Privacy Policy

Who is responsible for your data

ALFA CONSULTING SAS, a company incorporated in Colombia, operates AeroPace and is the controller of the personal data described in this policy. Contact: coach@aeropace.co. If another company takes over the operation of AeroPace, we will update this policy and let you know before the change takes effect.

Professional registration

When PT registration is available, we collect the professional's country, registry, registration number, registered name, accepted terms, optional evidence and review decision. Evidence is stored privately and is accessible only to the applicant and authorized administrators. It is deleted 90 days after rejection, or 12 months after the last patient link ends; account deletion also schedules removal. Unsubmitted uploads are removed after seven days. Registration alone grants no access to patient data.

With an active, consented PT link, the therapist sees limited profile information, restrictions, PT sessions and athlete-reported feedback. Injury notes and endurance summaries require separate sharing choices. Sharing with the coach controls access to PT sessions and feedback. Patient reads are recorded in an administrator-only access log retained for 24 months. Device-derived activity details are not part of the initial PT workspace.

Data we collect

We collect what the product needs to coach you, and not more:

• Account data — name, email address, and authentication credentials.
• Athlete profile — timezone, weight, biological sex, training zones, races, and constraints you or your coach enter.
• Training and health data — planned workouts, recorded activities (including GPS routes, laps and sensor samples such as heart rate, pace, power and cadence), the original activity files your devices record, device-synced metrics such as HRV, sleep and VO2max, and your daily readiness check-ins.
• Messages — conversations with your coach and with the AI coach inside the app.
• Technical data — IP address, cookies, and basic usage analytics.

Device connections

If you connect a device, the access tokens or credentials the provider issues are stored AEAD-encrypted (authenticated encryption) and are used solely to sync your activities, workouts, and recovery metrics. You can disconnect a device at any time from the Devices page, which stops further syncing.

Disconnecting stops new data from that connection flowing to AeroPace and its AI coaching. Data already imported stays in your training history, and can still inform coaching, until you delete it or request deletion; disconnecting also does not remove workouts already delivered to a device. See Your rights.

• Manage device connections

Garmin data and how we use it

AeroPace connects to Garmin Connect™ through Garmin's own authorization flow: you sign in on Garmin's own page and choose what to share. We never ask for or store your Garmin password. You see this policy, with a link to it on the Garmin card, before you connect, and Garmin handles your Garmin account under its own privacy notice.

When you connect Garmin, the information available to AeroPace depends on your device, your Garmin permissions, and the features you enable. It can include activity summaries and original FIT files, timestamps, sport, duration, distance, GPS routes, laps, heart rate, pace, power, cadence, the device model, and available sleep, HRV, recovery, and other wellness metrics. We also process your Garmin user ID and encrypted access tokens needed to associate the data with your account. Wherever AeroPace shows, exports or derives information from Garmin data, it is labelled with "Garmin" and, when known, the device model.

• Activities you record — summaries, laps, GPS route and sensor samples such as heart rate, speed, pace, power, cadence, elevation and temperature — and the original activity file recorded by your device, which we keep in private storage.
• Health summaries — such as daily steps and energy, heart rate, sleep, stress, heart rate variability, respiration, pulse oximetry, body composition, blood pressure, skin temperature, hydration and nutrition. Sleep (time asleep, stages and score), overnight heart rate variability, resting heart rate, stress, Body Battery, breathing rate and blood oxygen during sleep, VO2 max, fitness age and body composition become part of your training metrics: they are shown in the app and to your coach, and used for readiness, analytics and planning. AI features use them only with your consent (see the AI Transparency Statement below). Blood-pressure readings are shown in the app and to your coach, but are not used for readiness, analytics or planning and are not sent to AI. The other health summaries are stored encrypted and are not currently shown in the app or sent to AI.
• Menstrual cycle data only if you separately turn on private cycle tracking in AeroPace and consent to it.

We use Garmin data to provide the following:

• Activity analysis — display activities and charts, compare planned and completed workouts, calculate training load and trends, and help you and your connected coach review progress.
• AI coaching analysis — AeroPace's AI coach analyzes your activity and wellness metrics together with your goals, availability, and feedback to explain your training, build and adjust plans, and guide recovery, race preparation, and fueling. This is a core part of AeroPace; see the AI Transparency Statement below.
• Workout delivery — on your first connection, accepting the pre-connect notice and granting Garmin workout permission enables delivery unless COROS delivery is already on; existing delivery preferences are preserved. AeroPace sends structured workouts, targets, and scheduled dates to Garmin Connect™ and compatible devices. Garmin processes that data under the Garmin Connect privacy notice and may retain it; turning delivery off stops new transfers but does not remove workouts Garmin already received. Do not grant workout permission if you are restricted from uploading to Garmin.
• Service operation — synchronize records, prevent duplicate imports, investigate failures, and protect your account.

