Privacy Policy
How Muster.Fit collects, uses, and protects your information.
Last updated July 30, 2026
Overview
Muster.Fit ("Muster.Fit," "we," "us") respects your privacy. This Privacy Policy explains what information we collect when you use our mobile app and website, how we use it, and the choices you have.
Muster.Fit is built around a core principle: your detailed health readings stay on your device. We collect only what we need to run accounts, squads, accountability features, and optional cloud sync of non-medical preferences.
Information we collect
Account and profile information you provide, such as:
Name, email address, and password (authentication)
Birth year, city, state, zip code, and optional profile photo
Health goals, motivations, commitment timeline, and onboarding preferences
Squad visibility settings and notification preferences
Referral codes you enter or share
Information stored on your device (not uploaded)
The following health and activity data is stored locally on your phone using encrypted on-device storage (MMKV) and is not uploaded to our servers:
Weight, waist, blood pressure, and lab values
Workout logs, sleep, protein, steps, and similar daily check-in entries
Detailed wellness and readiness notes
Cloud summaries (not raw health readings)
Daily check-in streaks and discipline point totals may sync to Supabase for squad leaderboards — summary totals only, never raw health readings.
When enabled, automatic squad channel check-in posts share behavioral summaries (streak length and points earned) with your squad — never weight, vitals, or other health readings.
Squad channel content
Messages, photos, videos, voice notes, PDFs, and links you post in a squad channel are stored on our servers (Supabase) so squad members can view them. Video and voice notes are kept for about 90 days; photos and PDFs longer. When media nears expiry, you may see an in-app reminder in the channel. Expired media is removed when a squad member opens the channel — not on a fixed daily schedule. Squad leaders may pin or remove posts per squad guidelines.
Information collected automatically
Device push notification tokens when you enable notifications (via OneSignal)
Basic usage needed to operate the service (e.g., session authentication, error logs)
Payment status and subscription identifiers from Stripe (we do not store full card numbers)
Event RSVPs, squad membership, and leaderboard summaries
Squad channel messages and shared media you choose to post
How we use information
Provide and maintain your account, squads, and accountability features
Send optional push notifications and email you request (e.g., friend invites)
Process membership payments through Stripe
Improve safety, prevent abuse, and comply with law
Respond to support requests and privacy rights requests
How we share information
We do not sell your personal information. We share data only as follows:
With other members according to your squad visibility settings (e.g., display name, photo if enabled, discipline points)
With service providers who help us operate Muster.Fit (Supabase, Stripe, OneSignal, Resend for transactional email) under contractual obligations
When required by law, to protect safety, or to enforce our Terms
Your choices
Adjust squad visibility toggles in Profile → Privacy & data
Manage notification preferences in Profile → Notifications
Disable push notifications in your device settings
Delete your account in Profile → Manage account (removes cloud profile; local device data remains until you uninstall)
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to opt out of certain processing.
To exercise these rights, email support@muster.app with the subject line "Privacy Request." We will verify your identity before fulfilling requests. California residents may also have rights under the CCPA/CPRA — contact us for details.
Data deletion
You can delete your Muster.Fit account at any time from Profile → Manage account (or the equivalent account menu). Deletion removes your cloud account and associated profile data from our primary systems, including authentication credentials, profile fields, avatar files we store, squad memberships tied to your account, and related cloud records that cascade from your user id.
When you delete your account we also attempt to cancel active Stripe subscriptions linked to your customer id. Payment processors may retain billing records as required for tax, fraud prevention, and legal compliance.
On-device health and activity data stored locally (MMKV) is not deleted from your phone when you delete your cloud account. Uninstall the app or clear app data on your device to remove that local data.
Content you shared with others (for example squad channel messages or event descriptions) may remain visible in anonymized or reassigned form where needed for community continuity, or may be removed where our systems cascade deletes. Ticketed events you host may block deletion until they are reassigned or resolved.
You may also request deletion or other privacy rights by emailing support@muster.app with the subject line "Privacy Request." After we verify your identity, we aim to complete verified deletion or access requests within 45 days (or sooner if required by applicable law), and will tell you if we need a lawful extension.
Cloud account deletion: Profile → Manage account → Delete account
Privacy / deletion requests by email: support@muster.app (subject "Privacy Request")
Local health data: remains on-device until you uninstall or clear app storage
Processors (Supabase, Stripe, OneSignal, Resend) may retain limited records under their own legal and contractual obligations after we request cleanup
Data retention
We retain account and profile data while your account is active.
After account deletion, we remove personal cloud profile data from production systems promptly, subject to limited retention needed for security logs, backups, dispute resolution, fraud prevention, tax/accounting, and legal compliance. Backup copies typically roll off on our normal backup cycle (generally within 90 days) unless a longer hold is required by law or an active investigation.
Squad channel video and voice notes are retained for about 90 days as described above; other operational logs are kept only as long as reasonably necessary to operate and secure the Platform.
On-device health data is under your control and is not deleted from your phone when you delete your cloud account.
Security
We use industry-standard measures to protect data in transit and at rest on our servers. No method of transmission or storage is 100% secure; use a strong password and keep your device updated.
Children
Muster.Fit is not directed to anyone under 18. We do not knowingly collect information from children. Contact us if you believe a minor has provided personal information.
International users
Muster.Fit is operated from the United States. If you access the Platform from other regions, you consent to processing in the U.S. where permitted by law.
Changes
We may update this Privacy Policy. We will post the revised policy and update the "Last updated" date. Material changes may also be communicated in-app or by email where appropriate.
Contact
Privacy questions or data requests: support@muster.app
This document is provided for transparency. Have your attorney review before relying on it for compliance decisions.