top of page

Privacy Policy

Effective Date: May 26, 2026

​

 

1. Introduction

This Privacy Policy explains how Performance Advantage Studio ("PAS," "we," "our," or "us") collects, uses, stores, shares, and protects information when you use the PAS website, services, subscriptions, protocols, communications, and related systems (collectively, the "Services").

By using PAS, you consent to the practices described in this Privacy Policy.

 

2. Information We Collect

We may collect the following categories of information:

Information You Provide

Including:

  • name

  • email address

  • phone number

  • company information

  • job title

  • calendar information

  • travel schedules

  • onboarding responses

  • intake form responses

  • protocol questionnaire responses

  • communication preferences

  • payment information

  • meeting timing information

  • scheduling data

Health-Adjacent and Performance Information

Including:

  • sleep-related information

  • HRV (heart rate variability) information

  • wearable metrics

  • energy-related self-reports

  • caffeine usage

  • travel-recovery information

  • schedule and workload information

  • subjective cognitive-performance inputs

PAS does not collect medical records unless explicitly provided by the user.

Wearable Data and Forwarded Information

Users may submit wearable data to PAS by forwarding screenshots, copying readings into messages, or describing values in chat. When you do so:

  • The screenshot or message is processed by PAS to extract relevant performance signals (HRV, sleep duration, recovery scores, training load, and similar metrics).

  • PAS does not intentionally collect unrelated information that may appear incidentally in screenshots (lock-screen notifications, unrelated app data, calendar items). Users are encouraged to crop or redact screenshots before sending.

  • Forwarded screenshots are processed through the AI sub-processors described in Section 4.

Automatically Collected Information

Including:

  • IP address

  • browser type

  • device information

  • usage analytics

  • cookies

  • referring pages

  • interaction data

  • session data

Third-Party Data

PAS may receive information from third-party systems such as:

  • Oura

  • Whoop

  • Apple Health

  • Apple Watch

  • Garmin

  • Google Calendar

  • scheduling tools

  • communication platforms

  • other wearables

subject to user authorization.

 

3. How We Use Information

PAS may use information to:

  • provide Services

  • generate recommendations

  • personalize briefings

  • improve protocols

  • communicate with users

  • manage accounts

  • process payments

  • improve system performance

  • analyze usage trends

  • maintain security

  • comply with legal obligations

  • conduct internal analytics

  • support future product development

We may also use anonymized or aggregated information for research, analytics, and business purposes.

 

4. AI Processing and Sub-Processors

PAS uses third-party AI services to analyze user inputs and generate operational recommendations. The current AI sub-processors are:

  • Anthropic (Claude), based in San Francisco, California, USA

  • OpenAI (ChatGPT), based in San Francisco, California, USA

PAS has configured these services to exclude user data from training the providers’ public AI models, to the extent provider settings allow. Data handling at the provider level is governed by each provider’s own terms and privacy policy, available at anthropic.com and openai.com.

Inputs you submit to PAS, including wearable readings, screenshots, scheduling information, and check-in responses, may be processed by these providers. By using PAS, you consent to this processing.

Users acknowledge that:

  • AI systems may generate imperfect outputs

  • recommendations may contain inaccuracies

  • outputs require independent human judgment

  • PAS does not guarantee recommendation accuracy

  • provider-side data handling is subject to each provider’s terms, not PAS contractual control

PAS evaluates its AI processing infrastructure on an ongoing basis and may transition to alternative processing arrangements as the Service evolves. Material changes affecting user data will be communicated in advance.

 

5. Cookies and Analytics

PAS may use cookies and similar technologies to:

  • improve website functionality

  • analyze traffic

  • remember preferences

  • understand engagement

  • improve performance

Users may disable cookies through browser settings, though some features may not function properly.

 

6. Communications

PAS may communicate through:

  • email

  • SMS

  • WhatsApp

  • iMessage

  • Slack (where connected)

  • phone

  • scheduling systems

  • messaging platforms

 

Communications may include:

  • operational briefings

  • daily check-in messages

  • onboarding guidance

  • scheduling reminders

  • subscription information

  • marketing updates

  • educational content

As part of the Service, PAS initiates daily morning check-in messages through the channel selected at onboarding. These messages are operational, not marketing, and are necessary for the Service to deliver state-aware briefings. Users may pause or adjust check-in frequency at any time by replying STOP, PAUSE, or by contacting andrea@performanceadvantagestudio.com.

Users may opt out of marketing communications at any time. Operational and account-related communications may still be necessary for service delivery.

