Privacy Policy

TrainPaceLab ("we") respects your privacy. This policy explains what data we collect, why, and your rights.

1. Data we collect

• Account data: name, email, role, and profile settings you provide.
• Physiology data: height, weight, age, sex, heart-rate thresholds, FTP, and injury history.
• Training & recovery telemetry: workout sessions, streams, laps, and daily recovery metrics (sleep, HRV, readiness) — uploaded manually or synced from wearables.
• Wearable connection data: OAuth tokens for Garmin, Strava, and COROS, used only to pull your activities on your behalf.
• Usage data: feature interactions used to improve the Service.

2. How we use it

• To compute training-load metrics (TRIMP, CTL/ATL/TSB, VDOT) and generate adaptive plans.
• To provide AI-coach insights and race strategy grounded in your telemetry.
• To process subscription payments and manage your plan.
• To improve our models and interface in aggregate, never by selling your data.

3. Sharing

We do not sell your data. We share only as needed to operate: Stripe for payments, our LLM providers for AI-coach generation (your telemetry is sent to generate responses), and wearable providers you connect. Coaches on the Team plan can view data for athletes assigned to their roster.

4. Retention

We keep your data for as long as your account is active. You can request deletion at any time; connection tokens are removed when you disconnect a wearable.

5. Security

Access to your records is scoped per user. Wearable OAuth tokens are stored encrypted at rest and accessed only by service-role functions performing syncs on your behalf.

6. Your rights

You may access, correct, or delete your data, and export your workout history. Contact support through the in-app feedback tool to exercise these rights.

7. Changes

We may update this policy; material changes will be communicated in-app or by email.