Privacy notice

Who is responsible

Vector Coach is operated personally by Rodrigo Simões, the controller responsible for the project's use of your personal information. You can contact him at contact.vector.coach@gmail.com.

Athlete accounts and data

The beta is for invited adults aged 18 or older. Each account belongs to one athlete. Rodrigo manages invitations and access; joining does not give another athlete or a coach access to your records.

Information the beta will use

• Account information: your email address, account identifiers, verification and session information, eligibility confirmation, preferences and privacy choices. If supplied through Google sign-in, basic profile information such as your name and profile image may also be received.
• Connected training information: your Intervals.icu athlete identifier, authorized activities and their details, planned workouts, training settings and zones, wellness and recovery records, and the authorization needed to maintain the connection. Imported information may originally come from services you connected to Intervals.
• Information you enter: goals, training preferences, recovery check-ins, illness, pain or injury concerns, health notes, and coaching messages.
• Results and history: calculated training metrics, coaching reviews, generated plans, chat replies, drafts, approvals and changes you request.
• Service records: synchronization and job status, security events, consent and deletion records, and AI usage/cost information needed to operate and protect the service.

Why we use it

We will use ordinary account and training information to provide the beta service you request: sign-in, your training views, synchronization, planning and account controls. The basis for this is providing the agreed service. We will use limited security and operational information for our legitimate interests in protecting accounts, resolving failures and preventing misuse, and retain information where a legal obligation requires it.

Training, wellness and recovery records can reveal health information. Health-related processing will require your explicit consent. Optional AI processing will require a separate consent choice. Signing in or connecting Intervals does not by itself give that consent. Declining or withdrawing health-data consent will prevent features that need that information; declining AI will leave ordinary non-AI training features available.

Connections and optional AI

Sign-in

Clerk will provide email verification-code sign-in, an optional password and optional Google sign-in, and send invitation and verification messages. Google sign-in requests basic identity information only; it does not give Vector Coach access to your Gmail messages or Google Drive files. The beta will use authentication cookies and session information to keep you signed in and protect your account.

Your Intervals.icu connection

You will authorize access to your own Intervals account. Activities and wellness information will initially be imported for analysis. Writing planned workouts or training zones back to Intervals will require the corresponding permission and your approval. Declining write access will preserve read-only use.

Disconnecting will stop new synchronization and writes. It will not automatically delete information already imported into Vector Coach or workouts already written to Intervals. You can request deletion of our copies separately; information held in your Intervals account remains subject to its own controls and policies.

AI-assisted coaching

If you choose AI features, relevant parts of your own training information, goals, recovery or health notes and conversation will be sent to the OpenAI API to generate coaching replies, reviews or plans. We will limit the context to the task and exclude credentials and unnecessary direct identifiers. Source restrictions still apply: your consent does not override restrictions imposed by the original data provider.

OpenAI states that API content is not used for model training by default. Vector Coach's beta will keep voluntary training/data-sharing opt-ins disabled. OpenAI may retain content for abuse monitoring, normally up to 30 days with legal or safety exceptions; request features and caching can have additional retention. We do not promise zero provider retention. See OpenAI's API data controls.

AI analyses and recommendations will support your training decisions. They will not automatically apply changes to your Intervals calendar or zones. You can withdraw AI consent; this will stop new AI requests but cannot recall a request already sent. AI will remain unavailable until its permissions, provider configuration and funding are ready.

Keeping and deleting data

We will keep your athlete information while your account remains open, to provide your training history and the features you use. A shorter period may apply where source restrictions or a valid deletion or withdrawal request require it. Synchronization look-back windows are not automatic deletion schedules.

Once your account-deletion request is authenticated or otherwise verified, access and new processing will stop immediately. We will delete your athlete data from live systems within 30 days of that verified request. Backup copies will expire within a further 30 days after live deletion—no later than 60 days after the verified request.

This covers the athlete records, health notes, conversations, generated results, stored connection credentials and temporary copies under our control. Backups will be restricted to recovery; restoring one must not reactivate a deleted account or withdrawn permission.

