VeloForge Privacy Policy

Introduction

VeloForge is the world's most advanced AI cycling coach — combining Eastern Bloc periodization with Forge Carb System nutrition to deliver UCI World Tour-level training to every cyclist. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and safeguard your information when you use VeloForge.

Information We Collect

To power your personalized AI coaching, we collect the following data:

• Account Information: Email address, name, password (securely hashed)
• Profile & Goals: Weight, FTP (Functional Threshold Power), body composition goals, weekly training availability, rest day preferences, race schedule (A/B/C priority races)
• Training Data: Workouts (planned and completed), TSS (Training Stress Score), power zones, time-in-zones, workout history
• Garmin Connect Integration: When you connect your Garmin device, we collect:
  • Recovery Score
  • HRV (Heart Rate Variability)
  • Sleep Score and sleep hours
  • Readiness Score
  • Workout metrics (duration, TSS, power data, heart rate zones)
• Nutrition Data: Logged meals, macronutrient intake (carbs, protein, fat), micronutrient tracking (sodium, iron, calcium, vitamin D, fiber), daily Carb Code assignments (HIGH/MEDIUM/LOW)
• Hydration Data: Water and electrolyte intake
• Chat History: Conversations with your AI coach

How We Use Your Data

We use your data exclusively to power your AI coaching experience:

• Adaptive Training Plans: Generate rolling 28-day Eastern Bloc-structured plans that adapt to your vitals, fatigue, and race schedule
• Daily Briefings: Provide personalized Today tab insights based on your Recovery, HRV, Sleep, and Readiness scores
• Forge Carb System Nutrition: Calculate daily macros based on training load, body composition goals, and workout intensity
• Race Preparation: Automatically adjust taper, carb-loading, and peak form timing for A/B/C priority races
• AI Coach Chat: Answer training and nutrition questions with science-backed, personalized guidance

We NEVER sell or share your data with third parties. Your data is yours.

Garmin Connect Integration

When you connect your Garmin device, we use OAuth 2.0 authentication to securely access your data. Here's what you need to know:

• Authorization Only: We only access data you explicitly authorize during the connection process
• Personalization Only: Garmin data is used solely to personalize your training plans and nutrition recommendations
• Disconnect Anytime: You can disconnect your Garmin account at any time from the VeloForge app settings
• No Data Sharing: We do not share your Garmin data with any third parties

Data Storage & Security

• Encryption: All data is encrypted in transit (HTTPS) and at rest
• Location: Data is stored on secure, US-based servers (Neon PostgreSQL on AWS)
• Access Control: Only authorized VeloForge systems have access to your data
• Third-Party Services: We use the following services to operate VeloForge:
  • Garmin Connect: For data sync (you control this connection)
  • Render: Hosting infrastructure
  • Neon: PostgreSQL database hosting
  • Polsia AI: AI coaching engine (data processed securely, not stored by third parties)

Your Rights

You have full control over your data:

• Access: View all your data at any time through the VeloForge app
• Delete: Request deletion of your account and all associated data by emailing privacy@veloforge.app
• Export: Request a copy of your data by emailing privacy@veloforge.app
• Disconnect Integrations: Disconnect Garmin or other services anytime from app settings

Data Retention

We keep your data only as long as you have an active account. When you delete your account or disconnect Garmin, we delete or anonymize your data within 30 days.

Breach Notification

In the unlikely event of a data breach, we will notify you and relevant authorities within 72 hours as required by law.

GDPR & CCPA Compliance

VeloForge complies with GDPR and CCPA. You have the right to access, correct, delete, or export your data at any time.

International Data Transfers

Your data is stored on secure US-based servers. We use standard contractual clauses to protect transfers.

Self-Service Deletion

You can delete your account and all data directly from the Coach tab settings (one-click). Email privacy@veloforge.app for assistance.

Automated Decision-Making

Our AI coach makes personalized recommendations using your data, but you can always override or ignore any suggestion.

Children's Privacy

VeloForge is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at privacy@veloforge.app.

Cookies

VeloForge uses session cookies to keep you logged in. These cookies are essential for the app to function and expire after 30 days of inactivity.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of VeloForge after changes constitutes acceptance of the updated policy.

Contact

If you have questions or concerns about this Privacy Policy, please contact us at:

privacy@veloforge.app