Last Updated: August 22, 2026
Controlling language: Spanish. This English version is for reference only.
Myosin lets you connect an AI client (Claude, ChatGPT and others that support the Model Context Protocol) so you can ask it about your own training data. This document covers that connection specifically. General handling of your data is in the Privacy Policy.
When you connect an AI client, it is THAT client which queries your data, with your authorization and your account. Myosin does not send your data to any AI provider on its own or in the background: it only answers when your assistant asks, because you asked your assistant something.
Data leaving Myosin goes into your AI client's conversation and becomes subject to that provider's privacy policy, not ours. If you ask Claude, your data enters your conversation with Claude; same for any other.
Workouts, sets, records and volume; routines; habits and their entries; complementary activities; and the exercise catalog. All scoped to your own account.
Not exposed: your email, your password, your payment methods (there are none), or any other user's data.
Creating and editing routines, and only if you enable it. Write permission starts off on every connection and is turned on from the app, in Settings → AI connections. On top of that, every write shows you what it's about to save and waits for your confirmation.
No AI connection can delete anything, log workouts, or modify habits or activities.
From the app, in Settings → AI connections, you can revoke any connection. The cut is immediate: the client can no longer read, even if its authorization is still live on its side.
A revoked connection keeps showing on that screen so you can reconnect it if you changed your mind. Reconnecting restores reading only; write permission stays off until you turn it back on.
We record which client connected, when it first did, when it was last used, whether it has write permission and whether it was revoked. None of that is conversation content: we do not see or store what you ask your assistant or what it answers.
We also keep a per-user request counter to rate-limit usage and prevent abuse. Those rows delete themselves after two days.
Authorization uses OAuth 2.1 with PKCE. The server only accepts tokens issued for it and for clients we explicitly registered; a token from the mobile app, for instance, is rejected.
Every query runs under your own identity, and isolation between users is enforced by the database, not by our server code.
Any questions about this: legal@getmyosin.com.
How to connect: AI connections documentation.