Privacy notice.

Last updated October 14, 2026.

This notice describes how The Male Standard (“we,” “us”) handles information on themalestandard.ai and in the private member system, including the iOS and Android apps that open the same hosted origin. It is written to match the product as it exists today. It is not a medical-privacy notice, not a brokerage disclosure, and it is not legal advice.

Who this applies to

Visitors who browse the public site, people who submit an admission request, and members who sign in to the private operating system. The public site is operated by The Male Standard / Andrew Paul. New inquiries begin through Request Admission or Contact. Account deletion requests use Delete account.

Admission requests

The public Request Admission form collects full name, email, optional phone and location, a goal and timeline choice, a short “why now” message, and consent. When admission storage is enabled, those answers are saved for administrator review. Administrators can search, change review status, add internal notes, and delete a specific application after confirming that row. We do not ask for medical records, labs, or passwords on that form. Operator alerts, when email is enabled, contain only a brief notice, an application reference, and an authenticated admin link — not the full answers. Deleting a member account does not automatically delete a prior application. An applicant or former member who wants an application removed can contact us; an administrator verifies the request and deletes the exact application id. Copies may remain in email provider metadata, host logs, and backups until those systems expire. We do not promise that every copy is erased.

Account

When you have a member account we process:

• Email address
• Authentication credentials stored by our auth provider, and session cookies needed to keep you signed in

Profile

If you enter them, we process age or body facts, identity, goals, work/sleep context, and other profile answers used to run the member system.

Training

Workouts, exercises, sets, substitutions, notes, and performance or completion state you log.

Nutrition

Meals, foods, macros, targets, saved meals, and weight-related information you enter.

Check-in / Optimization

Sleep, recovery, stress, and other daily signals you submit, plus member-entered labs or therapy information where you choose to record them. This is educational tracking. It is not diagnosis, prescribing, or medical treatment.

Coaching photos and profile image

If you use Coaching, you may optionally upload progress photos for weekly check-ins. You may also upload a profile image. These files are stored in Supabase storage for your account and are not used for advertising.

THE MALE STANDARD

Member messages, the day context supplied so the system can interpret a change, and decision records stored for that day. When an AI provider is configured, message text and the context needed to answer may be sent to OpenAI only after you allow AI data sharing. Text coaching and photo analysis have separate permissions in Profile. You can turn either off to stop future requests without losing access to non-AI logging. Turning sharing off does not erase earlier provider requests or saved feedback.

Capital

If you use Capital we may process:

• Capital profile
• Income ranges, cash and debt ranges, and financial goals you enter
• Money Queue items
• Revenue Sprints
• Watchlists and research notes
• Economic Value Ledger entries and other member-entered financial outcomes

Capital provides research, education, scenario analysis, and execution planning. It does not execute trades, hold money, guarantee returns, or guarantee income. We do not operate a brokerage and we do not take custody of funds. We do not sell financial credentials.

Admission requests

Name, email, optional phone and location, primary goal, timeline, and the narrative you choose to share. The form asks you not to submit medical records, laboratory results, or other sensitive health information.

Information collected automatically

Hosting and security systems may receive standard technical data such as IP address, browser type, request time, and the pages requested. We use this to operate, protect, and debug the site. We do not run advertising pixels or sell browsing profiles.

Cookies and session behavior

Signed-in members receive essential authentication cookies so the private /app routes can confirm a session. Those cookies are not used for advertising. We also use first-party visitor identifiers and campaign/referral information to understand visits, signups and membership conversion. These may be linked to an account after signup; we do not use them for cross-company ad tracking. If you sign out, the session ends. The public site does not require an account cookie to browse.

How we use information

• Review admission requests and respond when there is a clear next step.
• Authenticate members and keep the private system available to the correct account.
• Generate and display Training, Nutrition, Optimization, Plan, Progress, History, Today, Ask, and Capital views from data that member provided or logged.
• Optionally import a short list of Apple Health or Health Connect signals (sleep duration, HRV, resting heart rate, steps, workouts, active energy, and body weight) after you connect that integration. Those signals support Daily Autopilot context. They are not used to diagnose or treat a condition.
• Process account deletion requests.
• Prevent abuse and protect the service.
• Comply with law when a valid request requires it.

We do not sell personal information. We do not use member training, nutrition, check-in, or financial data to target ads. We do not promise income, weight-loss outcomes, investment returns, or medical results.

