Privacy Policy

Effective 2026-10-26

This Privacy Policy describes how Mott House LLC ("we", "us") collects, uses, and shares information when you use Stelvo (the "Service").

1. Information we collect

1.1 You provide directly

• Account: email address, name, optional username and avatar image. If you sign in with Apple, we receive a unique user identifier and the email or relay address you authorize Apple to share.
• Onboarding answers: your stated training goal, experience level, available equipment, training frequency, focus areas, and any injuries or limitations you choose to enter.
• Training data: workouts, exercises, sets, reps, weights, routines, planned sessions, and notes you log.
• Body measurements: if you enter them — height, weight, body composition, etc.
• Body-scan photos: if you choose to take or upload a full-body photo during onboarding (or later from Settings) so the AI can produce an approximate body-composition estimate used to personalize your training plan. Photos are stored privately. We derive a qualitative body-type label, a body-fat percentage estimate, shown to you on the scan result and on the scan card you can choose to share yourself (an approximate estimate from a single photo, not medical advice), and posture / focus-muscle notes. You can view and delete every scan individually from Settings → Body scans. Photos are used only to personalize your plan and, if you choose, in the scan card you share yourself — never in advertising or marketing to anyone else, and never shared by us.
• Coach interactions: messages you send to the AI coach and durable facts the coach stores about you (you can view and delete these from the in-app memory screen), and a log of changes to your plans and workouts — what was planned, by whom and why — that the coach reads as context. It is deleted with your account.

1.2 Collected automatically

• Device & push: device push token (so we can send notifications), device timezone, app version, OS version.
• Diagnostics: crash reports, error stacks, and request metadata (IP address, user-agent, route hit). We use this to diagnose bugs and keep the Service running.

2. How we use information

• To provide the Service — display your workouts, generate plans, track streaks, respond to coach messages.
• To send notifications you opt into (coach nudges, etc.). You can disable these from the in-app settings or your device's OS settings.
• To diagnose errors and improve reliability.
• To enforce our Terms and prevent abuse.

3. AI coach, plan generation, and body-scan analysis

The AI coach and the automated plan generator send your messages and relevant training context (your recent workouts, profile answers, and selected coach memories) to OpenRouter, which routes them to a large language model provider (currently Anthropic Claude). We do not include your email or any direct identifier in the prompt; the LLM provider sees only your training context tied to a per-request session.

If you take a body scan, the photo (along with your stated height, weight, and goal) is sent through the same gateway to a vision-capable language model for one-time analysis. The model returns a qualitative body-type label, a body-fat percentage estimate, and posture / focus- muscle notes. The estimates are approximate and are not medical advice. Processing is subject to the gateway and inference provider policies.

By using the coach or the body-scan feature you agree to this processing. If you prefer not to use AI features, do not initiate coach conversations or take a body scan (skip the onboarding step or uninstall scans from Settings).

Illustrative progress previews

When available, users whose stated date of birth indicates they are at least 18 may receive an AI-generated 16-week progress illustration after submitting their own photo. The disclosure appears beside the selfie submission button; no separate checkbox is required. You can skip the selfie step or continue without viewing a preview.

We send the photo to fal for segmentation and image editing, and to our vision provider through OpenRouter for suitability and visual-quality checks. We configure preview requests to disable fal request-payload storage, restrict access to generated files, and expire those files after one hour. We request deletion after processing; failed deletion attempts are retried. Your birth date is used by our server to check eligibility and is not sent to these image providers. Preview photos are not used by us to train models or for marketing.

The preview may be shown back to you inside the app, including on the subscription screen at the end of onboarding. For that, a copy of the illustration (never your original photo) is kept on your device until onboarding moves on, and is deleted then or the next time the app starts. It is shown from your device and never sent to our paywall provider.

The working files of a preview are removed when the scan is claimed at signup, retaken, or the preview is dismissed. Abandoned pending artifacts expire after 24 hours and are removed by our cleanup worker.

To check the quality of these previews, we keep a copy of each generated illustration and of the original photo it was made from, stored privately and seen only by the Stelvo team, for 30 days after the preview is made; then it is deleted. Deleting your account deletes it straight away. If you didn't create an account, email support@motthouse.com and we will delete it. If you tap “This preview looks wrong”, the reason you pick is kept with it.

Generated illustrations are separate from actual progress photos and never recorded as measured results. They are not predictions or guarantees of physical changes.

4. Sub-processors

We use the following service providers to operate Stelvo:

• Fly.io — application hosting (US data centers)
• Neon — Postgres database hosting (US data centers)
• OpenRouter — LLM gateway for the AI coach and plan generator
• Anthropic — LLM inference (via OpenRouter)
• fal — progress-preview image editing and segmentation
• Sentry — error monitoring (we exclude personal data from breadcrumbs and event metadata)
• Expo — push notification delivery to Apple Push Notification service and Google FCM
• Apple — Sign in with Apple (if you use it), App Store, in-app purchase
• RevenueCat — subscription management and receipt validation (if you subscribe)
• Superwall — presents subscription offers in the app; receives device information, an anonymous or account identifier, and paywall and purchase events — never your photos
• PostHog — product analytics: in-app usage events and recordings of app sessions, with typed text and all images masked so photos are never captured
• AppsFlyer — install attribution (which ad, if any, led to the install); it uses your device's advertising identifier only if you allow tracking under Apple's App Tracking Transparency

5. Data we do not collect

We do not sell or rent your personal information. We do not show ads in the app. The analytics and attribution services we do use are listed under Sub-processors above; your device's advertising identifier is used only if you allow tracking under Apple's App Tracking Transparency.

6. Where data is stored

Your data is stored on servers located in the United States. If you use Stelvo from outside the US, you consent to your data being transferred to and processed in the US.

7. How long we keep your data

We keep your data for as long as your account exists. When you delete your account from inside the app (Settings → Account → Delete account), every database row tied to your account is permanently erased in a single transaction. Server log files containing your IP address are retained for up to 30 days. Backup snapshots of the database may retain your data for up to 35 days before they roll out of the retention window.

8. Your rights

• Deletion: Settings → Account → Delete account removes your account and all associated data immediately. There is no recovery after this action.
• Access & export: email us at support@motthouse.com and we will send you a machine-readable export of your account within 30 days.
• Correction: most fields are editable directly from the app's Settings.
• Withdraw consent: stop using the app and delete your account.

9. Minors

Stelvo is for adults only. It is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If you believe a minor has provided us their information, contact us and we will delete it.

10. Changes to this policy

We will post any material changes to this URL and update the "Effective" date above. Continued use of the Service after a change constitutes acceptance.

11. Contact

Mott House LLC · New York, United States · support@motthouse.com