Privacy Policy

The Short Version

We collect the minimum data needed to run the service. We don't sell your info. We use industry-standard security. You can delete your account anytime.

What We Collect

• Account Information: Email, name, password (encrypted)
• Training Data: Workout completion, progress tracking, personal records
• Payment Information: Processed securely by our payment provider (we don't store card details)
• Usage Data: How you use the app, features accessed, crash reports
• Communication: Messages with coaches, support tickets
• Health screening: Before you start training we ask a short set of health questions. Your answers are used in your browser only and are never sent to us — all we record is which version of the questions you answered, when, and whether the result was clear, flagged, or needs a doctor's sign-off first. We never store which condition you have.

Health information is “special category” data under UK GDPR. We handle it on the basis of your explicit consent (Article 9(2)(a)), which you give when you complete the screening, and we keep as little of it as we can — see above. You can withdraw consent by emailing us, though we may not be able to let you keep training if you do.

How We Use Your Data

• To provide and improve the training service
• To communicate with you about your account and workouts
• To process payments and manage subscriptions
• To provide coach support when requested
• To send product updates (you can opt out)
• To analyze usage and improve the app

What We Don't Do

• Sell your personal information to third parties
• Share your workout data without permission
• Use your data for advertising to you on other platforms
• Spam you with marketing (we're not monsters)

Data Security

We use industry-standard encryption for data in transit and at rest. Passwords are hashed. Payment processing is handled by certified PCI DSS compliant providers. We regularly review and update our security practices.

Third-Party Services

We use a small number of providers to run the service. Each one only processes what it needs for its part of it:

• Clerk — accounts and sign-in
• Stripe — payments. We never see or store your card details
• Resend — sending email
• Railway — hosting the app and its database

These act as our processors under UK GDPR: they handle your data on our instructions, and we remain responsible to you for it. Each has its own privacy policy. We do not sell your data, and we do not use third-party advertising or tracking in the app.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your training data
• Opt out of marketing communications
• Withdraw consent at any time

Data Retention

We keep your data as long as your account is active. If you delete your account, we remove your personal information within 30 days, though we may retain anonymized usage data for analytics.

Cookies

We use essential cookies to keep you logged in and remember your preferences. We also use analytics cookies to understand how people use the app. You can disable non-essential cookies in your browser settings.

International Users

We operate globally. If you're in the EU/UK, you have rights under GDPR. We comply with applicable data protection laws in your jurisdiction.

Changes to This Policy

We'll update this policy occasionally. If we make significant changes, we'll notify you by email or through the app. Continued use means you accept the updated policy.

Contact Us

Questions about privacy? Email us at privacy@thealpines.com