Privacy policy

1. Data we collect

We collect only what is necessary for the service to work:

• Account data: name, email, password (hashed) and preferred language.
• Sport profile: date of birth, weight, height, active sports, metrics such as FTP, threshold pace, HR zones, RPE and goals.
• Activity files: .fit / .fit.gz files you upload from Garmin, Wahoo or other devices, including power, heart rate, GPS, cadence and other metrics.
• Generated plans: AI-generated training plans, session analyses and notes you write.
• Integrations: if you connect intervals.icu or Garmin Connect, we store the OAuth tokens needed to keep the connection, plus the activities, health data and workouts described in section 11. TrainingPeaks data you paste or upload is stored in your profile.

2. How we use your data

We use your data exclusively to provide the service: generate personalized plans, analyze your activities, show your progress, and let your coach (if you have one) see your information. We do not sell or rent your data to third parties.

3. Third-party services

For the product to work we share minimal pieces of your information with:

• Anthropic (Claude API): to generate plans and analyses with AI. We send only the data needed for each request; Anthropic does not use it to train its models. See section 12.
• Amazon Web Services (AWS, United States): hosting of the application and database (EC2), encrypted backups (S3) and transactional email (SES).
• Billing: Lemon Squeezy (PCI-DSS) for website subscriptions; Apple and RevenueCat for In-App Purchases in the iOS app. Peaking does not store full card data.
• Integrations you connect: Garmin Connect and intervals.icu, only to exchange your own activities, health data and planned workouts. We do not sell, rent or share data from these integrations with anyone else.

4. Retention and deletion

We keep your data while your account is active. You can delete your account anytime from Profile → Delete account. We erase your profile, plans and activities immediately, except for the minimal records we are legally required to keep (e.g., tax receipts). You can also write to mail@peaking.pro.

5. Your rights

You have the right to access, correct, export or delete your data and to withdraw any consent you gave. You can edit your profile and delete activities or your whole account from the app, disconnect any integration from Profile (which withdraws its consent), and ask us for an export of your data or for any other request at mail@peaking.pro. We reply within 30 days.

6. Security

We use HTTPS for all communications, hash passwords with modern algorithms, and enforce role-based access (athlete, coach, admin). No system is 100% secure, but we follow good practices to minimize risk.

7. Children

Peaking is not intended for children under 16. If we discover that we have collected data from a minor without proper consent, we will delete it.

8. Changes to this policy

We may update this policy to reflect changes in the service or applicable regulation. If changes are substantial, we will notify you by email or in-app.

9. Contact

If you have questions about this policy or want to exercise your rights, contact us at mail@peaking.pro.

10. Cookies

We use cookies and similar technologies to keep the service running and, with your consent, anonymous usage analytics, error monitoring, and advertising measurement.

• Essential: session (keeps you signed in), locale (language preference), temporary OAuth state when connecting integrations, and your cookie consent choice.
• Analytics (optional): PulseView for anonymous page views, usage and browser error detection — only enabled if you click “Accept all” on the cookie banner.
• Marketing (optional): Meta Pixel (Facebook) to measure ad campaign conversions — only enabled if you click “Accept all” on the cookie banner.
• You can change your choice anytime by clearing site cookies in your browser; the banner will appear again on your next visit.
• The iPhone app does not show this banner and loads neither Meta Pixel nor any other advertising tool: it does not track users across apps or websites. It only uses the essential session and language cookies.

11. Garmin data

If you connect your Garmin Connect account, with your explicit consent we receive your completed activities (summaries and .FIT files: power, heart rate, pace, GPS, cadence) and health data (sleep, HRV, resting heart rate, stress, Body Battery, steps), and we send your planned workouts to your Garmin calendar. We use this data only to provide Peaking to you: per-session analysis, the weekly review of planned vs. completed training, plan adaptation based on load and recovery, and your progress charts. If you have a coach in Peaking, they see it too. Garmin data is stored on our AWS infrastructure, processed by Anthropic as described in section 12, and is never sold, used for advertising or shared with anyone else. You can disconnect Garmin from Profile at any time and choose to keep or delete all the data imported from Garmin.

12. AI transparency statement

Peaking uses artificial intelligence to coach you. This is what that means for your data:

• System: Claude models from Anthropic, accessed through the Anthropic API.
• What it does: generates and adapts your training plan, analyzes each session and your week, and answers your questions in the coach chat. Its output is training guidance, not medical advice.
• What data it receives: only what each request needs (your sport profile, the relevant sessions, activities and wellness data, including data from Garmin if you connected it). Your name and email are not sent.
• No training: Anthropic does not use API data to train its models, and Peaking never uses your data, or anything derived from Garmin data, to train, evaluate or improve AI models.
• Consent: AI processing of Garmin data requires your explicit consent, which we ask for with a checkbox when you connect Garmin. To withdraw it, disconnect Garmin from Profile: we stop receiving Garmin data at once, and you can delete everything already imported from Garmin in the same step.