Privacy Policy

1. Who We Are

TrainBetter.Coach ("TrainBetter," "we," "us," or "our") is an AI-powered training intelligence platform for triathletes and triathlon coaches. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website at trainbetter.coach, our mobile applications, and our related services (collectively, the "Platform").

By creating an account or using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account information (name, email, password, phone, profile photo)
• Coach application information
• Coaching notes
• Training plans
• Communications

2.2 Information from Connected Services

When you connect third-party services, we may receive the following data:

• Strava — Activities, splits, distance, pace, speed, power, heart rate, elevation, calories, and activity metadata
• Whoop — HRV, recovery scores, strain scores, sleep data
• Garmin — Activity data, body battery, sleep metrics, device metrics
• TrainingPeaks — Planned workouts, completed workouts, training metrics

We only access data within the scopes you authorize during the OAuth connection process. You can disconnect any integration at any time from your account settings.

2.3 Information Generated by the Platform

• AI-generated insights
• AI processing metadata
• Audit logs

2.4 Information Collected Automatically

• Device information
• Session information
• Usage data
• Error and performance data (Sentry)

2.5 Health-Adjacent Data

3. How We Use Your Information

3.1 Providing and Operating the Platform

• Creating and managing your account
• Synchronizing training and recovery data from connected services
• Generating AI-powered insights and analysis
• Facilitating coach-athlete relationships
• Processing payments and subscriptions
• Delivering training plans and coaching content

3.2 Improving the Platform

We use aggregate, anonymized data to analyze usage patterns, improve AI model accuracy, identify bugs and performance issues, and develop new features.

3.3 Communication

We may use your email address to send transactional messages (receipts, password resets, account alerts), product updates and feature announcements, and coaching-related notifications (athlete invitations, session reminders).

3.4 Security and Compliance

We use audit logs and session data to detect unauthorized access, prevent fraud, and comply with legal obligations.

4. How We Share Your Information

4.1 We Never Sell Your Data

4.2 Sharing with Your Coach

When you accept a coaching relationship, your coach may access:

• Your training activities and performance data
• AI-generated insights about your training
• Shared coaching notes
• Your profile information (name, email, profile photo)

You can end a coaching relationship at any time, which revokes the coach's access to your data going forward.

4.3 Sharing with Service Providers

We share data with trusted service providers who help us operate the Platform:

• Amazon Web Services (AWS) — Cloud infrastructure, data storage, computing
• Stripe — Payment processing
• SendGrid — Transactional email delivery
• OpenAI — AI analysis and insight generation
• Sentry — Error tracking and performance monitoring

4.4 Sharing Aggregated, Anonymized Data

We may share aggregated, anonymized data that cannot be used to identify you for research, analytics, or industry benchmarking purposes.

4.5 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of TrainBetter, our users, or the public.

5. Payment Information

All payment processing is handled by Stripe. Your payment card information is entered directly into Stripe's payment form and is never transmitted to or stored on TrainBetter's servers.

6. Data Security

We implement industry-standard security measures to protect your data:

• TLS/HTTPS encryption for all data in transit
• Bcrypt password hashing
• RS256 JSON Web Tokens for authentication
• Encrypted third-party integration tokens
• AWS VPC network isolation
• AWS Secrets Manager for credential storage
• Role-based access control (RBAC)
• Comprehensive audit logging

7. Data Retention and Deletion

7.1 Active Accounts

We retain your data for as long as your account is active and as needed to provide the Platform's services.

7.2 Account Deletion

You may request account deletion at any time by contacting privacy@trainbetter.coach or through your account settings. Upon receiving a deletion request, we will delete your personal data within 30 days, with the exception of data we are required to retain by law (e.g., billing records, audit logs for compliance purposes).

7.3 Disconnecting Integrations

When you disconnect a third-party integration, we stop importing new data from that service. Previously imported data remains on the Platform unless you request its deletion.

7.4 Ending a Coaching Relationship

When a coaching relationship ends, the coach's access to your data is revoked. Coaching notes created by the coach during the relationship may be retained by the coach for their records.

8. Your Rights

8.1 All Users

Regardless of your location, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correct — Update or correct inaccurate personal data
• Delete — Request deletion of your personal data
• Disconnect — Remove third-party integrations at any time
• Withdraw consent — Revoke consent for data processing where consent is the legal basis
• Export — Request a portable copy of your data

To exercise any of these rights, contact privacy@trainbetter.coach.

8.2 European Economic Area (GDPR)

If you are in the EEA, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data includes contractual necessity, legitimate interest, and consent.

8.3 California (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated in Section 4.1, we do not sell personal information.

9. Cookies and Tracking

We use essential cookies only — those required for authentication, session management, and security. We do not use third-party advertising cookies or tracking pixels.

10. Children's Privacy

The Platform is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child under 16 has provided us with personal information, please contact privacy@trainbetter.coach.

11. International Data Transfers

The Platform is hosted on Amazon Web Services in the United States. If you are accessing the Platform from outside the United States, your data will be transferred to and processed in the United States. By using the Platform, you consent to the transfer of your data to the United States, where data protection laws may differ from those in your jurisdiction.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes your acceptance of the updated Privacy Policy.