Women's health or cycle data requires a separate optional feature and explicit consent; the private cycle-tracking feature excludes that data from coach views and AI prompts and provides its own withdrawal and deletion control. Courses will only be exchanged if a course feature becomes available and you enable it.

We use Garmin data only to provide AeroPace to you and your connected coach. We do not sell it, use it for advertising, use it to make decisions about credit, insurance or employment, or provide it to other services through an API or data feed.

• Garmin Connect privacy notice
• Connect or disconnect Garmin

AI Transparency Statement

AI analysis is at the core of AeroPace. Our AI coach uses your training data, including data from Garmin when you connect it, to analyze your training, answer your questions, draft and adjust training plans, and prepare recovery, fueling, and race guidance. This is AI inference: the model produces a response for you from the context we supply. AI suggestions may be inaccurate and are not medical advice; plan changes follow the permissions set for your coaching relationship.

Which data, and with whom: relevant training history, activity and wellness summaries, derived metrics such as training load and readiness, goals, and messages, including information derived from your Garmin data, are processed by Anthropic through its commercial API to generate the requested output. Under Anthropic's commercial terms, Anthropic does not use customer data sent through that API to train its models.

What we never do: AeroPace does not use Garmin data, or prompts, responses, conversation logs, summaries or insights derived from it, to train, fine-tune, test, evaluate, benchmark or otherwise develop any AI model; we do not include it in any training or evaluation dataset; we do not build a shared AI knowledge base from it; and we do not keep it in a way intended to enable such uses. Coaches may rate anonymized AI-drafted plans to check quality; plans of athletes with Garmin data are never included.

Your consent: before you connect Garmin, the Garmin card asks you to tick a box agreeing that AeroPace's AI coach may process your Garmin data to analyze your training and adapt your plan. You cannot connect Garmin without giving this consent, and we record when you gave it. If you already have Garmin data in AeroPace from an earlier connection, AI features ask for the same permission on the Devices page before they use it.

Withdrawing consent: you can turn off "AI coaching may use my Garmin data" on the Devices page at any time. While it is off, AI features that analyze your training (AI chat, plan generation, fueling and race playbooks) are paused, so your Garmin data is not sent to AI; turn it back on to resume. You can also disconnect Garmin in Devices at any time. This stops new Garmin data from flowing to AeroPace and its AI coaching. Garmin data already imported stays in your training history, and can still inform coaching, until you delete it: at any time you can delete your account in Account security or ask us to delete your Garmin records and related conversations by emailing coach@aeropace.co. Withdrawal does not undo responses already generated. You can keep using AeroPace with data you enter manually or from other connected sources.

We will update this statement when our AI processing, applicable law or Garmin's policies change.

• Connect or disconnect Garmin (Devices)
• Request deletion of Garmin records

Strength and exercise features

If you choose the optional general-strength-with-injury trial, we store your consent version, avoidance areas, baseline and session pain, difficulty, completion and optional notes. You and your linked coach can read these records. The exercise-generation AI receives only areas to avoid, never check-in pain scores or notes. Coach stop notices contain the reason and areas. These records are included in your export and deleted with your athlete account.

AeroPace's strength and exercise features give general fitness information, not medical advice, and the AI that picks exercises can make mistakes. Exercise pages, guided sessions and the exercise lists of your strength sessions open, and AI strength sessions that list exercises are planned, only after you accept the strength and exercise terms. We record each acceptance and each withdrawal: your account, the date and time, the screen where you did it, the version and language of the text you were shown, and a fingerprint (hash) of that text. We don't record health answers, your IP address or your device for this.

We keep these records as evidence of what you agreed to, also after you delete your account; they identify you only by internal account identifiers. They are included in your data export. You can withdraw in Profile at any time; a withdrawal adds a record and does not erase the earlier ones.

Cookies

We use a small number of first-party cookies: authentication session cookies (so you stay signed in) and a language-preference cookie. We use aggregate, privacy-preserving usage measurement. We do not use advertising or cross-site tracking cookies.

Service providers and sharing

We do not sell user data. Your connected coach can view the training information needed to coach you, including Garmin activities and relevant wellness summaries, subject to feature-specific restrictions such as private cycle tracking. Authorized AeroPace staff may access data for support and service operation.