We may need limited records to honour deletion and consent decisions, resolve an outstanding operation or charge, handle a privacy request, or meet a legal obligation. These are separate from retained training histories or chat content. Their specific retention rules, along with the backup storage arrangements, will be finalized before the beta opens. We will not start athlete processing on an unfinished retention policy.

Other services control information they hold for their own purposes. Deleting Vector Coach data does not delete your Google or Intervals account. Provider retention, including OpenAI's handling of a request already sent, follows the applicable terms described in this notice.

Providers and storage

The beta application and its main database will run on Rodrigo's Raspberry Pi server. Encrypted backups and limited recovery records will be stored separately from that server. Access to another athlete's information is not part of ordinary account or invitation administration; any exceptional support access must be limited to the need and recorded.

• Cloudflare: hosts these information pages and will deliver and protect beta traffic through Cloudflare Tunnel. Beta requests and responses, which can include account and training information, pass through Cloudflare as well as technical request and security information. Cloudflare Privacy Policy.
• Clerk: handles beta identity, authentication, sessions and authentication email. It processes relevant identity and technical information under its applicable terms, including its Data Processing Addendum and Privacy Policy.
• Google: supplies basic identity information if you choose Google sign-in and handles correspondence in the project's Gmail inbox. These are separate uses; support-mail access is not a sign-in permission. Google Privacy Policy.
• Intervals.icu: supplies the training data you authorize and receives the changes you approve. Its own service and original connected sources have separate rules. Intervals.icu Privacy Policy.
• OpenAI: processes the selected context for optional AI requests, as explained above.

These providers operate internationally. Information may be processed outside Portugal or the European Economic Area, including in the United States. Applicable provider terms describe their roles and transfer safeguards, such as adequacy frameworks or standard contractual clauses. Hosting the main database on our own server does not mean all processing stays there. You can contact us for information about applicable safeguards.

We do not sell your personal information. We may disclose information if required by law or where necessary to establish, exercise or defend legal claims.

Website visits

Cloudflare Pages hosts and delivers this website. Cloudflare processes technical request information, such as IP addresses, requested pages, timestamps and browser or device details, to deliver the pages and help protect the service.

For processing for which we are responsible, our basis is our legitimate interest in providing a functioning, secure information website. The pages contain no advertising or analytics scripts, sign-in, forms or embedded third-party media. Cloudflare security features may use necessary cookies; see Cloudflare's cookie information.

Cloudflare retains technical information according to its purposes and legal obligations, rather than the email period below. Its privacy policy explains its processing and retention. We do not keep a separate archive of individual website visits.

Email enquiries

If you email us, we receive your email address, any name you provide, your message and email metadata. We use these to reply and follow up, based on our legitimate interest in handling project enquiries. Providing information is voluntary; without a way to contact you, we cannot reply.

The contact inbox is a standard Gmail account. Please do not send passwords, access tokens or detailed health or training records in general enquiries.

We keep ordinary project and support email conversations for six months after the matter is resolved, then delete them from the project mailbox.

This includes the relevant received and sent copies under our control and removal from Trash. It does not set Google's own retention period: Google's deletion processes, backups and legal obligations can mean some copies remain longer. See Google's retention information. Records needed to handle a privacy request or a legal obligation are kept only as necessary for that purpose and are assessed separately.

Your rights

Depending on the circumstances, you may request access, correction, deletion or restriction of your personal information, object to processing based on legitimate interests, and request portability where it applies. If we rely on consent for a future feature, you may withdraw it without affecting earlier lawful processing.

The beta is being designed to support account export, connection disconnection, consent withdrawal and account deletion. Export will cover your retained source and derived records, settings, goals, reviews, plans and conversations, excluding credentials and other people's information. These account controls are not available on this information website.

Write to contact.vector.coach@gmail.com to exercise your rights or ask about this notice. We may need proportionate information to verify a request. You can also complain to Portugal's Comissão Nacional de Proteção de Dados (CNPD), or your competent data protection authority.

Changes to this notice

We will update this page when the project's practices change and show the revision date above. Before beta onboarding, we will complete the remaining storage and limited-record retention details and check that the service follows this notice. A material new use of your data will be explained before it begins, with a new consent choice where required.