Draft notice: this page is standard boilerplate, not reviewed by an attorney. Replace or have it reviewed before relying on it for compliance.

Legal

Privacy Policy

Last updated: October 13, 2026

1. Information We Collect

Account information you provide (name, email, password) when you sign up. If you connect third-party services such as Everfit or Strava, we receive limited data from those services — activity timestamps, assigned programs, and ride metrics — as described below.

2. How We Use Information

To operate your account and dashboard, to communicate with you about your training, and to improve the service. We do not sell your personal information.

3. Third-Party Services

We use Supabase (authentication and database), Vercel (hosting), and, where you connect them, Everfit and Strava. Each has its own privacy policy governing data they process on our behalf or on yours.

4. Cookies

We use essential cookies to keep you signed in. We do not currently use third-party advertising or tracking cookies.

5. Data Retention & Security

We retain your data for as long as your account is active. We use reasonable technical measures to protect it, but no method of transmission or storage is 100% secure.

6. Your Rights

You can request access to, correction of, or deletion of your personal data by contacting us at [YOUR CONTACT EMAIL]. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

7. Children's Privacy

This service is not directed to children under 16, and we do not knowingly collect their information.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact

Questions about this policy can be sent to [YOUR CONTACT EMAIL].