Privacy Policy for SmarterTraining

When you use the Service, you may provide:

• Sign in with Apple credentials. If you sign in, Apple sends us a unique Apple user identifier. You may also choose to share your name and email address; if you use Apple’s Hide My Email relay, we receive only the relay address.
• Email address if you join our waitlist, contact us, or contact support.
• Training profile. Your fitness state, training goals, available training time, frequency, equipment, and (optionally) cycling FTP.
• Daily check-ins. Your overall feel, leg state, motivation, time available, contextual flags (such as poor sleep, getting sick, high stress), and any cross-sport activities you log.
• Workouts you complete, skip, modify, or log. Including title, duration, type, subtype, structure, and your feedback.
• Coach Notes. Persistent freeform context you write to help your coach adapt your training, plus optional tags.
• Post-workout reflections. Your responses to coach check-in prompts and any optional follow-up notes.
• Upcoming context. Future events you log (e.g., big rides, travel, recovery periods).
• Subscription state. We rely on Apple’s StoreKit to manage your subscription. We see your entitlement status only; we never see or store your payment information.

With your permission, the Service may access health and fitness data — such as workouts, heart rate, power, cadence, and activity history — from Apple HealthKit, connected Bluetooth heart-rate monitors, and Bluetooth indoor trainers (FTMS).

Specifically:

• HealthKit reads: heart-rate samples during workouts.
• HealthKit writes: completed workout sessions, so your fitness data stays in one place.
• Bluetooth peripherals: real-time power, cadence, and heart-rate values from your trainer and HRM during active workouts.

When you complete a workout, the recorded workout data — including heart rate, power, cadence, duration, and any feedback or reflection you provide — is transmitted to our backend so we can:

• Sync your training history across your devices,
• Generate adaptive coaching recommendations,
• Produce post-workout reflections and “likely tomorrow” guidance.

HealthKit-sourced data is used solely to provide and improve the Service. We never use HealthKit data for advertising, never share it with advertisers, never sell it, and never share it with third parties for marketing purposes.

You can revoke HealthKit access at any time in the Settings app on your device.

When you use the App, we automatically collect:

• Device information (device model, operating system version, app version, locale).
• Usage data (which features you interact with, how often, and session-level metadata such as duration).
• Diagnostic data (crash reports, error logs, and performance traces).

Once you sign in with Apple, this information is associated with your account. Before sign-in, this information is associated with a temporary pseudonymous identifier on your device.

For clarity, we do not collect:

• Precise or coarse location data.
• Your contacts, photos, or microphone input.
• Advertising identifiers (IDFA).
• Browsing history outside the Service.
• Payment information (handled exclusively by Apple’s StoreKit).

• Delete your account. You can delete your account and all associated data at any time inside the App (Settings → Delete Account) or by emailing [email protected].
• Revoke permissions. You can revoke HealthKit, Bluetooth, and Notification permissions at any time in your device’s Settings app.
• Disconnect Strava. You can disconnect Strava in the App at any time; this stops future uploads.
• AI Coaching Assistance. You can decline AI Coaching Assistance or turn it off later in Settings. When it is off, we do not send your user-derived coaching context to OpenAI.

You have the right to:

• Know what categories of personal information we collect, the sources, the purposes, and the third parties we share with.
• Access the specific pieces of personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Opt out of “sale” or “sharing” — though, as noted, we do not sell or share for cross-context behavioral advertising.
• Limit use of sensitive personal information. Health and fitness data is sensitive personal information under CPRA; we only use it to provide the Service.
• Non-discrimination for exercising any of these rights.

To exercise any of these rights, email [email protected]. We will verify your identity (typically by asking you to sign in to the App) and respond within 45 days.

You have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate personal data.
• Erasure (“right to be forgotten”).
• Restriction of processing.
• Data portability — receive your data in a machine-readable format.
• Object to processing based on legitimate interests, including profiling.
• Withdraw consent for any processing based on your consent.
• Lodge a complaint with your local data protection authority.

The legal bases on which we process your data are:

• Performance of a contract (delivering the Service you signed up for).
• Legitimate interests (improving the Service, preventing abuse).
• Consent (HealthKit, Bluetooth access, AI Coaching Assistance, marketing emails if applicable).
• Legal obligation (tax, regulatory).

To exercise any of these rights, email [email protected].

Because our service providers operate in the United States, your data may be transferred outside your country. Where required by law (for example, for transfers from the EU), we rely on Standard Contractual Clauses or other approved transfer mechanisms.