Privacy Policy
Last updated: July 18, 2026 · v1.1 (beta)
What we collect
Your account (name and email, via Google sign-in), the race results you enter and the training profile computed from them (VDOT, skew, paces), the training plans we generate for you, and — if you choose to link Garmin — your running activity data (pace, heart rate, temperature, laps).
Coach conversations
When you chat with the coach, your messages are sent to an AI model (Anthropic's Claude) to generate guidance. They are not stored on our servers and are not used to train models.
Garmin
If you link Garmin Connect, we authenticate once and store only the resulting access token, encrypted at rest (AES-256-GCM). We never store your Garmin password. You can unlink at any time, which deletes the stored token.
Your rights
You can export or delete your data, or unlink Garmin, by contacting parker@brownfamilysports.com. Deletion requests are honored within 30 days.
Security
Your data lives in a private PostgreSQL database (DigitalOcean managed, reached over a private network), scoped to your account by the application. Transport is encrypted over HTTPS. COACH is intended for adults; it is not directed at children under 13.