Third-party services actually used

• Vercel. Hosts the website and the hosted content used by the iOS and Android apps.
• Supabase. Authentication, session, and member records, under row-level access controls.
• Stripe. When you purchase or manage a membership on the website, payment and subscription details are processed by Stripe.
• Apple In-App Purchase. Apple processes iOS subscription payments. TMS stores an opaque account token, product and transaction identifiers, subscription status, expiry and verification timestamps to provide access, restore purchases, prevent duplicate fulfillment and process renewals or refunds. These purchase records are linked to your TMS account and are not used for advertising. TMS does not receive your Apple payment-card details. After account deletion, the account association is removed; minimal transaction records remain to prevent purchase replay and meet billing and legal requirements.
• Resend. Transactional email such as account notices, coaching updates, membership lifecycle messages, and brief operator admission alerts when those features are configured.
• OpenAI. With your permission, text coaching sends your messages and relevant saved goals, training, nutrition, check-in, recovery, Prep and Capital context. This can include health or financial information you entered. Separately, visual and posing analysis can send selected current/prior check-in photos and relevant body, goal, training and division context. TMS stores the returned reply or assessment. Ask uses stored visual summaries, not raw check-in photos. OpenAI processes requests under its service policies; we do not promise that processing or retention stays on your device. It is not used to diagnose, prescribe, execute trades, or guarantee outcomes.
• Alpaca. Market-data quotes for Capital research when configured. Not used to place orders or hold funds.
• CoinGecko. Public crypto market data for Capital research.
• DefiLlama. Protocol or fundamentals context for Capital research where used.
• Open Food Facts. Packaged-food matches for Nutrition search. Queries you type can be sent to that service.
• Admission or deletion intake. When the admissions inbox is enabled, application details are stored in our database for administrator review. Application or deletion details may also be forwarded to an operator-configured HTTPS destination if that destination is separately authorized, only to review and act on the request.
• External research and commerce links. Some Optimization topics link to published sources or a separately labeled AminoPros resource. Those destinations have their own privacy practices. Following them is optional.

Coaching progress photos

Weekly Coaching Check-In can collect optional FRONT, SIDE, and BACK progress photos if you choose to upload them from the camera or photo library on iOS or Android. Photos are used so AndrewPaul can review coaching check-ins. They are not public, not used for advertising, and not mixed into Apple Health or Health Connect data. They stay with your member account on our hosted systems while the account is active. AndrewPaul and operators fulfilling coaching or a verified deletion request may access them. They are included in a verified account deletion request. You can skip photos and still use TMS.

What we do not collect today

The product does not currently collect precise location, microphone audio, contacts, or SMS. Optional notifications use the device information described below. Apple Health and Health Connect are optional: TMS does not read them unless you connect the integration and grant the listed permissions. Camera or photo-library access is requested only when you choose to upload a profile or coaching progress photo. We do not collect brokerage login credentials or ask you to deposit funds. If additional device permissions are added later, this notice will be updated before they are turned on.

Notifications and Apple Reminders

If you enable TMS notifications, we store your notification preferences, saved time zone, quiet hours, device installation identifier, APNs device token, and delivery records used to avoid duplicate notifications. These records are linked to your TMS account. We send the device token and notification content needed for delivery to Apple Push Notification service. You can disable notifications in TMS or iOS Settings.

When you choose Add to Apple Reminders, TMS asks for Reminders access and creates the selected task with its title, due date/time, time zone, and link back to TMS. TMS checks its reminder reference on the device to prevent duplicates. Other Apple Reminder contents are not uploaded to TMS. Reminders may sync through your Apple account according to your Apple settings.

Security

Traffic uses encryption in transit (HTTPS). Member records use access controls and a restrictive content-security policy. No internet transmission is perfectly secure. Do not submit medical records, brokerage passwords, or information you are not prepared to store in this operating system.

Retention

Administrators periodically review stored admission applications. Unused or decided applications are not deleted automatically. A record may be removed after that review, after a verified applicant request, or when an administrator confirms there is no remaining operational need. Member account and operating-system data are kept while the account is active. After a verified member-account deletion request, we remove member-owned records from The Male Standard systems and may keep a limited request or security archive. Processor logs and backups are not under our exclusive control and are not erased at the same moment.

Account deletion

Signed-in members can delete their account in the app at Profile → Account → Delete account or More → Delete account. That flow permanently deletes the auth user and removes member-owned data from The Male Standard systems, then signs you out. Anyone can also start a deletion request at themalestandard.ai/account/delete without signing in; we verify those requests before removal. Copies already held by processors, legal archives, and data only on your device are described above.

Your other choices

You may decline to submit an admission request. Members may update profile and preference fields in the product and may sign out at any time.

Children

The Male Standard is intended for adults. It is not directed at children under 18.

International use

The service is operated from the United States and may be hosted on infrastructure in other regions used by our providers. If you access it from another country, your information may be processed in the United States.

Changes

If this notice changes in a material way, we will update the date above. Continued use of the site or member system after an update means the revised notice applies to later use.

Contact

Privacy questions and admission-application deletion requests can begin through the contact page. Member-account deletion requests should use Delete account.