Privacy Policy

Data we collect

We collect what the product needs to coach you, and not more:

• Account data — name, email address, and authentication credentials, managed through our hosting provider Supabase.
• Athlete profile — timezone, weight, biological sex, training zones, races, and constraints you or your coach enter.
• Training and health data — planned workouts, recorded activities, and device-synced metrics such as heart rate, HRV, sleep, VO2max, and your daily readiness check-ins.
• Messages — conversations with your coach and with the AI assistant inside the app (and over WhatsApp, if you opt in).
• Technical data — IP address, cookies, and basic usage analytics.

Device connections

If you connect a device, the credentials you provide are stored AEAD-encrypted (authenticated encryption) and are used solely to sync your activities, workouts, and recovery metrics. You can disconnect a device at any time from the Integrations page, which stops further syncing.

AI processing

AeroPace uses AI models provided by Anthropic to draft training plans, analyze your load, and answer routine questions. Your training data and messages are sent to Anthropic for processing under contractual terms; they are not used to train Anthropic's models under our API agreement, and we never sell your data. When you train with a coach, AI proposals that change your plan require your coach's approval.

WhatsApp (optional)

You can optionally link a WhatsApp number to chat with your coach and the AI assistant. If you do, those messages are transmitted through WhatsApp and are also subject to Meta's own terms and privacy policy. WhatsApp is never required — the in-app chat offers the same features.

Cookies

We use a small number of first-party cookies: authentication session cookies (so you stay signed in) and a language-preference cookie. We use Vercel Analytics for aggregate, privacy-preserving usage measurement. We do not use advertising or cross-site tracking cookies.

Sharing

Your coach sees the training data needed to coach you. Beyond that, data is shared only with the service providers that run the platform — Supabase (database and authentication), Vercel (hosting and analytics), Anthropic (AI processing), and Meta/WhatsApp if you opt in to that channel. We do not sell personal data and we do not share it with advertisers.

Retention

We keep your data for as long as your account is active.

When you delete your account, the data that identifies you — your profile, activities, workouts, messages, and device credentials — is removed from our production systems. Platform backup copies age out automatically on a short, fixed schedule.

After deletion we retain a limited set of records, stored securely: a minimal audit log (kept as a security and legal record), billing and AI-usage records with your identity removed, and aggregated or de-identified statistics that can no longer be linked to you. We use these retained, de-identified records for internal analytics and product improvement.

If you want these residual records erased as well, ask us explicitly at coach@aeropace.co and we will delete everything we are not legally required to keep.

Your rights

You can access, correct, export, and delete your data. Self-serve export and account deletion are available from your account settings. Deleting your account removes your personal data as described under Retention; if you also want the retained de-identified records erased, email us and we will handle it promptly — the same address works for any other privacy request.

Security

Data is encrypted in transit, device credentials are AEAD-encrypted at rest, and database access is governed by row-level security so users can only reach their own rows. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you.

Changes & contact

We will update this policy as the product evolves and note the date above. Questions or requests: coach@aeropace.co.