Draft template, to be checked by a lawyer before any public release.
Privacy policy
Last changed: 12 Nov 2026 (draft)
In short
- Your training data stays on the TrainLab server run by its owner. It is not sold and not used for advertising.
- Data leaves the server only when a feature needs it: Garmin (to sync), Anthropic (when you ask Claude), Open-Meteo (weather for your area) and OpenStreetMap (map pictures).
- You can download all your data, and delete all of it, from Settings › Account.
Who is responsible
This TrainLab server is run by its owner, [owner name], who decides what happens to the data on it. Contact: [contact email].
What TrainLab keeps
- Garmin data: activities (time, distance, heart rate, pace, power, GPS track, laps), daily wellness (resting heart rate, HRV, sleep, Body Battery), gear and the workouts on your Garmin calendar. Copied from Garmin Connect after you connect your account.
- Your Garmin login: only a login token, encrypted. Your Garmin password goes straight to Garmin and is never stored or logged.
- Check-ins: the morning answers (sleep, soreness, mood, illness, pain), morning HRV readings and recordings you import.
- Ratings and notes: session ratings (RPE), notes and tags on activities.
- Settings and plans: thresholds, sports, routine, your area (a place name and rounded coordinates), goal race, training plans and the Workout Vault.
- Study data, only if you turn study mode on: extra ratings and the original .fit files of study sessions.
- Claude: Claude's saved answers (day summaries, session reviews, weekly reviews, plan proposals); with the Claude API, your API key (encrypted, never shown again) and a usage count.
- Your account: username, a hash of your password (not the password), two-step login settings and the list of logged-in devices.
Where it is stored
On the owner's server, in a folder for your account only. Other users of the same server can't see it. The server owner can technically read the files on the server. Nightly backups of the server are kept for [14] days.
What is sent to others, and when
- Garmin: TrainLab logs in with your token to download your data and, when you tap Send to Garmin, to upload workouts. Garmin's own privacy policy applies to your Garmin account.
- Anthropic (Claude), only when you use Claude:
- Claude connector: when you ask Claude about your training in a Claude chat, Claude reads the TrainLab data it needs through the connector (training log, wellness, plans, notes). You approve the connector once and can remove it in Settings › Account.
- Claude API: when you tap a button such as Summarise my day, TrainLab sends a short text summary (readiness, recent sessions one line each, weekly totals, plans) to Anthropic's API with your key. Not sent: second-by-second data, GPS tracks, your password.
- Anthropic's own terms and privacy policy apply to what Claude receives.
- Open-Meteo (weather): the server sends the rounded coordinates of the area you set. Nothing else. No area set, no request.
- OpenStreetMap (maps): your browser loads map pictures straight from tile.openstreetmap.org when you open an activity with a route, so OpenStreetMap sees which map area you look at and your IP address. The route itself isn't sent.
Study data and the original .fit files are never sent to Claude. A study export is made only when you ask for it.
How long it is kept
As long as you have your account. Garmin activities older than the History to keep setting are not downloaded. Deleted plans stay in a trash folder for 90 days. A deleted account's data is gone from the server at once and from the backups after [14] days.
Your choices
- Download: Settings › Account › Download my data gives a zip of everything TrainLab keeps for you (except the encrypted login tokens and key).
- Delete: Settings › Account › Delete all my data removes your data, Garmin login, Claude key and Claude connector access, and your account.
- Disconnect: Garmin connection › Disconnect, and Settings › Account for Claude, at any time.
- Correct: change settings, ratings and notes in the app; activity data comes from Garmin.
Cookies
One cookie keeps you logged in, and one remembers this device for the login limit. No tracking or advertising cookies. The theme choice is stored in your browser.
Health information
Heart rate, sleep, HRV, pain and illness answers are health information. TrainLab uses them only to show your training and readiness. TrainLab is not a medical device and gives no medical advice.
Changes
When this policy changes, the date at the top changes and the app shows a note.