. Without them, log by hand instead.
• Camera and photo library (progress photos, meal photos): iOS Settings → Privacy & Security → Photos, and → Camera.
• Health data (readiness): iOS Settings → Health → Data Access & Devices → Versus. Withdrawing it stops the readiness score being calculated.
• Notifications: iOS Settings → Notifications → Versus.

Opt-Out Rights

Beyond the individual permissions above, you can stop all collection by deleting your account from Settings → Account → Delete Account inside the Application, and by uninstalling it.

Data Retention

The Service Provider will retain user-provided data for as long as you use the Application and for a reasonable time thereafter. Automatically collected information is retained for up to 24 months and may thereafter be stored in aggregate form. If you would like your user data deleted, please contact us at aadit@versus24.net and we will respond within a reasonable time. Note that some data may be required for the Application to function properly.

Two specifics worth stating plainly. The GPS route of a session is kept for as long as that session is, and deleting the session or the account deletes it. Voice audio is not retained by the Service Provider at all, because it never reaches the Service Provider's servers; where Apple transcribes it online, Apple's own retention applies and is governed by Apple's privacy policy rather than by this one.

Children's Privacy

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided personal information, it will be immediately deleted from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at aadit@versus24.net.

Security

The Service Provider takes the confidentiality of your information seriously and provides physical, electronic, and procedural safeguards to protect the information we process and maintain. Access to your information is limited to authorised employees and contractors who need it to operate, develop, or improve the Application. Please be aware that no security system can prevent all potential breaches.

GDPR Rights

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to object to or restrict processing of your data
• The right to data portability

To exercise any of these rights, contact us at aadit@versus24.net.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you the following rights regarding your personal information:

• The right to know what personal information we collect, use, disclose, and share, and the categories of sources and recipients
• The right to request deletion of your personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising
• The right to limit the use and disclosure of sensitive personal information. The categories the Application holds that count as sensitive are your precise geolocation (the route of an outdoor session) and your health and fitness data. Neither is used for anything beyond the features described in this policy, and neither is sold or shared for advertising.
• The right to non-discrimination for exercising any of these rights

The Service Provider does not sell your personal information and does not share it for cross-context behavioural advertising. To exercise any of these rights, contact us at aadit@versus24.net.

International Data Transfers

The Service Provider operates from India, and the processors listed above are largely based in the United States. If you use the Application from the European Economic Area, the United Kingdom, or Switzerland, your data is therefore transferred outside that area. Those transfers are made under the data-processing terms of each provider named in "Third Party Access", which incorporate the European Commission's Standard Contractual Clauses where the provider relies on them. You can ask for details of the safeguards applying to a particular transfer at aadit@versus24.net.

Changes to This Policy

This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by updating this page. You are advised to review this policy regularly. Continued use of the Application after changes are posted constitutes your acceptance of the updated policy.

Your Consent

By using the Application, you consent to the processing of your information as described in this Privacy Policy, including any amendments made by us.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: aadit@versus24.net
Website: versus24.net