Effective date: 09/08/2026
Language
This document is only available in English, as it is the official language of commerce for our clients and the regions we operate. Any translated copies are not valid.
This Privacy Policy explains how Cycling Coach AI collects, uses, shares, and protects personal information when you use:
- https://cyclingcoachai.com
- https://app.usecoachai.com
and any future Cycling Coach AI mobile applications (collectively, the “Sites”)
and the Cycling Coach AI service (the “Service”).
Cycling Coach AI is operated by Liftoff S.R.L., 21 de Setiembre 3038 / 802, Montevideo, Uruguay (“Cycling Coach AI”, “we”, “us”).
When you create an account, we may collect:
- Name
- Email address
- Password or account credentials
You may also sign up or sign in with third-party providers such as Google, Apple, or Strava. In that case, we receive basic profile information (such as name and email) according to your settings with those providers.
To provide the Service and adapt your training plan, we may collect and store training and performance data, including:
- Training activities and workout metrics (for example distance, time, elevation, cadence, heart rate, power, and related performance metrics)
- Attributes you provide for plan personalization (for example age, sex, weight, injuries, and notes you write in free text)
Location data: we store only city, state, and country (when available). We do not store GPS route polylines.
If you connect Garmin Connect or WHOOP, we read the following data from those providers to assess your recovery and adapt your training:
- Sleep: total sleep duration, sleep start time, and time spent in deep, light, REM and awake stages; sleep score
- Recovery: heart rate variability (HRV), including last-night average, weekly average and baseline status; resting heart rate; blood oxygen saturation (SpO2); recovery score
From Garmin Connect we may also receive daily activity summaries, stress details, body composition, all-day respiration, pulse oximetry, health snapshots and blood pressure readings, when the permissions you grant in Garmin Connect allow it.
If you connect Apple Health on iOS, we read only the following data from your device:
- Sleep analysis, including the sleep stages (deep, light, REM and awake) and the start and end time of each sleep session
- Heart rate variability (HRV), as SDNN in milliseconds
- Resting heart rate
We read this data only while the app is open on your iPhone. There is no background sync and no Apple server we can query. We do not read any other category of health data from your device, and we do not write any data into Apple Health.
We do not read any other category of health data from Garmin Connect or WHOOP either, and we do not write data back into any of the three. We do not store health data in iCloud.
If you enable cycle tracking, we store the dates of your periods and, if you log them, your flow level and your discomfort level. We use this data only to adapt your training plan to your cycle phase. Cycle tracking is off by default, and you can turn it off at any time in your account settings.
We use health, recovery and menstrual cycle data for one purpose: to assess your recovery and adapt your training plan and your daily session.
We do not use health, fitness, medical or menstrual cycle data for advertising, marketing or use-based data mining. We do not sell it, we do not license it, and we do not share it with data brokers. We do not send it to our analytics or advertising providers.
When you use the Sites or Service, we may collect:
- IP address
- Device and browser type
- Operating system
- Pages and screens viewed
- Log events related to performance and security
We use cookies and similar technologies to:
- Authenticate and maintain sessions
- Remember preferences
- Measure usage and improve performance
- Support advertising and marketing (where enabled)
We use a cookie banner and collect consent where required before analytics or advertising cookies are enabled.
We collect information:
- Directly from you (account details, preferences, notes)
- From connected services when you authorize them via OAuth (Strava, Garmin Connect, WHOOP, Wahoo, Hammerhead, Rouvy or Intervals.icu)
- From Apple Health on your iPhone, when you grant access in the Health app
- Automatically from your device or browser (usage data and cookies)
We use your information to:
- Provide and operate the Service (account, authentication, plan creation, plan adaptation, syncing activities)
- Provide customer support
- Communicate with you about your account and Service updates
- Improve performance, reliability, and security
- Send marketing communications if you opt in, or where permitted by law (you can unsubscribe anytime)
Service-related emails are necessary to operate your account.
If you are in the EEA or UK, we process personal data under these legal bases:
- Contract: to provide the Service you request, including plan generation and activity syncing
- Consent: for marketing emails where required, and for analytics or advertising cookies where required
- Legitimate interests: to secure the Service, prevent abuse, and improve performance, balanced against your rights
You can withdraw consent at any time where processing is based on consent.
We do not sell your personal information.
