Consumer Health Data Privacy Policy
Our consumer health data privacy policy, for residents of Washington, Nevada, Connecticut and anyone else who wants the detail.
Published
Health data we collect
- Average and maximum heart rate, and heart-rate zones.
- Power (average, normalised and best efforts), FTP and power zones.
- Body weight, if you enter it.
- Figures we calculate from these: training load, fitness, fatigue, readiness and relative effort.
Where it comes from
From you (profile and workouts) and, if you connect it, from Strava.
Why we collect and use it
Only to provide the training features you use: showing your data back to you, calculating zones, load and readiness, planning sessions and building workout files. We don’t use it for advertising, and we don’t sell it.
Who we share it with
- Coaches you have accepted.
- Our service providers, which process it on our instructions: Supabase (database hosting), our application hosting provider and, for account emails only, our email provider.
Consent
We collect and share health data only with your consent, given at sign-up. You can withdraw it in My profile. That disconnects Strava and deletes imported activities and readiness history.
Your rights
- Confirm whether we process your health data, and get a copy (Download my data in My profile).
- Get a list of the third parties and service providers we share it with (above).
- Delete it (Delete my account in My profile, or withdraw consent).
- Withdraw consent at any time.
To exercise a right we can’t handle in the app, contact our contact page. We respond within 45 days. If we decline a request, you can appeal by replying to our answer. If you’re still unhappy after the appeal, you can contact your state Attorney General.