Consumer Health Data Privacy Policy
Effective 2026-08-26 · version 2026-08-26.v2
This policy describes TrekReady's collection and use of consumer health data, including information that identifies—or can reasonably be linked to—a person and their physical health or fitness.
Categories collected
- Activities, exercise type, distance, duration, pace, elevation gain, heart rate, and VO2 max.
- HRV, sleep, resting heart rate, readiness, body battery, stress, steps, and manual wellness entries.
- Objectives, routes, season and altitude plans, outcomes, and technical/fitness evidence.
- Training context: general area and constraints you confirm; activity-derived workload and session patterns; and any earlier home-elevation or altitude notes retained until changed or deleted.
- Coach prompts, responses, recommendations, and readiness or evidence-confidence inferences derived from the information above.
Sources
We collect this data from you; from Garmin for the operator account; from intervals.icu or Strava when you connect one; and from TrekReady's calculations based on those records. We do not buy health data or infer your home from workout GPS.
Purposes
We use consumer health data to import and display training, estimate readiness and evidence confidence, build and adapt plans, track objective and team preparation, answer Coach requests, identify relevant objective gear or guide options, synchronize sources, troubleshoot the service, and honor privacy requests. A materially new category or purpose requires a new policy version and consent before optional processing resumes.
Data shared and recipients
Categories shared can include activities and fitness evidence; recovery measurements and derived recovery signals; objective/training context; and Coach prompts or inferences. Teammate health sharing is off by default and requires a choice separate from collection consent.
- Objective teammates: activity/fitness information only while your training-sharing choice is active; recovery information only while your recovery-sharing choice is also active. Both require current collection and separate sharing consent.
- Anthropic: your Coach prompt and relevant health, training, and objective context only when you invoke the Coach. Anthropic states standard commercial API inputs and outputs are ordinarily retained up to 30 days, subject to its terms and exceptions.
- Supabase: stored health and account data as TrekReady's database, authentication, and private-file provider.
- Vercel: application requests and limited operational metadata as TrekReady's hosting provider.
- Browser push provider: notification content when you enable push. TrekReady avoids detailed health measurements in push text.
TrekReady does not sell consumer health data and does not share it with advertisers. Anonymous recommendation-click rows contain no member id or health measurement.
Resend delivers authentication email and receives the login address, authentication-message content, and delivery metadata for that purpose. TrekReady does not send Resend consumer health data through this integration.
Your rights
Subject to applicable law, you may confirm whether TrekReady collects or shares your consumer health data; access it; withdraw consent for future collection or sharing; request correction or deletion; and appeal a refusal. Export and stop-processing controls remain available from the consent screen without agreement. You may also email privacy@trekready.ai. We may verify your request. If an appeal is denied, you may contact the Washington State Attorney General or another regulator with jurisdiction.
How deletion works
Completed account deletion removes active database records, photos, connection credentials, Coach history, and the authentication identity. Cross-system work is recorded durably and retried if the Auth provider is temporarily unavailable. Provider backups age out under provider schedules; deleted data is not returned to normal use and deletion is reapplied after a disaster-recovery restoration. Short-lived photo links issued before deletion can remain usable until they expire.
Contact
TrekReady LLC · privacy@trekready.ai