Privacy notice
Effective October 6, 2026.
Next Good Session (NGS) is provided by McMac Media LLC, PO Box 2698, Montauk, NY 11954. Contact contact@nextgoodsession.com about privacy or your information.
Your training and your choices
NGS helps you plan, complete and understand your workouts. Local workout logging does not depend on a network connection; membership and guest-access rules still apply. Cloud collection, Circle sharing, Apple Health permissions and agent access are separate choices. Inviting someone or connecting an agent does not enroll you in marketing. Agreement to the terms is separate from consent to cloud collection.
This notice covers the iPhone app and NGS cloud, invitation, contact-verification and agent-connection services, including their web pages. The separate website privacy notice covers the public marketing website and launch mailing list. The consumer health data privacy notice addresses health-data processing and rights.
Information we use
On your device. Your training profile, plans, exercise and set logs, feedback, saved locations and other local training records support planning and progress. Device backups and exports you create may contain local records; manage them through your device and storage settings. NGS cloud summaries are not a backup of your full workout history.
Cloud training summaries. When you separately enable cloud collection, NGS uploads your goal titles and weekly training target, weekly streak and session count, and declared workout windows, with update metadata. We use these to provide connected training features and the sharing you later authorize. Cloud collection includes these categories even if you have not shared them with a Circle member or agent; recipient permissions are separate. Goal titles can contain health information you enter. Your full workout history, private notes, individual set logs and Apple Health measurements are excluded from this upload.
Account and membership. Apple sign-in supplies an account identifier and, when provided, your name and email. We process account identifiers, display name, login sessions, adult and US eligibility attestations, training time zone, versioned acceptance and consent records, and verified Apple subscription information to authenticate you, provide cloud features, verify membership and protect accounts. Apple processes purchases; NGS does not receive your payment-card number. An Apple private-relay address is treated separately from a contact address you choose to verify.
Contact and invitations. We process the contact email you verify, verification attempts, invitation recipients, the inviter's displayed name, invitation status and delivery information. If a member invites you before you have an account, that member supplies your email and we use it to deliver and manage the invitation. Accepting an invitation and choosing what to share are separate decisions. Use the invitation's opt-out option to stop further invitation emails to that address; you do not need an NGS account.
Notifications. If you enable push notifications, we process your device's push token, its account/session association, registration expiry and delivery status to deliver alerts. Tokens are stored encrypted. Invitation alerts use generic wording rather than training details. You can disable notifications in iPhone Settings.
Support and service operations. We receive information you send to support. The service and its providers also process technical connection and delivery information, including IP addresses, request times and error information, to operate and protect the service. Please do not send passwords, private keys or medical records to support.
Apple Health and conditions
With your permission, NGS reads workouts, VO₂ max, resting heart rate and heart-rate variability from Apple Health to inform training context. It can also write completed workouts for activities you enable. Apple Health information is processed on the device and is excluded from NGS cloud summaries. Manage permissions and records in Apple Health or iPhone Settings. Deleting NGS data does not delete workouts already written to Health.
Location searches use Apple Maps. Weather and marine requests send relevant saved coordinates, forecast dates or tide-station identifiers to Apple WeatherKit, Open-Meteo or NOAA, as applicable. Those services receive network information when your device contacts them. Forecast requests do not contain your NGS account identifier, email, workout history or Apple Health records. The current app does not continuously track location or record GPS routes. You can edit or remove saved locations.
Who receives information
- Circle members you choose: the categories you explicitly share with accepted connections. Your Circle is not a public feed. Removing a connection or withdrawing sharing stops future access once the server confirms the change.
- Agents you authorize: the goal, streak or workout-window categories you select for the training assistance you request. Current agent tools read these summaries; they cannot log workouts, change plans, invite friends or access another Circle member's information. A grant lasts up to 30 days and can be revoked in Agent Access, with future access ending on server confirmation. The ChatGPT connection is provided by OpenAI; review its privacy policy and applicable account data controls before connecting. Other providers must be identified and reviewed before they are enabled.
- Service providers: DigitalOcean hosts the NGS cloud service and database; Resend delivers account and invitation messages; Apple supplies sign-in, purchase verification and enabled push notifications. Forecast providers receive the limited requests described above. Google Workspace processes support correspondence forwarded to our business mailbox.
- Legal and security needs: we may disclose information when legally required or otherwise permitted by applicable law to respond to fraud, threats or misuse and protect the service or people's rights.
Revocation or expiry does not automatically erase information a recipient already received. Deletion requests are separate: where applicable law requires, we will notify relevant recipients of your deletion request and take the steps required of us. A recipient's independent obligations and handling may also be governed by its own notice. These limits on technical control do not remove NGS's legal obligations.
