Privacy policy

• Account details — your name, email address, password (stored hashed), role (athlete, coach or owner), time zone and the coach you are assigned to.
• Health and fitness metrics from the devices and apps you choose to connect: heart rate, heart-rate variability, resting heart rate, sleep, workouts, power, pace, distance, calories and similar readings. They come from:
  • Apple Health — through the AthletIQ iPhone app, or through Health Auto Export if you use it.
  • Google Health (Fitbit, Pixel Watch) — read from your Google account once you connect it; see “Google Health data” below.
  • Garmin and COROS — the AthletIQ app signs in to your account on your behalf. Your password goes only to Garmin or COROS and is never stored by us, and the sign-in token stays on your phone.
  • WHOOP, Oura, Polar — connected directly to your account with them.
• Workout recordings — the second-by-second heart rate, pace, distance, power, cadence and elevation recorded during a workout, and its GPS route (precise location during the workout only), from the AthletIQ iPhone app, an uploaded file or a connected device. We use them to draw the workout's map, charts and splits for you and your coach. We never read your location outside a recorded workout.
• Daily check-ins — the soreness, mood, stress and fatigue ratings you enter.
• Workouts you log by hand, upload as files, or that arrive from a connected device, including notes and your rating of perceived effort.
• Training profile set by your coach: thresholds such as FTP, threshold heart rate, threshold pace and body weight, used to calculate training load.
• Voice notes recorded by your coach when they draft your plan by speaking. The recording is transcribed and the transcript is kept with the plan; the audio is stored so the transcript can be re-checked.
• Billing records — whether you have an active coaching subscription and the invoice history Stripe reports to us. We never see or store your card number.
• Technical logs — the requests our servers handle (time, path, IP address, browser or app version) kept briefly to keep the service running and secure.

If you connect Google Health, we read your activity and fitness, sleep, and health metrics (such as resting heart rate and heart-rate variability) to calculate your readiness, match workouts to your plan and share them with your coach. AthletIQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not let people read it except with your consent, for security, or as required by law. You can disconnect at any time in Watches & devices.

• You — everything about you, on the web and in the iPhone app.
• Your assigned coach — your readiness, metrics, check-ins, workouts and plan, so they can coach you. A coach only sees athletes assigned to them.
• The owner of AthletIQ LLC, as administrator — can manage accounts, assign coaches and, when needed to support you or investigate a problem, view any account. Administrative actions are recorded in an audit log.

We use a small number of service providers (“processors”) that handle data only on our instructions, only to run the service:

• Cloudflare — hosts the application, database, file storage and background jobs.
• Stripe — processes coaching payments. Stripe receives your email and payment details directly; its own privacy policy applies to what you enter on Stripe’s pages.
• Cloudflare Workers AI, OpenRouter and Anthropic — provide the AI features (workout analysis, voice-note transcription, plan drafting). Plan drafting may be routed through OpenRouter to the AI provider that serves the request, and only to providers that do not store or train on what they are sent. The workout, plan and check-in details needed for a request are sent for processing only and are not used to train models.

We do not sell your data, share it with advertisers, or use it for advertising.

Some features use AI to summarise a workout, flag patterns or draft a plan. AI suggestions are informational, are reviewed by your coach, and are not medical advice. Your coach decides what goes into your plan.

• Your data is kept while your account exists.
• Encrypted backups are kept for 90 days and then deleted automatically.
• When you delete your account (or ask us to), your account and health data are removed within 30 days of the request. Payment records that we are required to keep for accounting are retained with only an internal id, and the audit log keeps a record that the account was deleted.

You can, at any time:

• Download your data — Profile, “Download my data” gives you a JSON file with your profile, workouts, metrics, sleep, check-ins, plan and analytics.
• Delete your account — Profile, “Delete my account”. You will be asked to type your email to confirm; the deletion is permanent.
• Disconnect a device — Watches & devices in the app, or Devices & data on the web, lets you stop any connection; data already imported stays until you delete it or your account.
• Correct something — ask your coach (training profile) or email us (account details).

You can also make any of these requests by email at support@coachathletiq.com. We answer within 30 days.

Connections are encrypted in transit (HTTPS). Passwords are stored hashed. Device credentials and invite links are stored hashed or encrypted, and access to your data is limited by role. Sessions are ended when a password is reset or an account is deleted, and sign-in attempts are rate-limited. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Messages between an athlete and their coach are end-to-end encrypted: only their own devices can read them, and AthletIQ cannot. If you report a message, your device sends us the text of that one message with your reason so our support team can review it, and we keep the report for as long as we need it to handle the report and keep the service safe. Either person can block the other, which stops new messages in both directions until they unblock.

The service is not intended for anyone under 16. Accounts are created by invitation only; if we learn that an account belongs to someone under 16, we will delete it.

If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email before the change takes effect.

Questions or requests: support@coachathletiq.com. See also our Terms of service.