Privacy policy

Who we are

OpenStage is operated by Seagulls LLC, based in San Francisco, California, USA. This policy applies to the OpenStage marketing website and the OpenStage service, including account access, fitness accountability, and related support.

For privacy questions or requests, email admin@aios.agency. You can also visit our support page.

Information we collect

What we collect depends on the features you use and the information you choose to provide:

• Waitlist and account information: your email address, access-request status, account identifiers, and authentication information needed to give you access.
• Profile and goals: your display name, handle, profile photo or avatar, goals, routines, preferences, and information you provide during setup. Profile information can include age or date of birth, city, and gender.
• Fitness and progress information: activity details, training habits, height or weight if provided, check-ins, recovery or missed days, progress records, and crew confirmations. This may reveal information about your health or lifestyle.
• Content and conversations: photos and other media you upload, messages, notes, and information you send to the assistant or share with other members.
• Support information: your contact details and the messages or attachments you send when asking for help.
• Technical and usage information: information such as IP address, browser/device details, timestamps, service interactions, cookies, and error or diagnostic records.

Please avoid including medical records, identification documents, passwords, or other unnecessary sensitive information in check-ins, chats, or support messages.

How we use information

• Save access requests, manage accounts, and communicate about access or service matters.
• Help you set goals, record check-ins, participate in a crew, and see your progress.
• Provide recommendations and assistant responses using relevant information from your activity and context.
• Respond to support and privacy requests, prevent abuse, and keep the service working.
• Understand feature use, diagnose problems, and improve reliability and usability.
• Meet applicable legal obligations and protect the rights and safety of members and Seagulls.

Sharing and visibility

OpenStage includes shared experiences. Crew members may see the check-ins, content, and confirmations shared with that crew. People receiving a direct message can see that message. Profile or progress content made public may be visible beyond your crew, according to the feature and its visibility rules.

Sharing settings and available controls depend on the feature. Do not assume everything you submit is private, or that every control is available in the current beta. Contact us if you need help understanding or changing visibility. Other members may save or copy information they can see; removing it from OpenStage may not remove copies they have already made.

We also use service providers for hosting, storage, authentication, analytics, AI processing, and operational diagnostics. The web service uses Vercel and Supabase. Depending on enabled features, integrations include PostHog for product analytics, OpenRouter and its selected model providers for AI responses, and LangSmith for AI diagnostics. Relevant information is processed by these providers to support those features.

Authorized Seagulls personnel may access information when needed to operate the service, resolve issues, handle requests, or investigate abuse. We may also disclose information when required by law, to protect safety or legal rights, or in a business transfer, subject to applicable requirements.

We do not sell personal data or share it for targeted advertising.

Crew Challenge survey and reservations

The Med+ OpenStage Crew Challenge is for adults 18 or older in US states and the District of Columbia. We collect email, optional first name, state, main goal, training frequency, selected crew date, optional care interests (GLP-1, peptide or hormone care, standard membership only, or not sure), optional future-care payment preference, and consent records. You may choose not to disclose GLP-1 use and duration/start timing. These answers and care interests may reveal health information. This is an interest survey, not medical intake or a clinical eligibility decision. We do not collect medical records, medication brands or doses, measurements, or lab results here.

With your consent, Seagulls uses answers to plan the challenge and manage fitness-crew reservations. Unsent answers stay in tab memory and clear on reload. Records are private and are not shared with crews, used for advertising, or sent to AI providers. Authorized operators can review entries and aggregate interest summaries. Supabase stores records, Vercel hosts the website, and Resend processes necessary reservation emails and delivery/abuse feedback. Emails exclude survey answers and care interests.

New reservations hold a place for up to 24 hours or until enrollment closes, whichever comes first. Email confirmation secures the fitness-crew place. Opening an email link alone does not confirm or cancel: you must take the action on the page. Reserving does not create an app account, purchase care, guarantee a prescription, or start a subscription. We store reservation status, expiry, confirmation/cancellation timestamps, consent-copy and offer versions, and hashed verification/cancellation tokens. Raw tokens are held transiently in the private email queue and removed after delivery acceptance or terminal processing.

Reservation emails do not enroll you in marketing. Cancellation releases a place and is separate from unsubscribing from updates. Existing waitlist entries remain unverified requests without reserved places; their receipt preference links still work. Duplicate public requests do not overwrite prior answers, extend holds, generate repeated emails, or reverse an unsubscribe. Contact admin@aios.agency for correction, access, deletion, or help rejoining after unsubscribing.

Short-lived hashed request identifiers help prevent abuse. Infrastructure providers retain normal access/security logs. Survey answers and tokens are excluded from application logs, analytics, browser storage, and query-string URLs. No analytics tag is added to the assessment. Retention follows the operational and legal purposes explained below.

AI processing

When you use AI features, relevant messages, goals, profile context, and activity information may be sent to an AI service provider to generate a response. The information sent depends on the feature. AI responses can be incomplete or incorrect.

Seagulls does not use private user content to train its own AI models. Using content to generate a response is different from training a model. Third-party providers have their own processing and retention terms; this policy does not promise that every provider has identical practices. Contact us for information about the providers involved in a feature.

