Privacy Policy

Effective: September 28, 2026

Max Power (“Max Power,” “we,” “us”) is operated by Unhinged Ventures. This policy explains what we collect, why, who we share it with, and the control you have over it.

Information we collect

• Account information. The email address and password you use to create an account. Passwords are stored only in hashed form by our authentication provider; we never see your plaintext password.
• Your photo. A selfie you choose to upload so the app can generate your avatar. This is optional to the extent the avatar feature is optional; if you don’t upload a photo, avatars can’t be generated.
• Your build. The body type you pick during setup (slim, average, heavier, or athletic). It sets the starting point of your avatar.
• Your activity. The goals and tasks you set and complete, your progress and level across the four pillars (Mind, Body, Wealth, Soul), and how you use core features.
• Your journal. What you write in check-ins and reviews: your intention for the day, what went right, what went wrong, and the one thing you’ll fix.
• Your measurements. Any numbers you choose to log against a goal, such as body weight or revenue, with the unit you name.
• Purchase information. Your subscription status and entitlements. Payments are processed by Apple — we do not receive or store your card or payment details.
• Diagnostics and analytics. Crash and error reports, performance traces, and product-usage events, used to keep the app stable and fast and to understand which features are used. These are tied to your account ID and email address so we can find and fix problems you run into. This is first-party analytics, not advertising tracking.

How your photo is used (AI avatar generation)

When you upload a selfie, it is stored in our secure storage (Supabase) and sent to our AI provider, OpenAI, together with the build you picked, solely to generate your avatar. Two OpenAI models are involved: gpt-5.4-mini reads the photo to describe your features so the avatar still looks like you, and gpt-image-2 draws the avatar. Your photo and the resulting avatar are associated with your account and are not shared with other users. Per OpenAI’s API terms, your images are not used to train their models.

We keep your original selfie, not just the avatar made from it, until you delete your account. Deleting your account removes both (see below).

How we use your information

To provide and operate the app; to generate your avatars; to track your progress; to manage your subscription; to keep the service secure and stable; to respond to support requests; and to comply with legal obligations. We do not sell your personal information.

Service providers

We share data only with the providers needed to run the app:

• Supabase — database, file storage, and authentication (hosts your email, account, activity, journal, measurements, build, photo, and avatar).
• OpenAI — avatar generation from your selfie and your build.
• RevenueCat — subscription management and entitlement checks (receives your account ID).
• PostHog — product analytics (receives your account ID, email address, and usage events).
• Sentry — crash reporting and performance tracing (receives your account ID and email address with each report).
• Apple — app distribution and payment processing.

Each processes data only to provide its service to us.

Tracking

We do not track you across other companies’ apps or websites, and we do not share your data with data brokers or advertising networks for cross-app advertising.

Data retention and deletion

We keep your data while your account is active. You can permanently delete your account at any time from Settings → Delete Account inside the app. Deletion removes your account, your uploaded photo, your generated avatar, and your associated activity, journal, and measurement data. You may also email us at andrew@unhingedventures.com to request deletion.

Children

Max Power is intended for adults and is not directed to children under 18. We do not knowingly collect information from children.

Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No system is perfectly secure, but we work to protect your information and to address issues promptly.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, use in-app deletion or contact andrew@unhingedventures.com.

International transfers

Our providers are located in various countries, including the United States. By using the app, you understand your information may be processed in those countries.

Changes to this policy

We may update this policy. Material changes will be reflected by updating the effective date and, where appropriate, notifying you in the app.

Contact

Questions: andrew@unhingedventures.com.