 

7. Payment Processing

Payments are processed through third-party providers such as Stripe.

PAS does not directly store complete payment-card information.

Payment processors are governed by their own privacy policies and security standards.

 

8. Data Sharing

PAS does not sell personal information.

PAS may share information with:

  • service providers

  • cloud infrastructure providers

  • analytics providers

  • payment processors

  • AI sub-processors (see Section 4)

  • wearable integrations

  • communication platforms

  • legal authorities where required by law

PAS may also disclose information:

  • to comply with legal obligations

  • to protect rights and security

  • during mergers, acquisitions, or asset transfers

 

9. Data Security

PAS uses commercially reasonable administrative, technical, and organizational safeguards.

However, no system is completely secure.

Users acknowledge that:

  • internet transmissions carry risk

  • data breaches may occur

  • third parties may attempt unauthorized access

PAS cannot guarantee absolute security.

In the event of a personal data breach affecting your information, PAS will notify affected users and any required supervisory authority without undue delay, in accordance with applicable data protection laws and state breach notification statutes.

 

10. Data Retention

PAS retains information for as long as reasonably necessary to:

  • provide Services

  • comply with legal obligations

  • resolve disputes

  • enforce agreements

  • maintain business records

Upon account cancellation, PAS retains personal performance data for 90 days in case of reactivation. After 90 days, PAS deletes personal performance data, except where retention is required by law (financial records, tax records, and similar). PAS may retain anonymized or aggregated information indefinitely.

 

11. International Users

PAS operates from the United States.

If you access PAS from outside the United States, you understand that your information may be transferred to and processed in the United States.

See Section 13 below for additional information specific to residents of the European Union, the United Kingdom, and Switzerland.

 

12. California Privacy Rights

California residents may have rights under applicable California privacy laws, including rights to:

  • know categories of collected information

  • request deletion of certain information

  • request correction of inaccurate information

  • access collected information

  • opt out of certain data-sharing activities

  • limit the use and disclosure of sensitive personal information

To submit a request, contact: andrea@performanceadvantagestudio.com. PAS will respond within 45 days of receipt of a verifiable request, extendable as permitted by law.

PAS will not discriminate against users for exercising privacy rights.

Sensitive personal information. Some information PAS collects, including health-adjacent and wearable-derived data such as sleep, HRV, and recovery metrics, may constitute sensitive personal information under California law. PAS uses this information solely to provide and personalize the Services and does not use it to infer characteristics about you or for any purpose incompatible with service delivery. California residents may request that PAS limit the use and disclosure of their sensitive personal information to those purposes.

 

13. European, UK, and Swiss Privacy Rights

Important notice for residents of the European Union, the United Kingdom, and Switzerland:

PAS is currently in a US-only pilot phase. The Services are not available to residents of the European Union, the United Kingdom, or Switzerland during this phase. See Terms of Use Section 7 (Eligibility).

PAS is in the process of putting compliance infrastructure in place (including Data Processing Agreements with sub-processors and Standard Contractual Clauses for international transfers) to enable expansion to additional jurisdictions in compliance with applicable law.

If you are based in the European Union, the United Kingdom, or Switzerland and wish to be notified when PAS becomes available in your jurisdiction, contact andrea@performanceadvantagestudio.com.

When PAS expands to these jurisdictions, users in the European Economic Area, the United Kingdom, and Switzerland will have rights under the GDPR or equivalent law, including the right to access, rectify, erase, restrict processing, port, and object to processing, and will be informed of the lawful bases of processing applicable to them.

 

14. Third-Party Links and Services

PAS may contain links to third-party websites and systems.

PAS is not responsible for third-party privacy practices or content.

Users should review third-party policies independently.

 

15. Children’s Privacy

PAS is not intended for individuals under 18 years old.

PAS does not knowingly collect information from minors.

 

16. Changes to This Privacy Policy

PAS may update this Privacy Policy periodically.

Updated versions become effective upon posting.

Continued use of PAS after updates constitutes acceptance of the revised policy.

 

17. Health Information and HIPAA

PAS is not a HIPAA covered entity. PAS does not provide medical services and does not collect protected health information (PHI) within the meaning of HIPAA. Wearable data and self-reports submitted to PAS are processed as health-adjacent performance information for operational guidance purposes, not as medical records.

 

18. Contact

Performance Advantage Studio (PAS)

Andrea Gebhardt

Carlsbad, California, USA

Email: andrea@performanceadvantagestudio.com

bottom of page