We use carefully selected service providers for hosting, data storage, email delivery, error monitoring, and the AI processing described above. They process data only to provide those services to us. For security reasons we do not publish the full list; if you need it, contact us at coach@aeropace.co and we will provide it.

Garmin supplies data from your connected account and, only if you enable workout delivery, receives workouts and scheduled dates under the Garmin Connect privacy notice. If you separately enable workout delivery to another provider you connect, that provider receives the planned workout and targets, which may have been informed by Garmin data, to synchronize them to your account or device, under its own terms and privacy policy.

Enabling an integration does not authorize a sale of your data. We will update this policy before introducing a materially different use or recipient of Garmin data and obtain any additional consent required.

Data you exchange with Garmin may be transferred to and processed in the United States and other countries. For users in the European Economic Area, the United Kingdom and Switzerland, those transfers between AeroPace and Garmin are covered by the European Commission's Standard Contractual Clauses.

• Request our list of service providers

Requests from authorities

We disclose personal data to law enforcement or other government authorities only when we receive a valid, legally binding request. For every request we: check that it is lawful and issued by an authority with jurisdiction; disclose only the minimum data the request strictly requires, and challenge requests that are overbroad or unlawful, including requests related to surveillance; notify the affected user before disclosing, unless the law prohibits it; and keep a record of the request and our response. Where a request concerns data we received from Garmin, we handle it in line with the data-protection commitments we have made to Garmin. We may also disclose information when necessary to address a security incident or protect someone's safety.

Retention

We keep your data for as long as your account is active.

We keep Garmin data while your account is active or until you ask us to delete it. Notifications received from Garmin are deleted within seven days once processed; the activities, original files and summaries they contain stay with your account. Disconnecting Garmin stops new data, revokes AeroPace's access with Garmin and deletes the stored Garmin access tokens, and leaves previously imported records in AeroPace until you delete your account or ask us to remove those records. Deleting data in AeroPace does not delete the originals held by Garmin or copies already delivered to another connected service; those providers have their own deletion controls.

When you delete your account, the data that identifies you — your profile, activities, original activity files, workouts, messages, and device credentials — is removed from our production systems, and your Garmin connection is deregistered. Backup copies are removed according to our hosting providers' backup-retention schedules; you can contact us for details applicable to your deletion request.

After deletion we retain a limited set of records, stored securely: a minimal audit log (kept as a security and legal record), billing and AI-usage records with your identity removed, and aggregated or de-identified statistics that can no longer be linked to you. We use these retained, de-identified records only for internal analytics, security and accounting, never to train, test, evaluate, improve or otherwise develop any AI model. Garmin data, and anything derived from it, is never included in that analytics.

If you want these residual records erased as well, ask us explicitly at coach@aeropace.co and we will delete everything we are not legally required to keep.

Your rights

You can access, correct, export, and delete your data, and withdraw consent for optional processing:

• Access and correction — review your activities, charts, and profile in the app. Edit profile details yourself where a control is available. For imported Garmin records or other data you cannot edit, email us to request access or correction; changes to Garmin's original records must also be made with Garmin.
• Export — use Export my data under Account security for a JSON download. The current export includes up to the 500 most recent activities and their laps, with limits on other collections. It is not a complete archive of raw FIT files, sample-by-sample streams, or all wellness records. Contact us for data missing from the self-service export or a fuller copy of the data we hold.
• Deletion — use Delete account under Account security, or email us to request removal of specific Garmin records, related conversations, or retained records described under Retention. We may verify your identity before carrying out a request.
• Withdrawal — turn off "AI coaching may use my Garmin data" on the Devices page to pause AI processing of your Garmin data, disconnect Garmin in Devices to stop new Garmin data from flowing to AeroPace and its AI coaching, or revoke AeroPace's access from your Garmin Connect account settings. Turn off workout delivery on the Garmin card to stop sending workouts to Garmin. Private cycle tracking has its own withdrawal and deletion control in your profile when that feature is available.

You do not need to delete your entire account to make a privacy request. Write to coach@aeropace.co and tell us which processing or records your request concerns. We will explain any information that must be retained and the effect on the features you use.

• Review or correct your athlete profile
• Export your data
• Delete your account
• Disconnect Garmin
• Request access, correction, deletion, export, or withdrawal

Security

Data is encrypted in transit, device access tokens are AEAD-encrypted at rest, original activity files are kept in private storage, and database access is governed by row-level security so users can only reach their own rows. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you and, where it involves Garmin data, Garmin.

Changes & contact

We will update this policy as the product evolves and note the date above. Questions, privacy requests, or reports of abuse of the service: ALFA CONSULTING SAS, coach@aeropace.co.