Privacy Policy

Coacher ("we", "our", or "us") is an AI-powered fitness coaching service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our application and services.

We collect the following categories of information:

• Account information — your name and email address provided when you sign up.
• Fitness profile — fitness level, preferred training days, weekly training hours, timezone, and any physical limitations you choose to share.
• Garmin Connect data — activity records, workout history, and related metrics synced from your Garmin account with your explicit consent.
• Google Calendar data — calendar events created or modified by Coacher when you enable calendar sync.
• Goals and training plans — goals, coaching plans, and activity logs you create within the app.
• Usage data — tool calls made through the MCP interface, timestamps, and error information for debugging and service improvement.

We use the information we collect to:

• Provide personalised AI coaching and training plan recommendations.
• Sync your workouts from Garmin Connect and display them in your coaching context.
• Optionally schedule training sessions in your Google Calendar.
• Improve the accuracy and relevance of our coaching suggestions.
• Diagnose technical issues and maintain service reliability.

We do not sell your personal data to third parties.

When you connect your Garmin account, you provide your Garmin credentials to authenticate. We use these credentials solely to obtain the needed "access token" in order to obtain your Garmin Activity data. We do not store your user name or password.

You may disconnect your Garmin account at any time from the app, which will remove the stored tokens.

When you enable Google Calendar sync, we request OAuth access to create and update calendar events on your behalf. We only write events that correspond to your training plan. You may revoke this access at any time from your Google account settings or from within the app.

When using this product on ChatGPT, you are agreeing to the OpenAI Terms of Service.

We retain your data for as long as your account is active. Operational logs (such as MCP audit logs) are automatically deleted after 2 days. You may request deletion of your account and all associated data by contacting us.

All data is transmitted over HTTPS. Sensitive tokens (OAuth access tokens, refresh tokens, authorization codes) are stored as SHA-256 hashes — the plaintext values are never persisted to our database. We apply standard security practices including parameterised queries, security headers, and principle of least privilege.

We use the following third-party services:

• Clerk — authentication and user management (clerk.com/privacy).
• Garmin Connect — fitness activity data.
• Google — calendar integration.
• Encore.dev — backend infrastructure and hosting.

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, please contact us at the address below.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above. Continued use of Coacher after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or your data, please contact us at privacy@meetcradle.com.