Privacy

What we collect

Your Google name and email when you sign up. Your race type, race date, weekly training hours, and injury history during onboarding. If you log workouts manually, we store your completion data.

How we use it

One thing: building and adapting your training plan. Your profile and messages are sent to Anthropic's API to generate your weekly plan and coach responses. We care about your training. That's the whole point.

Services that handle your data

• Supabase stores your profile, training plan, and activity data on AWS infrastructure, encrypted at rest. SOC 2 Type 2 certified. They act as a data processor under our instructions and don't access the content of your data.
• Vercel hosts planblx.
• Portkey is an observability proxy that sits between planblx and Anthropic. Your prompts and responses pass through Portkey's US-hosted infrastructure so we can see latency, cost, and errors. Portkey is contractually prohibited from training AI models on this data and doesn't share it with anyone. Stored payloads are retained for 3 days on the free tier we use.
• Anthropic generates your training plan and coach responses. Your profile and messages are transmitted to Anthropic's servers in the United States. Anthropic is contractually prohibited from training AI models on API data. Your inputs and outputs are automatically deleted from their systems within 30 days. Worth saying clearly: planblx uses AI to generate coaching content. It can be wrong. Don't treat it as medical advice.

Strava

If you connect Strava, you're authorizing planblx to read your workout activity on your behalf. That data is used for one thing: showing your completed workouts next to your planned sessions. Only you can see it.

Strava data is never combined with other data. It's never used to train AI. It's never sold or shared. We cache Strava activity data for no longer than 7 days. Disconnect Strava and your Strava data is gone from planblx within 48 hours. Delete an activity on Strava and it disappears from planblx within 48 hours too.

Strava independently collects data about how planblx uses its API. Strava's Privacy Policy at strava.com/legal/privacy governs data inside Strava and controls in any conflict with this one. planblx and Strava are separate, independent data controllers.

Data retention

Your data stays as long as your account does. Delete your account anytime from Settings, which permanently removes your profile, plan, and activity data.

About the AI

You're talking to AI, not a human coach. The plans and responses are grounded in real training science, but they can still be wrong. If something feels off physically, start with your primary care doctor, not a chatbot.

Questions or feedback?

train@planblx.com