Privacy Policy

1. Introduction

Welcome to Threshold Coaching ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, and profile information when you create an account.
• Fitness Profile: Age, gender, weight, height, fitness goals, target events, and training preferences.
• Health and Physiological Data: Lactate test results (mmol/L values), VO2 max measurements, resting heart rate, maximum heart rate, and other performance metrics you manually enter.
• Hydration Data: Sweat rate measurements, body weight before/after exercise, and related hydration information.
• Communication Data: Messages, feedback, and support requests you send to us.

2.2 Information from Connected Services

When you connect third-party services, we may collect:

• Workout Data: Activity details including duration, distance, pace, power, heart rate, GPS data, cadence, and other metrics from platforms like Garmin Connect, Strava, Wahoo, TrainingPeaks, and Intervals.icu.
• Calendar Data: Event titles, times, and availability status from connected calendar services (Google Calendar, Apple Calendar, Outlook) to help schedule your training around your commitments. We do not access or store the content or details of your calendar events beyond what is necessary for scheduling.
• Device Data: Information from connected fitness devices and wearables.

2.3 Automatically Collected Information

• Usage Data: How you interact with our Service, features you use, and actions you take.
• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Creating and managing your personalized training plans
• Calculating training zones based on your physiological data
• Adjusting your training plan based on workout outcomes and life events
• Providing hydration and nutrition recommendations
• Syncing workouts to your connected devices

3.2 Service Improvement

• Analyzing usage patterns to improve our algorithms and features
• Conducting research to enhance training plan effectiveness
• Troubleshooting issues and providing customer support

3.3 Communication

• Sending service-related notifications and updates
• Responding to your inquiries and support requests
• Sending marketing communications (with your consent)

4. Data Sharing and Third Parties

We may share your information in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our Service, including:

• Cloud hosting and infrastructure (e.g., Cloudflare, AWS)
• Analytics services
• Email delivery services
• Payment processors

These providers are contractually obligated to protect your information and may only use it to provide services to us.

4.2 Connected Platforms

When you connect third-party fitness platforms, data flows between our Service and those platforms according to their respective privacy policies and your authorization settings.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Third-Party Integrations

Our Service integrates with various third-party platforms to enhance your training experience:

5.1 Garmin Connect

When you connect your Garmin account, we access your workout data, activity metrics, and health statistics. We use this data to analyze your training and adjust your plans. Data shared with Garmin is governed by Garmin's Privacy Policy.

5.2 Strava

Connecting Strava allows us to import your activities and export planned workouts. Your Strava data is also subject to Strava's Privacy Policy.

5.3 Intervals.icu

Integration with Intervals.icu enables advanced analytics and training load tracking. Data shared is governed by Intervals.icu's Privacy Policy.

5.4 Calendar Services

We access your calendar with read-only permissions to identify busy times and schedule workouts appropriately. We do not store calendar event content beyond availability information.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Access Controls: Strict access controls limit who can access your data within our organization.
• Infrastructure: Our services are hosted on secure, SOC 2 compliant infrastructure.
• Monitoring: We continuously monitor for security threats and vulnerabilities.
• Regular Audits: We conduct regular security assessments and penetration testing.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for up to 30 days after deletion request.
• Workout Data: Retained while your account is active to provide historical analysis and trend tracking.
• Health Data: Retained while your account is active; deleted within 30 days of account deletion.
• Usage Logs: Retained for up to 12 months for security and analytics purposes.

You may request deletion of your data at any time (see Your Rights section).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

8.2 Correction

You can update or correct inaccurate personal information through your account settings or by contacting us.

8.3 Deletion

You can request deletion of your personal data. We will delete your information within 30 days, except where we are required to retain it for legal purposes.

8.4 Restriction and Objection

You can request that we restrict processing of your data or object to certain processing activities.

8.5 Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of prior processing.

8.6 Exercising Your Rights

To exercise any of these rights, please contact us at hello@treshold.coach. We will respond to your request within 30 days.

8.7 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

8.8 CCPA Rights (California Residents)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information. We do not sell personal information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we use appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Compliance with applicable data protection frameworks

10. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us