Privacy

The short version

Tapr Coach is a personal endurance-coaching app. It reads your training data so it can write you a training plan and talk to you about it. It is not an advertising business: your data is never sold, never rented, and never used to build a profile for anyone other than you.

What we collect

• Account details. When you sign in with Google we receive your name, email address and profile photo. If you sign in with or connect Strava, we receive your Strava athlete ID and name.
• Training activities. From Strava, from intervals.icu, or from .fit files you upload: date, sport, duration, distance, elevation, heart rate, power, pace, and — where the source provides them — per-second streams and lap splits, which are summarised into time-in-zone and best-effort figures.
• What you tell the coach. Your messages in Coach Chat, your wellness check-ins (sleep, fatigue, soreness, motivation and any notes), injuries and periods away that you record, your goals and race results, and your training zones (FTP, CSS, max and resting heart rate).
• Operational data. Which devices you have enabled notifications on, and counters for how much AI usage your account generates, so the running costs of the app can be monitored.

There is no advertising or analytics tracking in the app, and no third-party trackers.

What we use it for

• Generating your weekly training plan and mid-week adjustments.
• Answering you in Coach Chat, with your recent training as context.
• Showing your own progress back to you — trends, records, estimates.
• Sending you email and push notifications you have opted into: the weekly recap, coach notes, and activity acknowledgements.
• Keeping the service running, and monitoring its cost.

We do not use your data to train any AI model. Your data is sent to a model to produce your answer, and that is all.

Where it goes

Your data is stored in Amazon DynamoDB in AWS’s Sydney region (ap-southeast-2). These are the only third parties that ever see any of it, and only for the purpose listed:

• Amazon Web Services — hosting, database, email delivery, and Amazon Bedrock, which runs the AI coach. Prompts are processed to generate your response and are not used to train the model.
• Vercel — serves the web app.
• Google — sign-in only (we never receive your password).
• Strava and intervals.icu — only if you connect them, and only to read your activities and, for intervals.icu, to write your planned sessions back.
• ImprovMX — forwards email sent to our support addresses.
• Your browser’s push service (Google, Apple or Mozilla, depending on your device) — delivers notifications if you turn them on. It sees the notification, not your training history.

Your control over it

• Disconnect a source at any time. Strava and intervals.icu can each be disconnected in Settings, and Strava syncing can be switched off without disconnecting.
• Turn off notifications per device in Settings, and clear your email address to stop email entirely.
• Tell the coach to forget something. Anything it remembers about you can be removed conversationally, or deleted from the Wellness page.
• Ask for your account to be deleted. Contact us and it will be removed.

What deletion actually removes

Deleting an account removes the whole record of it: profile, connection tokens, activities, plans, goals and progress, training zones, chat history, wellness check-ins, recorded injuries and time away, the coach’s long-term memory, pending suggestions, connected-service credentials, usage counters and notification registrations. Deletion is immediate and is not recoverable.

Data held by a service you connected — your activities on Strava, for example — belongs to that service and is unaffected. Delete it there if you want it gone.

How long we keep it

For as long as you have an account, because the coach’s value comes from your training history. There is no automatic expiry. If you stop using Tapr Coach and want your data gone, ask and it will be deleted.

Security

Access is restricted to your own account: every request is checked against your signed-in identity, and data is scoped to you. Connection credentials are held as secrets and never shown back to you or anyone else. Traffic is encrypted in transit, and storage is encrypted at rest by AWS.

No system is perfectly secure. Tapr Coach is a small personal project rather than a large company with a security team, and you should weigh that when deciding what to share with it.

Children

Tapr Coach is not intended for children under 16 and we do not knowingly collect their data.

Changes

If this policy changes materially we will update the date at the top and, where the change affects how your data is used, tell you in the app.

Contact

Questions, or a request to export or delete your data — email support@taprcoach.com.