Privacy Policy

    Effective Date: November 26, 2025

    1. Introduction

    LeCoach ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered cycling coaching application.

    We are located in The Netherlands and comply with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

    2. Information We Collect

    2.1 Account Information

    When you create an account, we collect:

    • Email address
    • Name and display name
    • Password (encrypted)
    • Profile information (age, gender, fitness level)

    2.2 Health and Fitness Data

    To provide personalized coaching, we collect and process:

    • Workout data (power, heart rate, duration, intensity)
    • Training history and performance metrics
    • Wellness data (sleep quality, fatigue levels, soreness, mood)
    • Physical characteristics (weight, FTP, heart rate zones)
    • Activity data from connected services

    2.3 Third-Party Integration Data

    When you connect third-party services like Intervals.icu, we collect:

    • Workout and activity data from those platforms
    • Athlete profile information
    • Wellness and performance metrics

    2.4 Usage Data

    We automatically collect:

    • Device information and IP address
    • Browser type and version
    • How you interact with our application
    • Error logs and performance data

    3. How We Use Your Information

    We use your information to:

    • Provide AI Coaching: We send your health and fitness data to AI providers (including but not limited to OpenAI and Google Gemini) to generate personalized training plans, workout recommendations, and coaching advice
    • Analyze Performance: Calculate training load, fitness trends, and recovery metrics
    • Sync Data: Keep your workouts and activities synchronized with connected platforms
    • Improve Our Service: Analyze usage patterns to enhance the application
    • Communicate: Send you service updates, training reminders, and support messages
    • Security: Protect against fraud and unauthorized access

    4. AI Processing and Third-Party Sharing

    4.1 AI Service Providers

    We use artificial intelligence to provide personalized coaching. Your health and fitness data may be processed by:

    • OpenAI: For natural language processing and training advice generation
    • Google Gemini: For AI-powered coaching and workout analysis
    • Other AI providers: We may use additional or alternative AI services to improve our coaching quality

    These providers process your data according to their own privacy policies. We select providers that maintain high security standards and comply with GDPR requirements.

    4.2 Third-Party Integrations

    When you connect services like Intervals.icu:

    • Data is synced between LeCoach and those platforms
    • Those platforms' privacy policies also apply to the data they collect
    • We store your connection credentials in encrypted form

    4.3 Other Service Providers

    We share data with:

    • Hosting providers: To store and serve our application (Supabase)
    • Email services: To send you notifications and updates
    • Analytics services: To understand how our application is used

    5. Data Security

    5.1 Administrative Access

    For support and quality assurance purposes, authorized administrators may access your account data in read-only mode for support, debugging, and service improvement purposes. This access is limited to essential support activities, and never used to modify your data.

    5.2 Security Measures

    We implement industry-standard security measures including:

    • Encryption of data in transit and at rest
    • Secure authentication and password hashing
    • Regular security audits and updates
    • Access controls and monitoring
    • Encrypted storage of third-party API credentials

    However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

    6. Your Rights (GDPR)

    Under GDPR, you have the right to:

    • Access: Request a copy of your personal data
    • Rectification: Correct inaccurate or incomplete data
    • Erasure: Request deletion of your data ("right to be forgotten")
    • Data Portability: Receive your data in a structured, machine-readable format
    • Restriction: Request limitation of processing
    • Objection: Object to certain types of processing
    • Withdraw Consent: Withdraw consent for data processing at any time

    To exercise these rights, contact us at the email address provided in Section 11.

    7. Data Retention

    We retain your data:

    • Active accounts: As long as your account is active
    • Deleted accounts: We delete your data within 30 days of account deletion, except where we must retain it for legal obligations
    • Backup systems: Data in backups is deleted according to our backup retention schedule

    8. Cookies and Tracking

    8.1 Essential Cookies

    We use essential cookies and local storage to:

    • Keep you logged in
    • Remember your preferences
    • Ensure the application functions properly

    8.2 Analytics Tracking

    We use PostHog analytics to understand how our application is used and to improve the user experience. This includes:

    • Page views and navigation patterns
    • Feature usage and interactions
    • Performance metrics and error tracking
    • Device and browser information

    8.3 Consent Model

    For registered users:

    • By creating an account and accepting our Terms of Service, you consent to analytics tracking
    • This helps us improve the service for all users
    • You can request to opt out by contacting us at support@lecoach.app

    For visitors (public pages):

    • Analytics tracking is enabled by default to help us understand how visitors interact with our site
    • You can opt out at any time via the cookie consent banner
    • Your opt-out choice is stored locally and respected across visits

    We do not use advertising or third-party tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may affect application functionality.

    9. Children's Privacy

    LeCoach is not intended for users under 18. We do not knowingly collect data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete it.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the application. Your continued use of LeCoach after changes constitutes acceptance of the updated policy.

    11. Contact Us

    If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

    Email: support@lecoach.app
    Location: The Netherlands

    If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).