Privacy Policy
Last Updated: December 1, 2025
Introduction
Welcome to Ultra Coach. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our training and coaching platform.
Information We Collect
Account Information
When you sign up using Google SSO, we collect your name, email address, and profile picture to create and manage your account.
Training Data
We store your training plans, completed activities, workout metrics (distance, elevation, duration, heart rate, cadence), and any notes or goals you enter into the platform.
Strava Integration Data
When you connect your Strava account, we collect and store your activity data including GPS tracks, heart rate data, cadence, and other metrics available through the Strava API. We also download and store TCX files for detailed analysis.
AI Analysis Data
We store AI-generated coaching insights, workout analyses, and recommendations based on your training data.
How We Use Your Information
We use your information to:
- Provide training planning and activity tracking features
- Sync and analyze your Strava activities
- Generate personalized AI coaching insights and recommendations
- Display your progress, metrics, and training calendar
- Maintain and improve our service
- Communicate with you about your account and service updates
Data Storage and Security
Your data is stored securely in encrypted databases. We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication via Google OAuth
- Regular security audits and updates
- Access controls and monitoring
TCX files and activity data are stored in secure blob storage with restricted access.
Data Sharing and Third Parties
We do not sell your personal data. Your training data is private and only accessible to you.
We may share data with:
- Strava: We use the Strava API to sync your activities. This requires authentication through Strava's OAuth system.
- Google: For authentication via Google SSO.
- AI Service Providers: Your training data may be processed by AI services (like OpenAI) to generate coaching insights. These services process data under strict data processing agreements.
- Cloud Infrastructure Providers: We use cloud hosting services to store and process your data securely.
Your Rights and Choices
You have the right to:
- Access Your Data: View all your training data, activities, and analyses in the platform
- Delete Your Data: Use the Advanced Settings page to delete Strava data or all user data
- Disconnect Services: Disconnect your Strava account at any time from the Dashboard
- Export Your Data: Download your training plans and activity data
- Request Data Correction: Update or correct your training data directly in the platform
Cookies and Tracking
We use essential cookies for authentication and session management. We do not use tracking cookies or analytics that collect personal information for advertising purposes.
Children's Privacy
Ultra Coach is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Ultra Coach after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: andrew@layabout.net
Compliance
This Privacy Policy is designed to comply with applicable data protection laws, including GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). We respect your privacy rights and are committed to protecting your personal information.