Privacy Policy

1. Introduction

Trainingload.ai ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including activity data imported from connected fitness platforms. We prioritize data minimization, transparency, and user control.

2. Data We Collect

We collect information you provide directly and information required to deliver core training analysis features.

• Personal Data: Name, email address, account identifiers, and password (hashed).
• Activity Data: Workout logs, route/GPS traces, heart rate, power, cadence, pace, elevation, and related performance metrics synced from connected services or uploaded manually.
• Third-Party Data: Information received from connected services (e.g., Garmin Connect, COROS, Intervals.icu), subject to your explicit authorization and granted scopes.
• Device Data: IP address, browser type, operating system, access logs, and basic diagnostic metadata (for security, reliability, and abuse prevention).

3. Third-Party Integrations (Garmin Connect, COROS, Intervals.icu)

When you choose to connect a third-party provider, we use the provider's authorization flow (for example OAuth) and only access the categories of data you approve.

• Data Access: We request the minimum scopes needed for product functionality and access only the data you authorize, such as activity records/files, sensor metrics, and profile metadata needed to map your account.
• Purpose: This data is used to import activities, compute training metrics, provide insights in your account, and maintain sync status. We do not use imported activity data for advertising profiling.
• No Sale of Data: We do not sell your personal data. We do not license or share imported provider data with unrelated third parties for marketing or advertising purposes.
• Revocation: You can disconnect any provider at any time from your settings. After disconnection, we stop syncing new data from that provider. You may also request deletion of previously imported data.

Our use of information received from connected providers follows applicable provider terms and privacy policies, including the Garmin Connect Privacy Policy, COROS Privacy Policy, Intervals.icu Privacy Policy .

4. How We Use Your Data

We use the information we collect or receive for the following purposes:

• To provide and maintain the Service (for example importing activities and generating analysis from connected providers or uploaded files).
• To manage your account, authentication, service integrity, and abuse prevention controls.
• To process data in line with your granted permissions and applicable legal obligations.
• To improve reliability and product quality using aggregated or de-identified usage data where feasible.

5. Data Ownership & Control

Your data belongs to you. You have control over connected providers and your account data. You have the right to:

• Access, export, and request correction of personal data we hold about you.
• Disconnect third-party services (e.g., Garmin Connect, COROS, Intervals.icu) and withdraw sync permission.
• Request deletion of imported activity data or deletion of your account and associated data, subject to legal retention requirements.
• Contact us about privacy requests and data handling questions at [email protected].

6. Security

We use administrative, technical, and physical safeguards to help protect your personal information, including access controls, encryption in transit, and operational monitoring. Data may be processed in multiple regions depending on infrastructure and provider connectivity, and we apply contractual and technical safeguards for cross-border processing where required. Even with reasonable measures, no system is perfect or impenetrable, and no transmission method can be guaranteed against interception or misuse.

7. Legal Bases for Processing

Where required by applicable law (including GDPR-style frameworks), we process personal data only under a valid legal basis, including:

• Your consent (for example, when you connect a provider account or grant optional data scopes).
• Performance of a contract with you (for example, delivering the Service you requested).
• Compliance with legal obligations.
• Legitimate interests such as platform security, abuse prevention, and service reliability, balanced against your rights.

8. Data Retention

We retain personal data only for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. When data is no longer required, we delete or de-identify it in accordance with our retention workflows.

9. International Data Transfers

Because our infrastructure and connected providers may operate in multiple regions, personal data may be processed across borders. Where required, we apply appropriate contractual, organizational, and technical safeguards for such transfers.

10. Your Privacy Rights

Subject to your jurisdiction and applicable law, you may have rights to:

• Access the personal data we hold about you.
• Request correction, deletion, or restriction of processing.
• Object to certain processing activities or withdraw previously granted consent.
• Receive a portable copy of eligible data.
• File a complaint with a supervisory authority if you believe your rights were violated.

11. Children's Privacy

The Service is not directed to children under the age required by applicable law to independently consent to data processing. If you believe a child has provided personal data without proper authorization, please contact us so we can take appropriate action.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. Material updates will be reflected by updating the "Last updated" date and, where required, by additional notice.

13. Contact Us

For privacy requests or questions about this policy, contact us at [email protected].