We may share personal information with:
Vendors that help us operate the Service, such as:
- Hosting and infrastructure (for example SiteGround, Hetzner)
- Analytics and tag management (for example Google Analytics, Google Tag Manager)
- Email delivery (for example MailerLite for marketing, MailerSend for transactional emails)
- Payment processing (Paddle as Merchant of Record)
These providers process information on our behalf under contractual obligations.
Cycling Coach AI uses artificial intelligence to generate your training plans, your daily sessions, your recovery recommendations and the answers of the AI coach chat.
To do this we send a summary of your data to OpenAI, which acts as our processor. That summary may include:
- Your training activities and performance metrics
- Your sleep duration and sleep stages, your heart rate variability, your resting heart rate and your recovery score, obtained from Garmin Connect, WHOOP or Apple Health
- Your menstrual cycle phase, period dates, flow and discomfort, if you have enabled cycle tracking
- Your age, weight, injuries and any free-text notes you write
- Your conversations with the AI coach
We apply data minimization and avoid intentionally sending direct identifiers, such as your name or your email address.
OpenAI is bound by contract to provide the same level of protection for this data as set out in this Privacy Policy. OpenAI may not use it for advertising, marketing or data mining, and does not use it to train its models. OpenAI data handling and retention depends on the API configuration and applicable platform controls. Some API features can retain application state for a limited period by default unless configured otherwise.
We do not use your data to train our own artificial intelligence models.
We ask for your consent before we start this processing. You can stop the processing of your health and recovery data at any time by disconnecting Garmin Connect, WHOOP or Apple Health in your account settings, which also deletes the health records imported from that provider. You can stop all artificial intelligence processing by deleting your account. Because the Service consists of artificial intelligence coaching, we cannot provide training plans or recovery recommendations without this processing.
We may disclose information if required by law, or if we believe it is necessary to:
- Comply with legal obligations
- Protect the security or integrity of the Service
- Protect the rights, property, or safety of Cycling Coach AI, our users, or others
We may use advertising features (for example remarketing) to measure and improve campaigns.
Where required, we will only enable advertising cookies after you provide consent through our cookie banner.
Your information may be processed in countries other than your own, including Uruguay, the United States, and the European Union, where our service providers operate.
Where required by law, we take steps designed to provide appropriate safeguards for cross-border transfers.
We retain personal information for as long as your account is active and for up to 1 year after account closure, unless:
- You request deletion (see Section 10)
- We must retain certain information to comply with legal obligations, resolve disputes, or enforce agreements
Backups: data may remain in encrypted backups for a limited period until overwritten through normal backup cycles.
You can request access, correction, or deletion by contacting [email protected].
If you request deletion, we will delete or anonymize your personal information unless we must retain certain information for legal compliance or security.
If you are in the EEA or UK, you may have rights to:
- Object to processing
- Restrict processing
- Request data portability
- Lodge a complaint with your local data protection authority
When you connect a third-party service via OAuth (Strava, Garmin Connect, WHOOP, Wahoo, Hammerhead, Rouvy or Intervals.icu), we store access tokens to sync your data. Apple Health does not use OAuth: there is no token, and the app reads from your device directly.
You can disconnect any provider at any time from Connections in your account settings. You can also revoke our access from the provider itself: in Garmin Connect, under Account Settings, Account Information, Connected Apps; in WHOOP, under Settings, App Settings.
Apple Health works differently, because the data lives on your iPhone and not on an Apple server. You revoke our access in the Health app on your iPhone, under your profile, Privacy, Apps. Revoking access stops new data from reaching us; it does not delete what has already synced. To delete that too, disconnect Apple Health in your account settings.
When you disconnect a provider or revoke access:
- We delete the access tokens and stop syncing immediately
- We delete the sleep, heart rate variability and other health records imported from that provider
- We keep the activities already imported, so your training history and your plan do not change
- We may retain aggregated, non-identifying training metrics necessary to maintain basic Service continuity, where permitted, unless you delete your account
Deleting your account deletes everything: your activities, your health records and your menstrual cycle records.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service is not intended for children under the age of 13.
If you are in the EEA or UK, the Service is not intended for children under 16 (or the minimum age required by local law).
We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at [email protected].
We may update this Privacy Policy from time to time.
If we make material changes, we will notify you by email and or a prominent notice on the Sites before the changes take effect, and we will update the effective date above.
Email: [email protected]
Mail: Liftoff S.R.L., 21 de Setiembre 3038 / 802, Montevideo, Uruguay