AI Connector Terms

Terms for connecting a third-party AI application to your AllStrong account

Last Updated: September 3, 2026 — Version 1.0

1. What This Is

The "MCP Connector" is an optional AllStrong feature that lets you connect a third-party AI application (a "Connected App") directly to your AllStrong account, using an open technical standard called the Model Context Protocol (MCP). If you choose to use it, a Connected App can read — and, if you separately allow it, write — specific categories of your AllStrong health and fitness data that you select.

These AI Connector Terms are incorporated into, and form part of, the AllStrong Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service. If there is a conflict between this document and the Terms of Service on a matter this document specifically addresses, this document controls for that matter.

2. Eligibility

The MCP Connector is available only to independent AllStrong accounts held by users aged 18 or older. Teen accounts (ages 13–17) and Child Profiles cannot use the MCP Connector, and no data from a teen account or a Child Profile is accessible through it under any circumstances. This is enforced by the Service, not only by this policy.

3. How a Connection Works

  1. A Connected App directs you to AllStrong to authorize access (an industry-standard OAuth 2.0 flow).
  2. You sign in with your existing AllStrong account credentials.
  3. Before anything is shared, you are shown — in plain language, on the authorization screen itself — which data categories ("scopes") the Connected App is requesting, the purpose for which AllStrong will share them, who will receive them, and how to stop sharing. Read access and write access are shown and granted separately; approving read access to a category never automatically grants write access.
  4. You must affirmatively approve the connection. If you decline, no data is shared and no connection is created. Connecting is optional: we will never condition your AllStrong account, subscription, or features on connecting an app.
  5. Once approved, the Connected App receives a credential scoped to exactly the categories you approved. That credential does not grant access to any other AllStrong data, feature, or account.

4. What You Are Authorizing

By approving a connection, you authorize AllStrong to disclose the data categories you selected to the named Connected App. AllStrong shares that data for one purpose only: so that the Connected App can use it to respond to your requests and provide its own service to you. AllStrong does not share it for any other purpose. You are not authorizing AllStrong to disclose your data to any app you have not individually approved, and approving one Connected App has no effect on any other.

Write access, where granted, authorizes the Connected App to create or modify AllStrong records on your behalf (for example, logging a meal or a workout) exactly as if you had entered that data yourself. You are responsible for reviewing data a Connected App writes to your account, the same way you are responsible for data you enter directly.

5. Connected Apps Are Independent Third Parties

A Connected App is not part of AllStrong, is not operated by AllStrong, and is not our agent, service provider, or processor. It is a separate product, typically operated by a separate company, under its own terms of service and privacy policy, and it is not under contract with us. Once data is shared with a Connected App:

  • That app's own privacy policy and terms govern how it stores, uses, retains, and further discloses that data — not this document, and not AllStrong's Privacy Policy.
  • AllStrong cannot compel a Connected App to delete, correct, or stop using data it has already received. Disconnecting a Connected App (Section 7) stops future sharing; it does not reach into the Connected App's own systems.
  • We do not review, audit, endorse, or vouch for any Connected App's security practices, data handling, or legal compliance before or after you connect it. You should review a Connected App's own privacy policy and terms before connecting it, particularly if it is not a name you recognize.

6. Not Medical Advice

Any response, recommendation, or analysis a Connected App generates from your AllStrong data is subject to the same disclaimer as Terms of Service §12.1 and §12.2: it is provided for informational purposes only, does not constitute medical advice, diagnosis, or treatment, and you should consult a qualified healthcare professional before making health decisions based on it. This is true regardless of whether the Connected App is made by AllStrong's own AI provider or by an unrelated third party.

7. Revoking a Connection

You may disconnect any Connected App at any time in the AllStrong app: Settings → Connected Apps → Disconnect next to the app's name. You may also email support@allstrong.app from the address on your account and we will disconnect it for you. Disconnection:

  • Takes effect immediately — the Connected App's credential is invalidated and any further attempt to read or write your data through it is rejected.
  • Does not retroactively delete or recall data the Connected App already retrieved before disconnection. That data remains subject to the Connected App's own retention and deletion practices, described in its own privacy policy.

8. What We Log

Each time a Connected App reads or writes data through the MCP Connector, we record which Connected App made the request, which data category was involved, and whether the request succeeded, was denied, or errored. We do not include the content of your health data in this internal log. We use this log to enforce your scope choices, to answer your requests about which apps have received your data, and to detect misuse. See our Privacy Policy §4.2 for the full data-sharing disclosure.

9. Acceptable Use

In addition to the general Acceptable Use terms in Terms of Service §8, you agree not to:

  • Use a Connected App to access or attempt to access data categories beyond what you were granted.
  • Share your AllStrong login credentials, or a Connected App's connector credential, with anyone else.
  • Use a Connected App to circumvent rate limits or other technical protections on the Service.

We may suspend or revoke MCP Connector access — for your account, for a specific Connected App, or for all users — if we reasonably believe it is being used to violate this section or the Terms of Service.

10. No Liability for Connected Apps

To the maximum extent permitted by applicable law, AllStrong disclaims all liability for the acts, omissions, security practices, data handling, or content of any Connected App, including any loss, misuse, or unauthorized disclosure of your data occurring after it has been shared with a Connected App in accordance with your authorization. Terms of Service §17 (Disclaimers), §18 (Limitation of Liability), and §19 (Indemnification) apply to your use of the MCP Connector and any Connected App.

11. Governing Terms

The dispute resolution, arbitration, class-action waiver, and governing-law provisions of the Terms of Service (§§21–22) apply to this document as if fully set out here. This document does not create a separate contract track outside the Terms of Service.

12. How You Accept These Terms

You accept these AI Connector Terms each time you approve a connection: the authorization screen states that by approving you agree to these Terms, and a connection cannot be created without that approval. Your acceptance applies to that connection and to any later connection you approve. If you do not agree to these Terms, do not approve a connection; your AllStrong account and features are unaffected.

13. Changes to These Terms

We may update these AI Connector Terms the same way we may update the Terms of Service — see Terms of Service §23. If we make a material change, we will notify you before it takes effect, consistent with that section, and any connection you approve after the effective date is governed by the updated Terms.

14. Contact