Legal

Terms of Service
& Privacy Policy

Version 1.0  ·  Effective: May 2026  ·  Applies to: Compound Pilot Programme

1. About Compound

Compound is an AI-powered workout tracking application currently in a closed pilot phase. It is developed and operated by Varoon Seelan ("we", "us", "our"). The application allows users to log workouts, track progress, and receive AI-generated coaching and programme recommendations.

During the pilot phase, access is by invitation only. Compound is not yet a commercial product. These terms govern your use of the application and our handling of your personal data during the pilot.

2. Acceptance of Terms

By creating an account and using Compound, you confirm that you have read, understood, and agreed to these Terms of Service and Privacy Policy. If you do not agree, do not use the application.

You are also required to accept these terms within the application on first login. Your acceptance is recorded with a timestamp in our database.

3. Who Can Use Compound

You must be aged 18 or over to use Compound. By creating an account you confirm you meet this requirement.

During the pilot, access is restricted to individuals who have received a direct invitation. You may not share your invitation or account credentials with others.

4. What Data We Collect

We collect the following categories of personal data when you use Compound. You provide most of this data voluntarily when setting up your profile and logging workouts.

Category Data collected
Account Email address, account creation date, date these Terms were accepted
Profile Date of birth, sex, height (cm), body weight (kg), body fat percentage, calorie goal, training focus, activity level, training days per week, preferred session length, experience level, available equipment, HIIT preference, sleep quality, stress level, injuries and limitations
Training sessions Logged workouts including exercise names, weights per set, sets, reps, estimated one-rep max (1RM), session timestamps, and optional session notes
Personal records Best estimated 1RM per exercise, including the date achieved and whether it was a baseline or genuine improvement
Body weight history Body weight log entries (date and weight in kg) added manually via the Body screen
Programme data Your current training programme (AI-generated or default), the date it started, and its source
Goals Strength goals you set (exercise name, target 1RM, baseline 1RM, date set)
Gamification Badges earned (category and tier)
Health data: Some of the data above — including body metrics, training history, sleep quality ratings, and stress levels — constitutes health-related personal data. We treat it with additional care and use it only for the purposes described in Section 5.

5. How We Use Your Data

We use the data described in Section 4 for the following purposes:

Providing the service

Your data is used to run the app — displaying your workout history, calculating your Strength Score, tracking PRs, generating progress charts, and powering all other in-app features.

AI features

When you use AI features (programme generation, plateau advice, travel mode, block review), your profile and training history are sent to Anthropic's Claude API to generate personalised responses. Your email address is never sent to Anthropic. Data is keyed to an anonymous internal user ID. See Section 6 for more on third-party services.

Product development

During the pilot, we use aggregated and anonymised usage patterns to understand how the app is used, which features are working, and what to improve. We do not build individual profiles for marketing purposes.

What we do not do

We do not sell your data to third parties. We do not use your data for advertising. We do not share your personal data with any party not listed in Section 6 without your explicit consent.

6. Third-Party Services

Compound uses the following third-party services to operate. By using Compound, you acknowledge that your data may be processed by these providers under their respective privacy policies.

Provider Purpose Data shared
Supabase Database and authentication (user accounts, session storage, all app data) All data described in Section 4
DigitalOcean Server infrastructure (the app and AI proxy are hosted here) Hosting only — DigitalOcean does not access app data
Anthropic (Claude API) AI coaching features — programme generation, plateau advice, travel mode, block review Your training history, profile data (keyed to anonymous user ID — email not shared)
Resend Transactional email (invite links, password resets) Your email address only

7. Data Retention & Deletion

We retain your data for the duration of the pilot programme and for a reasonable period afterward (up to 12 months) for development and reference purposes, unless you request earlier deletion.

You may request complete deletion of your account and all associated data at any time by contacting us directly (see Section 13). Deletion will be completed within 14 days of receiving your request.

You can export all your data at any time using the in-app Backup function (Programme → Backup → Export Data). This provides a complete JSON export of your account data.

8. Your Rights

You have the following rights with respect to your personal data. To exercise any of these rights, contact us using the details in Section 13.

RightDetails
Access Request a copy of all personal data we hold about you. The in-app Export function provides this directly.
Correction Update or correct your profile data within the app at any time via the Body and Programme screens.
Deletion Request that all your personal data be permanently deleted from our systems. Contact us directly to action this.
Portability Export your data in a machine-readable format (JSON) at any time via the in-app Export function.
Withdrawal Withdraw consent and stop using the application at any time. Your data will be retained unless you also request deletion.
Objection Object to your data being used for product development purposes. Contact us and we will restrict processing to service delivery only.
These rights are consistent with the Malaysian Personal Data Protection Act 2010 (PDPA). If you are located in the UK or EU, these rights also align with the UK GDPR / EU GDPR. We will respond to all data rights requests within 14 days.

9. Health & AI Disclaimer

Not medical advice

Compound is a fitness tracking tool. Nothing in the application — including AI-generated training programmes, coaching advice, plateau recommendations, or any other content — constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional or registered physiotherapist before starting a new training programme, particularly if you have any pre-existing health conditions, injuries, or are returning from a period of inactivity.

AI limitations

AI-generated content within Compound is produced by a large language model (Claude by Anthropic). While we have designed the prompts carefully and the AI uses your training history and profile data, AI output can be incorrect, incomplete, or inappropriate for your specific circumstances. AI coaching in Compound is not a substitute for guidance from a qualified personal trainer or strength and conditioning coach.

Beta software

Compound is pre-release software. Features may change, be unavailable, or contain bugs. Data loss, though unlikely, is possible. We strongly recommend using the in-app Backup function regularly to export your data as a precaution.

10. Acceptable Use

You agree not to:

— Share your account credentials or allow others to use your account
— Attempt to access, extract, or interfere with other users' data
— Use the application in any way that violates applicable law
— Attempt to reverse-engineer, copy, or redistribute the application or its code
— Use the application if you are under 18 years of age

Breach of these terms may result in your account being suspended or terminated.

11. Security

We take reasonable technical and organisational measures to protect your data. Your data is stored in Supabase with row-level security (RLS) — each user can only access their own data. Supabase database connections and API calls use TLS encryption.

Pilot limitation — HTTP: During this pilot phase, the application is served over HTTP rather than HTTPS. This means data transferred between your device and the app server (i.e., the pages you load) is not encrypted in transit. Authentication and database operations continue to use HTTPS via Supabase regardless. This limitation will be resolved before any public release. We recommend using the app on a trusted private network (home WiFi) rather than public WiFi during the pilot.

12. Changes to These Terms

We may update these Terms of Service and Privacy Policy during the pilot. We will notify you of any material changes by email (to the address associated with your account) at least 7 days before the changes take effect. Continued use of the application after that date constitutes acceptance of the revised terms.

The date at the top of this document will always reflect the version you are reading.

13. Contact & Requests

For questions about these terms, to exercise your data rights, or to report a concern:

Varoon Seelan
varoonpogo@gmail.com
+60 11-2820 8793 (WhatsApp / call)

We will respond to all requests within 14 days.