Privacy Policy
This Privacy Policy explains how UNDRRTD FTNSS ("UNDRRTD", "we", "us") collects, uses, shares, and protects your information when you use our multi-sport training app and website (the "Service"). By using the Service you agree to this policy.
Information We Collect
- Account information — your name, email address, and password (stored only as a secure hash).
- Profile & training information — the goals, race targets, experience, schedule, injuries, and preferences you provide so we can build your training plan.
- Health & fitness data — workouts and activities you record or import, including GPS routes and location, distance, pace and speed, duration, elevation, heart rate, cadence, power, calories, and perceived effort.
- Connected-service data — when you choose to link a third-party account or device (such as Garmin Connect, a Garmin wearable, or Strava), we access the fitness and wellness data you authorize. From Garmin this may include completed activities (with GPS, heart rate, laps, and power), and wellness metrics such as sleep, resting heart rate, heart-rate variability (HRV), body battery, steps, and stress. We access this data only with your explicit consent and use it only to provide the Service's training features.
- Technical data — device and app information, and basic logs needed for security, reliability, and troubleshooting.
How We Use Your Information
- Create, deliver, and adjust your personalized training plans and workouts.
- AI-assisted coaching. We use artificial-intelligence / machine-learning models to generate training plans, analyze your workouts, and provide coaching feedback and recommendations based on your profile, activity, and health data. AI processing is performed through our AI provider, Anthropic (Claude API). We do not sell your data and we do not permit our AI provider to use your data to train their models.
- Device integration. With your authorization, we may publish planned workouts and training plans to your connected Garmin Connect account so they sync to your Garmin device, and import your completed activities back into the Service to track progress and complete your plan.
- Authenticate your account, keep the Service secure, and send essential account communications (such as verification and password-reset emails).
Garmin and Other Connected Services
Linking a connected service is optional and entirely under your control. When you connect Garmin Connect (or a Garmin device), you authorize UNDRRTD to access the data described above through Garmin's APIs. We use Garmin-sourced data solely to provide your coaching and training features and do not share it with third parties except the service providers listed below that help us operate the Service. You can revoke access at any time by disconnecting the integration in the app's Settings or by removing UNDRRTD's authorization in your Garmin Connect account; after you disconnect we stop accessing new data and delete the stored connection tokens.
How We Share Information
We do not sell your personal data. We share data only with the service providers needed to operate the Service, each of which may process it only to perform their function on our behalf:
- Anthropic — AI models that power coaching, plan generation, and workout analysis.
- DigitalOcean — cloud hosting, database, and storage.
- Google — maps and "Sign in with Google" authentication.
- Brevo — transactional email delivery.
- Connected services you choose to link — such as Garmin and Strava.
We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.
Data Retention & Deletion
We retain your information for as long as your account is active or as needed to provide the Service. You can delete individual workouts in the app, disconnect any linked service at any time, or request deletion of your account and associated data by contacting us. Deleting your account removes your personal and training data from our active systems.
Your Rights & Choices
- Access, correct, or delete your personal and training data.
- Connect or disconnect third-party services and devices at any time.
- Control push-notification preferences in the app's Settings.
- Request a copy of your data, or account deletion, by contacting us.
Security
We use industry-standard safeguards — including encrypted transport (HTTPS), hashed passwords, access controls, and secure token storage — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.
Children's Privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the app.
Contact
Questions about this policy or your data: [email protected]