Privacy policy

What we collect

Depending on what you use, that can include:

• Account details: name, email, and an Apple sign-in identifier.
• Profile details you enter: age, gender, position, country, height, and weight.
• Training you log: programs, workouts, meals, fuel days, nutrition goals, calculated macros, combine scores, XP, and saved playlists.
• Photos and video you add, including coach exercise demonstrations, and microphone audio when a coach records a demonstration.
• Purchase status from Apple, so we know whether Fystash Pro is active. Apple processes the payment. We do not store your card.
• A device identifier used to run the app, and product interaction used to understand whether a feature works.

Why

We use this to run your plan, show your log, let a coach you are working with see the work you share, bill Fystash Pro through Apple, and keep the product reliable. Analytics is for the product, not for ads.

Coach AI

If you use Team Chat or AI search, we send the message you type and selected training facts to Sail Research and OpenRouter (Jev). Those facts can include age, gender, position, country, height, weight, your program, fuel days, nutrition goal, calculated macros, recent workouts, meals, combine scores, XP, and saved playlists.

We do not send your name, email, wall photos, or exact birthday to those processors. The replies are not used to advertise to you.

AI in the coach dashboard

Coaches who use the AI workspaces on sortiri.ai send what they type, the chat so far, the site, app, program or message they are working on, the things in their studio they point at, and any photos, PDFs or videos they attach, to AI models through OpenRouter (and, for edits to a site or an app, directly to Sail Research). OpenRouter is a service that sends each request to a host that runs the model; how it handles requests is in OpenRouter’s privacy policy. Which model answers depends on the work, and a video’s sound is heard by the model that reads it.

Every request to OpenRouter tells OpenRouter to use only hosts it lists as keeping no copy of the request and not training on it. Beyond that, a request goes only to the hosts named here:

• Claude Haiku 5.5, from Anthropic, for chat and writing: Google Cloud (Vertex AI), Amazon Web Services (Bedrock).
• DeepSeek V4.1 Flash, for edits to a site or an app: Sail Research, directly and not through OpenRouter.
• Gemini 3.1 Flash-Lite, from Google, for a message with a video or a sound in it: Google Cloud (Vertex AI).

Edits to a site or an app are made by DeepSeek V4.1 Flash, which Fystash sends directly to Sail Research and not through OpenRouter. Sail Research’s data processing agreement says it processes a request only in memory, for as long as it takes to answer, keeps no copy and does not use it to train models, and that its service providers may be in more than one country, including outside the United States.

The dashboard shows a notice that says this before a coach’s first message and again before the first file, and Settings can show it again. Only put something about a client into a chat if the client has agreed to it. The replies are not used to advertise to anyone. If this list changes, this page changes with it.

Instagram replies

Coaches can connect a professional Instagram account so that Fystash answers people for them. When someone comments a word on a post, writes to the account or replies to a story, a funnel the coach built sends the messages the coach chose. This section covers that. It applies to the coach who connects the account and to the people who write to it.

What we get from Instagram

• When a coach connects an account, Instagram gives us its ID and username and an access token. We keep the token encrypted, use it only to send and receive messages and read comments for that account, and delete it when the account is disconnected or removed.
• When someone comments on the account’s posts, writes to it or replies to its story, Instagram sends us the comment or message, the time, and a number Instagram gives our app for that person. We do not keep their name or handle.

What we do with it

• We read a comment or message to decide whether it starts or continues a funnel, to take the answer to a question the funnel asked, and to notice STOP or a request for a person.
• We do not keep the words people write. The exceptions are an answer a funnel was set up to collect (such as an email address, a phone number or a choice), which is saved to the coach’s own records, and a conversation a funnel hands over to the coach (next point).
• When a funnel hands someone over, or they ask for a person, we keep the conversation (the latest 200 messages) so the coach can read and answer it. It is deleted 30 days after the last message, or sooner if the coach deletes it or switches this off.
• For each person a funnel has answered we keep the number Instagram gave us (we need it to reply), a scrambled copy of it that we use in our own records, what the funnel saved about them, and whether they asked to stop. We keep this until the coach or the person asks us to delete it, or the coach’s account is deleted.
• Records of what arrived from Instagram and what we sent are deleted after 7 days.
• We count how many people reach each step of a funnel. The counts, with the scrambled copy and no names, handles or message text, go to our analytics provider.

What we do not do

• We message only people who have commented on, written to or replied to the coach’s account, and only inside the time Instagram allows.
• We do not send what people write to an AI model, sell it or use it for ads. The AI that helps a coach build a funnel sees the funnel’s steps and its totals, never a person’s words.
• By default, the first message says it is automated.

Stopping and deleting

• Reply STOP to any message to stop them. START turns them back on.
• To have what we hold about you deleted, write to privacy@sortiri.ai with the coach’s Instagram account you wrote to. We do not store names or handles, so we may ask the coach to help find you. A coach can also download or erase one person’s data from their inbox.
• If you remove Fystash in your Instagram settings, Instagram tells us and we disconnect the account and delete its token. If you ask Instagram to delete your data, it sends us the request and we delete the people, messages and token we hold for that account. The funnels stay.

Coaches. The coach decides what their funnels say and who they reach. Coaches must follow Instagram’s rules and the law, including being open that a reply is automated.

Who else sees it

Apple, for sign-in, subscriptions, and delivery of the app. The two AI processors above, only when you use coach AI. OpenRouter and the hosts named above, only when a coach uses the AI workspaces in the dashboard. Sail Research, only when a coach uses the AI workspaces in the dashboard to edit a site or an app. A coach you have been linked with, for the program you share with them. We do not sell personal information.

For Instagram replies: Meta, because the messages travel through Instagram; Convex, which hosts our database and runs the replies; and PostHog, which receives the funnel counts described above. We do not share what people write on Instagram with anyone else.

How long

We keep account and training records while your account is open. You can ask us to delete the account at privacy@sortiri.ai. Some records may remain where we have to keep them, for example a record of a purchase.

Instagram replies have their own times, in the Instagram replies section above.

Your choices

Website email and analytics choices are on the consent settings page. In the app, Coach AI is explained before you use Team Chat or AI search. Camera, photos, and microphone access are the iOS permissions for those features. You can withdraw them in iOS Settings. In the dashboard, the AI model notice can be shown again from Settings, under Privacy and data.

Contact

Privacy questions: privacy@sortiri.ai. Fystash is operated from Australia.