Privacy Policy

When you sign in with Google, Steakly receives the basic account information needed to authenticate you, such as your name, email address, profile image, and Google account identifier.

When you use the app, you may provide profile, health, fitness, nutrition, habit, sleep, body measurement, workout, and progress data. You may also save your own xAI API key so the AI trainer can generate plans on your behalf.

We use your information to provide authentication, personalize onboarding, generate AI training and nutrition plans, save logs, show progress charts, create exports, and operate the Steakly service.

Your xAI API key is used only server-side to call xAI for your own trainer requests. Steakly does not use a shared Grok API key and does not use your key for other users.

User data is stored in PostgreSQL and application queries are scoped to the authenticated user. Sensitive profile secrets such as xAI API keys are encrypted at rest when a profile encryption key is configured.

No internet service can be guaranteed perfectly secure, but Steakly is designed to minimize access, isolate user records, and keep AI credentials out of the browser.

Steakly does not sell personal information. We share data only with service providers needed to operate the app, such as hosting, database, authentication, and AI API providers.

Google is used for OAuth sign-in. xAI is contacted only when you use AI features with your own saved API key.

You can update profile details, replace or remove your xAI API key, export your data, and disconnect your account from Settings.

You can also revoke Steakly's Google OAuth access from your Google Account security settings.

For privacy questions, contact the Steakly operator at privacy@steakly.net. This policy may be updated as Steakly evolves, and the latest version will be posted here.