Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Age, gender, training experience, athlete archetype, fitness goals, available equipment, and training schedule.
• Training Data: Workout logs including exercises, sets, reps, RPE (rate of perceived exertion), duration, modality, and session ratings you manually enter.
• Check-In Data: Daily self-reported metrics including sleep quality, energy level, soreness, stress, motivation, injury status, and body map selections.
• Chat Messages: Questions and messages you send to the AI coaching feature.
• Progress Photos: Photos you voluntarily upload to track physique changes.
• Existing Programs: Training programs you share with us for import into the app.

1.2 Information from Third-Party Services

• Apple HealthKit: With your explicit permission, we read health data including heart rate, heart rate variability (HRV), resting heart rate, and sleep duration. We do not write data to HealthKit. We only access data types you explicitly authorize.
• Garmin Connect: With your explicit permission, we receive health and activity data including heart rate, sleep, stress, steps, and activity summaries through the Garmin Connect API. Data is delivered via secure webhooks after you authorize the connection through Garmin's OAuth consent flow.

You may revoke third-party data access at any time through your device settings (HealthKit) or through the Garmin Connect app.

1.3 Information Collected Automatically

• Usage Data: App open events, feature usage patterns, and interaction timestamps used to improve the Service.
• Device Information: Device type, operating system version, and app version for compatibility and debugging purposes.

We do not collect location data, contacts, browsing history, or any data unrelated to the training advisory service.

2. How We Use Your Information

We use your information exclusively to provide, maintain, and improve the Redline training advisory service:

• AI-Powered Recommendations: Your check-in data, wearable metrics, training history, and profile are processed by our AI system to generate personalized daily training recommendations.
• Readiness Scoring: Health metrics and self-reported data are combined to calculate a daily readiness score that informs your training options.
• Training Load Management: Historical session data is used to calculate acute and chronic workload ratios to prevent overtraining.
• Workout Scoring: Logged sessions are scored across multiple dimensions to provide feedback on training quality.
• Coaching Chat: Your messages and training context are sent to our AI provider to generate coaching responses.
• Service Improvement: Aggregated, de-identified usage patterns help us improve recommendation accuracy and app features.

3. AI Processing and Third-Party AI Services

Redline uses Anthropic's Claude API to power AI recommendations and coaching chat. When you interact with the AI features:

• Your training context (readiness score, recent sessions, profile, goals, and check-in data) is sent to Anthropic's API to generate responses. Anthropic processes this data according to their privacy policy and data handling practices. Anthropic does not use API inputs to train their models.
• We do not send your name, email, or other directly identifying information to the AI provider. Training context is sent with your internal user ID only.
• Chat messages and AI responses are stored in our database to maintain conversation history and improve the service.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on secure, encrypted infrastructure. We implement industry-standard security measures including:

Encryption in transit (TLS/HTTPS) for all data transmission. Encrypted database storage for sensitive personal information. JWT-based authentication with automatic token refresh and expiration. Rate limiting on all API endpoints to prevent abuse.

Progress photos are stored in secure cloud storage (Supabase Storage) with access restricted to authenticated users viewing their own photos.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:

• AI Processing: Training context (not directly identifying information) is shared with Anthropic's Claude API to generate recommendations and chat responses.
• Infrastructure Providers: Your data is stored and processed by our hosting and database providers (Railway, Supabase) under their respective data processing agreements.
• Legal Requirements: We may disclose information if required by law, legal process, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

6. HealthKit and Garmin Data Compliance

Apple HealthKit

HealthKit data is used solely to provide training recommendations and readiness scores within the Redline app. We do not store raw HealthKit data on our servers beyond what is necessary for the readiness calculation (processed metrics only). HealthKit data is never used for advertising, marketing, or sold to third parties. HealthKit data is never shared with third parties except as required to provide core app functionality. We do not use HealthKit data to build user profiles for purposes unrelated to the health and fitness advisory service.

Garmin Connect

Garmin data is accessed only after explicit user consent through Garmin's OAuth authorization flow. We only subscribe to data types relevant to training recommendations: heart rate, sleep, stress, activity summaries, and body composition. Garmin data is used exclusively to enhance readiness scoring and training recommendations. Users may disconnect Garmin at any time through the app or through Garmin Connect settings.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service:

• Account and Profile Data: Retained while your account is active.
• Training Sessions and Check-Ins: Retained to provide historical analysis, workload calculations, and long-term progress tracking.
• Chat Messages: Retained to maintain coaching conversation context.
• Progress Photos: Retained until you delete them or delete your account.
• Wearable Data: Processed metrics are retained; raw data streams are not stored beyond initial processing.

Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.

8. Your Rights and Choices

• Access: You can view your profile, training history, and check-in data within the app at any time.
• Correction: You can update your profile information, goals, and training schedule through the app.
• Deletion: You can request complete deletion of your account and all associated data by contacting us.
• Data Portability: You can request an export of your training data by contacting us.
• Withdraw Consent: You can revoke HealthKit or Garmin access at any time through your device or app settings.
• Opt Out: You can stop using the Service at any time by deleting the app.

9. Children's Privacy

Redline is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app and updating the effective date above. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: redlinetrainingai@gmail.com

App: Redline — AI Training Advisor