Privacy Policy

Introduction

Welcome to VeloPilot.

VeloPilot (“VeloPilot,” “we,” “our,” or “us”) is a cycling coaching platform that helps athletes train smarter through personalized training plans, workout recommendations, performance analysis, and AI-generated coaching chat.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have regarding your personal information.

By using VeloPilot, you agree to the practices described in this Privacy Policy.

Information We Collect

We collect information that allows us to provide personalized coaching and improve your experience.

Account Information

When you create an account, we may collect:

• Name
• Email address
• Password (if using email authentication)
• Google account information (if signing in with Google)

Athlete Profile

To personalize your training, we may collect information such as:

• Age
• Height
• Weight
• FTP or other fitness metrics
• Cycling discipline
• Experience level
• Training availability
• Race goals
• Preferred training days
• Training history provided during onboarding

Training Data

As you use VeloPilot, we may collect information including:

• Planned workouts
• Completed workouts
• Ride duration
• Distance
• Elevation gain
• Power data
• Heart rate
• Cadence
• Speed
• Workout completion status
• Notes or feedback you provide

Connected Services

If you choose to connect third-party services such as Garmin Connect or Strava, we may receive information that you authorize those services to share.

This may include:

• Activities
• Workouts
• Ride metrics
• Performance data
• Device information related to workouts

We only access information that you explicitly authorize through the connection process.

You may disconnect connected services at any time through your account settings or through the third-party service itself.

Strava activity data is used within VeloPilot to display your rides on your training calendar and to provide deterministic post-ride comparisons that only you can see. Strava activity data is not sent to our AI providers.

Technical Information

We automatically collect limited technical information including:

• Browser type
• Device type
• IP address
• Operating system
• App usage information
• Log data
• Error reports

This information helps us improve the reliability and security of VeloPilot.

How We Use Your Information

We use your information to:

• Create personalized training plans
• Recommend daily workouts
• Analyze your training progress
• Generate post-ride feedback from your ride data
• Adapt future training based on your performance
• Display your training calendar
• Track progress toward your goals
• Improve product performance
• Provide customer support
• Maintain account security
• Comply with legal obligations

We do not sell your personal information.

AI-Powered Coaching

VeloPilot uses artificial intelligence to generate training plans and to power coaching conversations with Wattson.

Information sent to our AI providers may include information you provide directly to VeloPilot, such as onboarding responses, profile information, race goals, training availability, coaching questions, and VeloPilot-generated plan context.

We do not send Strava activity data, including raw, derived, aggregated, or summarized Strava activity data, to our AI providers.

Post-ride feedback based on Strava activities is generated deterministically within VeloPilot and is not generated by an AI model.

We do not use your personal training data to train AI models.

Sharing Information

We only share information when necessary to operate VeloPilot.

This may include trusted service providers such as:

• Supabase (authentication and database services)
• OpenAI (AI services)
• Anthropic (AI services)
• Resend (transactional emails)
• Garmin Connect (if you choose to connect your account)
• Strava (if you choose to connect your account)

These providers may only process your information to perform services on our behalf. As described in “AI-Powered Coaching” above, our AI providers do not receive Strava activity data.

We do not sell your personal information to advertisers or data brokers.

Data Retention

We retain your account information while your account remains active.

If you disconnect Strava, VeloPilot attempts to revoke its authorization through Strava and removes the Strava credentials stored in your VeloPilot account. Any persisted Strava-derived data associated with that connection is also deleted in accordance with Strava’s requirements. Local removal normally occurs immediately, and in any case within the 30-day deletion window required by Strava.

If you delete your VeloPilot account, locally stored Strava credentials are deleted with your account. VeloPilot also attempts to revoke its authorization with Strava before the account deletion completes, but a temporary Strava service failure will not prevent you from deleting your VeloPilot account. In that case any residual authorization on Strava’s side will expire on Strava’s normal token lifecycle, and you can also revoke VeloPilot directly from Strava at any time.

Aside from OAuth credentials, VeloPilot does not maintain a long-term store of your Strava activity data. Activity data is fetched from Strava on demand for display within VeloPilot and is not retained beyond the transient limits set by Strava’s API terms.

If you delete your VeloPilot account, we will delete or anonymize your remaining personal information within a reasonable period unless we are legally required to retain certain records.

Your Choices

You may:

• Update your account information
• Modify your athlete profile
• Disconnect third-party services (disconnecting Strava attempts to revoke VeloPilot’s access on Strava’s side and clears your Strava credentials from your VeloPilot account)
• Request a copy of your information
• Delete your account
• Contact us regarding your privacy

Security

We use industry-standard security practices designed to protect your information.

These measures include:

• Encryption of data in transit
• Secure authentication
• Access controls
• Secure cloud infrastructure
• Regular software updates

No method of electronic storage or transmission is completely secure, but we work to protect your information using commercially reasonable safeguards.

Your Training Data

Your training data belongs to you.

VeloPilot exists to help you better understand your performance and prepare for your cycling goals.

We do not sell your workouts, ride history, performance metrics, or other training information.

If you disconnect an external service or delete your account, you remain in control of your information.

Third-Party Services

VeloPilot may link to or integrate with third-party services.

These services operate under their own privacy policies, and we encourage you to review them before connecting your accounts.

Children’s Privacy

VeloPilot is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13.

If we learn that such information has been collected, we will promptly delete it.

International Users

Your information may be processed and stored in countries where our service providers operate.

By using VeloPilot, you consent to these transfers where permitted by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time.

If significant changes are made, we will update the “Last Updated” date and, where appropriate, notify users through the application or by email.

Contact Us

If you have questions about this Privacy Policy or how your information is handled, please contact us at:

Kyle Torres
Founder, VeloPilot

Email: kyle@velopilot.ai

Website: https://velopilot.ai