Security
Almost everything you record in Incredible never leaves your phone. The AI coach is the main exception, and this page says exactly what happens to it. The other two, anonymous analytics and crash reports, are at the bottom.
Your Data Stays On Your Phone
Workouts, health data, plans, history. All of it lives on your device and syncs through your own iCloud account, which we cannot read. There is no Incredible account, so there is no password and no user list for anyone to steal.
What The AI Coach Sends
Answering you means sending your question to a language model. We send your message, a short summary of your training, sleep and body, the workout you are in, and what the coach remembers about you. It travels with a random id created on your phone. No name, no email, no account.
What We Keep
Nothing. There is no database. Our server reads your message, writes a reply, and forgets both. Your conversations are stored on your phone, and the only way any of it leaves is if you rate a reply down and send the form. Our logs record how large a request was and which topics it touched, never what you wrote, except that when a reply fails we keep the provider's error message. Logs expire after about a day.
Who Else Sees It
Vercel runs our server from Frankfurt and deletes each request as soon as the reply is finished. The reply itself is written by OpenAI's model served on Microsoft Azure, under a zero data retention agreement enforced on every request: if no provider under such an agreement is available, the request fails rather than going anywhere else. Nothing you write is kept once the reply is written, and nothing you write trains a model. The self harm screen goes to OpenAI's moderation service, which retains nothing under OpenAI's published retention table.
There is a third, and only if you choose it. Rating a reply down opens a form, and sending that form shares the reply, your last message and your notes with PostHog, our analytics provider, so we can test the coach against real failures. Nothing goes until you tap Send.
How It Is Protected
Encrypted the whole way. Before our server answers at all, your iPhone proves through Apple's App Attest that it is genuine hardware running the real Incredible app, so a copied or modified copy of the app cannot reach the coach. Our own testing tools reach it with a separate key that we hold and rotate.
What You Can Switch Off
Memory. The coach then answers without carrying anything between conversations. You can also delete everything it has learned in one tap, which replaces your random id with a new one. Both live in the coach's settings.
Analytics And Crash Reports
Anonymous counts and crash diagnostics, so we can find bugs. They carry no name and no email, and they never carry your health data or your workouts. The exception is the coach feedback form above: what you send there is your own text, and it can describe your training and your body. Analytics are handled in the European Union and crash reports in Germany. Analytics are anonymous counts; if you want to object to that processing, contact us and we will handle it.
Found A Problem?
If you think you have found a security issue, write to us at incredible-app.com/contact. We read every report and we will tell you what we did about it.
The Long Version
This page is the summary. Every detail, including how long each company keeps what and the rights you have over your data, is in the privacy policy.