1. Introduction

Train Ultra ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our web application at trainultra.run and any related services (collectively, the "Services").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Authentication credentials (managed securely through Clerk)
• Profile information you choose to provide

2.2 Activity Data from Connected Services

When you connect third-party fitness services (such as Garmin Connect, Strava, or other fitness platforms) to your Train Ultra account, we collect and store your activity data, which may include:

• Workout activities (runs, cross-training sessions, etc.)
• Activity metrics (distance, duration, pace, heart rate, elevation, etc.)
• Activity timestamps and locations
• GPS data and route information
• Performance metrics and training load data
• Device information from your connected fitness devices

2.3 Training and Race Information

We collect information you provide about your training and racing:

• Training plans and schedules
• Race selections and preferences
• Goal races and training objectives
• Weekly check-ins and progress notes
• Workout completion status and feedback

2.4 AI Coaching Interactions

When you interact with our AI coaching features:

• Chat messages and coaching conversations
• Questions and feedback you provide
• Training adjustments and preferences

2.5 Usage Information

We automatically collect certain information about how you use our Services:

• Pages and features you access
• Time spent on different parts of the platform
• Device and browser information
• IP address and general location

3. How We Use Your Activity Data

We use your activity data and other information for the following purposes:

• Training Plan Generation: To create personalized training plans based on your fitness level, activity history, and race goals
• Progress Tracking: To monitor your training progress, analyze your performance trends, and track your fitness development over time
• AI Coaching: To provide personalized coaching advice, training recommendations, and insights based on your activity data and training history
• Workout Recommendations: To suggest appropriate workouts and training adjustments based on your recent activities and fitness status
• Performance Analytics: To calculate training metrics such as Training Stress Score (TSS), volume trends, and periodization effectiveness
• Service Improvement: To improve our algorithms, AI models, and overall platform functionality
• Account Management: To provide, maintain, and improve your account and our Services

4. How We Disclose Your Activity Data

We are committed to keeping your activity data private. We do NOT sell your activity data to third parties. We may share your information only in the following limited circumstances:

4.1 Third-Party Service Providers

We share your data with trusted third-party service providers who assist us in operating our platform:

• xAI (Grok API): Your training data and activity information may be processed through xAI's Grok API to provide AI coaching features, generate training insights, and answer your coaching questions. xAI's use of this data is governed by their privacy policy.
• Cloud Infrastructure: We use cloud hosting services to store and process your data securely (including database hosting and application infrastructure)
• Authentication Services: We use Clerk for secure authentication and user management
• Analytics Services: We may use analytics providers to understand platform usage and improve our Services (aggregated and anonymized data only)

All third-party service providers are required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to us.

4.2 Connected Fitness Services

When you connect third-party fitness services (like Garmin Connect or Strava) to your Train Ultra account, we access your activity data from those services through their authorized APIs. We do not share your Train Ultra data back to these services unless you explicitly request such functionality (e.g., exporting workouts back to your calendar).

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Legal processes or government requests
• To protect our rights, property, or safety, or that of our users or the public
• To enforce our terms of service or policies

4.4 Business Transfers

If Train Ultra is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.5 Aggregated and Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you. For example, we might share statistics about training trends across our user base or anonymized workout patterns to improve our services.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication through industry-standard providers (Clerk)
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure database configurations and backups

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your activity data and other information for as long as your account is active or as needed to provide you with our Services. If you close your account, we will delete or anonymize your personal information within a reasonable timeframe, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

You can request deletion of your data at any time by contacting us (see Section 10).

7. Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You can access your activity data and account information through your account dashboard at any time
• Correction: You can update or correct your account information through your account settings
• Deletion: You can request deletion of your account and associated data by contacting us
• Data Portability: You can request a copy of your data in a portable format
• Disconnect Services: You can disconnect third-party fitness services (like Garmin or Strava) from your account at any time through your account settings
• Opt-Out: You can opt out of certain data collection or processing activities by adjusting your account preferences or contacting us

To exercise these rights, please contact us using the information in Section 10.

8. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our platform with a new "Last Updated" date
• Sending you an email notification (if you have an account)
• Displaying a prominent notice on our platform

Your continued use of our Services after such changes indicates your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

11. Third-Party Links

Our Services may contain links to third-party websites or services (such as race websites, UltraSignup, or connected fitness platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with.

12. International Users

If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Services, you consent to such transfers.