We do not sell personal information or share it for targeted advertising. NGS does not use training or Apple Health information to train its own general-purpose AI model. We do not promise that every external provider excludes previously received information from model training; review its applicable terms and settings before authorizing access. User permission does not authorize a use prohibited by law or Apple's rules.
Messages and notifications
We send requested verification messages, member-initiated invitations and relevant account communications. An invitation recipient may not have requested the first invitation. Account communications include a welcome after contact verification and a receipt after guest access starts. A guest receipt is not a purchase confirmation and does not create an auto-renewing subscription.
Marketing requires a separate, optional choice and an unsubscribe method. Joining, verifying an address or activating guest access does not enroll you in marketing. We retain minimal suppression records to honor invitation opt-outs and provider bounce or complaint signals.
Retention and deletion
Local information remains on your device until you remove it. Signing out alone does not erase it. Cloud profile, sharing, consent and membership records are retained while needed to provide your account, subject to deletion and applicable legal obligations.
The current cleanup design makes verification challenges eligible for removal one day after expiry, delivery queue records after 30 days from creation, and unaccepted invitations after expiry plus 30 days. Successful or canceled delivery clears its pending message payload. Minimal welcome/guest-message event records remain until account deletion to prevent duplicate receipts. These are scheduled-cleanup thresholds; bounded cleanup and operational failures can delay physical removal.
Confirmed cloud deletion removes live account and sharing data and revokes future access. A limited deletion/recovery receipt expires after 30 days for worker cleanup. It includes encrypted recipient-routing references, cleared when operator review is recorded or when the receipt is removed. Apple revocation retries have a seven-day window; the encrypted revocation credential is cleared on success or when the worker processes that deadline. Failed revocation can require manual action.
To track guest eligibility and prevent repeated benefits, the implementation retains a purpose-specific keyed identity-derived record while attached to an account, including accounts without a redeemed benefit. Account deletion detaches it and makes it eligible for cleanup after 365 days. Recreating an account before expiry reattaches the record and removes that expiry until a later account deletion; its total lifetime can therefore exceed 365 days. This record is pseudonymous, not anonymous, and contains benefit status rather than workout history.
Email suppression records contain a keyed email digest, reason and creation time. They have no automatic expiry and survive account deletion to prevent unwanted delivery after opt-outs, complaints or bounces. A verified Apple relay re-enable can remove its corresponding relay-disabled suppression; ordinary opt-outs are not automatically removed. Requests to review or remove suppression must not silently restart unwanted messages.
The database serving the internal beta uses a seven-day managed backup/recovery window. Account deletion does not immediately erase an existing backup. Exported recovery journals are separate: the current tool neither schedules their capture nor automatically deletes their files. Support correspondence resides in Google Workspace; the app does not set its mailbox or Vault retention.
Your controls and requests
Review Circle sharing and Agent Access in the app. You can withdraw cloud collection and sharing, remove connections, export cloud account information or delete your cloud account. A withdrawal stops uploads on the requesting iPhone immediately; existing cloud access can continue while offline until the server confirms the request. Check the displayed completion or pending status. Local data removal is separate. Cancel an Apple subscription through Apple; deleting data does not cancel a subscription. Cloud privacy controls do not require an active paid membership or renewed cloud consent.
Contact contact@nextgoodsession.com to request access, correction, deletion, a copy of information, withdrawal of consent, or information about recipients where applicable. You may use this route if you were invited but never created an account. We may verify account or address ownership using information proportionate to the request; we do not ask for your Apple password or require a new account. We cannot retrieve workout records that exist only on your device.
If we decline a request, we will explain the decision and any applicable appeal route. You may send an appeal to contact@nextgoodsession.com, identifying the decision you want reviewed; including “Privacy appeal” in the subject is helpful but not required. Applicable response deadlines, extensions and regulator complaint routes are described in the consumer health notice. Other rights and deadlines may apply under the law where you live. We will not unlawfully discriminate against you for exercising privacy rights.
NGS is offered initially to people aged 18 or older in the United States. If you believe a child has supplied information, contact us so we can investigate and take appropriate action. Eligibility statements do not replace controls before cloud collection.
We use encryption in transit, restricted service access and protected storage for sensitive credentials and queued messages. These measures are not a guarantee against every incident. We will provide notifications of security incidents as required by applicable law. We will communicate material changes to this notice and seek a new choice where required before new processing begins. A notice update or continued use does not by itself supply new consent for an additional health-data purpose.