Privacy Policy

Last updated: June 25, 2026

TrainingSelf ("the App") is a personal training analytics application developed by Arturo Díaz. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

1.1 Data you provide

• Email address — Used as your account identifier.
• Profile data — Weight, height, date of birth, sex, FTP, max HR, resting HR, VO2max.

1.2 Data from Apple HealthKit

With your explicit permission, the App reads:

• Heart rate, resting heart rate, heart rate variability (HRV/rMSSD)
• Workouts (type, duration, calories, distance)
• Sleep analysis (duration, phases)
• Body measurements (weight, VO2max)
• Active energy burned

We never write data to HealthKit. HealthKit data is processed locally and is not shared with third parties for advertising.

1.3 Data from Strava

If you connect your Strava account (OAuth 2.0), we read:

• Activities (type, duration, distance, elevation, power, heart rate)
• Power streams (second-by-second data for analytics)
• Athlete profile (FTP)

1.4 Data from Garmin Connect

If you connect your Garmin account, we read:

• Heart rate variability (nocturnal HRV), stress levels, Body Battery
• Sleep data (score, phases, duration)
• Resting heart rate, respiration rate, body composition (weight)

2. How We Use Your Data

• Training analytics — Calculate TSS, NP, CTL/ATL/TSB, power zones, recovery metrics.
• AI coaching — Profile and metrics are sent to Claude (AWS Bedrock) for personalized recommendations.
• Sync and persistence — Profile and daily metrics stored on AWS for AI coaching continuity.

3. Data Storage and Security

• Local — Most data lives on your device (SwiftData).
• Cloud — Profile summary and metrics in AWS DynamoDB (us-east-1), encrypted at rest.
• In transit — All communications use HTTPS/TLS.
• No third-party analytics — No analytics SDKs, ad networks, or tracking.

4. Data Sharing

We do not sell, rent, or share your data with third parties.

Data is only sent to: AWS Bedrock (AI coaching), Strava API (read activities), Garmin Connect (read health data).

5. Data Retention

• Data retained while you use the App.
• Contact us to delete all cloud-stored data.
• Garmin sync logs auto-deleted after 30 days.

6. Your Rights

• Access — View all data within the App.
• Deletion — Contact us to delete cloud data.
• Revoke — Disconnect Strava/Garmin from Settings. Revoke HealthKit from iOS Settings.

7. Children's Privacy

Not intended for children under 16. We do not knowingly collect data from children.

8. Contact

Email: arturo@training-self.com