Optional iOS usage analytics

In iOS builds that include Google Analytics for Firebase, collection is on by default when no saved analytics choice exists. If you previously turned analytics off, that choice is preserved. You can turn “Share app usage analytics” off at any time in Settings. This choice applies to that app installation on your device.

When enabled, Google processes fixed screen and control labels for page visits, button taps, control changes, swipe direction, carousel movement, coarse scroll-progress milestones, and standard app-usage information, such as app launches, sessions, engagement, app/device information, and an app-instance identifier. Network requests may also provide technical information such as your IP address. Google derives general location information, such as country, region, or city, from masked IP addresses; this integration does not access Apple Location Services. We use this information to understand which parts of OpenStage are useful and improve the app. We do not attach your account ID, name, email, messages, photos, or workout details to these analytics events.

We disable advertising-identifier collection, vendor-identifier collection, advertising consent, personalized-advertising signals, and Apple ad-network attribution registration for this integration. This does not make all technical data anonymous. Turning analytics off stops future collection and resets local Analytics data; it does not by itself delete information already processed by Google. Contact admin@aios.agency for privacy or deletion requests.

Optional public Passport website analytics

Public Passport pages have a separate browser choice for Google Analytics. The Google tag and analytics cookies are not loaded until you choose “Allow analytics.” You can decline and still view public Passports. “Analytics settings” on those pages lets you change your choice. It applies to that browser and website host, independently of the iOS app setting. We also keep this collection off when the browser sends Do Not Track or Global Privacy Control signals.

When allowed, we send fixed labels for public Passport page visits, routine and exercise details, image views, button taps, swipes, carousel movement, and coarse scroll-progress milestones. Reports combine visits across public Passports; we replace profile URLs with generic page paths and exclude handles, names, actual routine references, photos, workout information, query strings, and incoming referrers. Google still receives a cookie-based browser identifier and technical information, such as browser/device details and IP address, and may derive approximate location. We use this information to improve public-page usability, not for advertising. Advertising consent and personalized-advertising signals remain off.

Turning this web choice off stops future collection, removes this integration’s local analytics cookies, and refreshes the page to unload the tag. If your browser cannot save the choice, collection stays off for that visit and the preferences panel explains the limitation. An opt-out does not itself delete information already processed by Google. For privacy requests, contact admin@aios.agency. This integration does not run on invite, email-verification, or marketing pages.

Cookies and analytics

We use cookies and browser storage to support login, invite access, preferences, and service operation. Analytics choices differ by feature: the iOS and public Passport website integrations are described above. Other enabled integrations can record feature interactions and technical information and may operate by default. Diagnostics and server-side operational records may also be collected.

You can manage cookies and local storage through your browser. Blocking essential storage may prevent login or other features from working. Contact us about other analytics choices; the beta does not currently provide a single settings page for every integration.

Retention and security

We retain information while it is needed for the purposes described here, including account operation, access requests, support, security, and applicable legal obligations. Retention depends on the type of information and why it is held. You can ask us to remove a waitlist entry or delete account information.

Some records may need to remain for legal obligations, security investigations, or resolving disputes. Backup copies may remain until they are replaced or removed through the backup lifecycle. We assess requests individually and explain any applicable limitations.

We use reasonable measures to protect information, but no online service can guarantee complete security. Avoid sharing sensitive information that is not needed for the service.

International use and legal grounds

OpenStage is intended for worldwide use. Seagulls is based in the United States, and information may be processed in the United States or other countries where our providers operate. Privacy protections can differ between countries. Where applicable, transfers must use the safeguards required by law.

Where data-protection law requires a legal basis, we process information as necessary to provide the service, pursue legitimate interests such as reliability and abuse prevention, comply with legal obligations, or rely on consent where required. Information that receives additional protection, including some health-related information, is subject to the applicable requirements.

Your choices and rights

You can choose what information to submit and use available profile or visibility controls. To request access, correction, a copy/export, deletion, withdrawal of consent where applicable, or removal from the waitlist, email admin@aios.agency. There is no need to send a password or invite code.

Depending on where you live and the law that applies, you may also have rights to restrict or object to processing, appeal a request decision, or complain to a privacy regulator. We may need to verify your identity before releasing or changing account information, and some rights have legal exceptions. We will handle requests according to applicable law. Automated self-service export or deletion is not promised by this policy.

Children and teens

OpenStage is intended for people aged 13 and older and is not intended for children under 13. If you are under the age of legal adulthood, a parent or guardian must review and agree to our terms. Additional parental consent or eligibility requirements may apply where you live.

If you believe a child under 13 has provided personal information, or you are a parent or guardian with a privacy concern, contact admin@aios.agency so we can investigate and take appropriate action. This policy does not claim that OpenStage verifies everyone’s age or provides an automated parental-consent process.

Changes and contact

We may update this policy as the service or our practices change. The date at the top identifies the current version. We will provide additional notice where required by law.

Privacy contact: admin@aios.agency
Seagulls LLC · San Francisco, California, USA