Privacy Policy

1. Data We Collect

• Account and auth data (for example email and auth identifiers) via Supabase.
• Profile data you save (profile markdown, profile context snapshots, onboarding state).
• Planner inputs and outputs (guidance text, generated/saved workout artifacts, schedule metadata).
• Integration data when you connect services (for example Intervals.icu athlete identifiers and API credentials).
• Operational metadata (request ids, diagnostics, and service logs) needed for reliability and support.

2. How We Use Data

• Authenticate users and secure access to protected planner features.
• Generate and schedule workouts based on your profile, activity context, and guidance.
• Maintain saved workout history and related scheduling records.
• Monitor product reliability, troubleshoot failures, and improve workflow quality.

3. Service Providers and Sharing

We share data only as needed to run requested product functionality:

• Supabase for authentication and application database storage.
• OpenAI for planner processing and generated workout outputs.
• Intervals.icu when you connect your account and request sync/scheduling actions.
• Optional monitoring and analytics tools (for example Sentry and PostHog when enabled).
• Optional feedback surfaces (for example Discord notifications and Canny mirroring when configured).

4. Security Posture

• Intervals.icu credentials are stored encrypted at rest in application storage.
• Access to protected routes depends on authenticated user sessions and user-scoped data access.
• We avoid logging raw API credentials and keep observability payloads focused on operational metadata.

5. Retention and User Controls

You can update profile data, guidance, and connected integrations in product settings. You can also remove account data from the account reset flow.

• Update profile and planner-related information from Settings and planner surfaces.
• Reconnect or replace Intervals.icu credentials in Settings.
• Reset onboarding data (removes saved Intervals connection and profile context).
• Delete your account using full-name confirmation in the account reset flow.

Data retention windows for logs and third-party processors can vary by environment and provider policy.

6. Contact

For privacy requests or questions, contact [email protected].