Privacy Policy

Overview

Coach Duardo is a personal cycling coaching app for iPhone and Android. This page explains what data it collects, where that data is kept, what it's used for, and how to have it deleted. If anything here is unclear, email Coach Duardo and ask.

What Coach Duardo collects

From Strava, after you sign in through Strava's own authorization screen:

• Your basic profile: name, gender, weight and FTP (if set in Strava), and your Strava athlete ID.
• Your ride history: distance, duration, elevation, power, heart rate, cadence, laps, timing and start location.

What you enter in the app:

• Profile details: year of birth, gender, weight, FTP and maximum heart rate.
• Coaching notes, all optional: your bikes and equipment, goals, target events, upcoming plans, training preferences, chosen coaching persona, and how you're feeling, including any health notes or injuries you choose to mention.
• Chat messages you send to the coach, and any Strava ride summary you edit before posting.

Health data, where permitted. If you allow it, the app reads sleep, heart rate variability, resting heart rate, weight and date of birth from your phone's health platform (currently Apple Health on iPhone). Date of birth is only used to fill in your year of birth. This is entirely optional, and coaching works without it.

Technical data. Our server records your Strava athlete ID to check you're allowed to use the app and to track a fair daily usage limit. Its logs also record IP addresses for some events, such as signing in, failed authorization and rate-limit hits, for security.

Coach Duardo has no advertising, no analytics or tracking SDKs, and doesn't create an account or ask for your email address.

Where it's kept

On your phone. Your profile, coaching notes and a copy of your ride history are stored on your device. Your Strava sign-in tokens are kept in the phone's secure storage. Chat conversations aren't saved: they're gone when you close the app or tap Clear.

On our server (Hermes). Coach Duardo's backend passes your coaching requests to the AI service and handles the Strava sign-in. It does not store your ride data, health data, notes or messages. It keeps only a daily count of AI usage per Strava athlete ID, and server logs containing your athlete ID, the type and time of each request, and the IP addresses described above.

How it's used

Training load (fitness, fatigue and form) is calculated on your phone. When you chat with the coach, analyse or compare rides, or draft a Strava summary, the data relevant to that request is sent through our server to Anthropic's Claude API, which generates the response. Depending on the request, that can include your profile (name, approximate age, gender, FTP, weight, maximum heart rate), ride data, coaching notes, health data where permitted, and your message.

Drafts of public Strava summaries are deliberately given less: the ride and your recent training load only, never your notes, goals or health data.

Your data is used only to provide the coaching you ask for, to authorize your access and to enforce usage limits.

Posting to Strava

If you ask Coach Duardo to draft a ride summary, you always see it before anything happens. It's only posted to your Strava activity if you tap Post, after reviewing or editing the text yourself. Nothing is posted automatically.

What we don't do

We don't sell your data. We don't share it with advertisers or data brokers, and we don't use it for advertising or profiling. It isn't used for anything beyond the purposes above.

Retention

Data on your phone stays there until you delete it or uninstall the app. On our server, daily usage counts and logs are kept only as long as needed for security, troubleshooting and enforcing usage limits, and are deleted on request.

Deleting your data

Uninstalling Coach Duardo deletes everything it stored on your phone. To have your usage records and log entries deleted from our server, email Coach Duardo with your Strava name and we'll confirm once it's done.

You can also revoke Coach Duardo's access to your Strava account at any time in Strava's own settings (My Apps), and turn off health data access in your phone's privacy settings.

Third parties involved

• Strava, the source of your ride data and where summaries are posted (subject to Strava's own privacy policy).
• Anthropic, whose Claude API generates coaching responses from the data sent with each request (subject to Anthropic's own privacy policy and commercial terms).
• Cloudflare, which carries encrypted traffic between the app and our server.

No other third party receives your data. All data is encrypted in transit.

Changes to this policy

This policy may be updated as the app changes. The version at this URL is always the current one, and the date at the top shows when it last changed.