Privacy Policy

• Account details: your email address, name and timezone. You sign in with a one-time code sent to your email; we never ask for or store a password for your athlete account.
• What you tell us: your goals, intake answers, and daily check-ins such as energy, soreness, stress, sleep quality, bodyweight and how closely you followed your nutrition plan.
• Bloodwork you choose to add: lab results and the lab's own in-range flags. We show these for your information only. We do not interpret them or give medical advice based on them.
• Wearable data, only if you connect a device: if you connect WHOOP, we receive your recovery score, sleep (duration, stages, performance and efficiency), heart rate variability, resting heart rate, respiratory rate, day strain, workouts, and your basic WHOOP profile (your WHOOP user ID, name and email). We do not request body measurements.
• A sign-in cookie that keeps you logged in. We do not use advertising or third-party tracking cookies.

• To build and adjust your daily plan around how you slept and recovered.
• To calculate your daily score and Health Index, measured against your own history.
• So your coach can review your progress and update your plan.
• To sign you in and to contact you about your account.

TrainCloud is not a medical service. Nothing we show you is a diagnosis or medical advice. Talk to a qualified clinician about any medical concern.

• We do not sell your data.
• We do not use your data for advertising, or share it with advertisers.
• We do not compare you against other members or publish your data.

Your data is seen by you and by the coach assigned to you. We also rely on a small number of service providers who process data only to run TrainCloud:

• Amazon Web Services hosts our database and servers in the United States, manages sign-in, and sends our emails.
• WHOOP, only if you connect it, sends us the data listed above under the permissions you approve on WHOOP's own screen.
• Stripe will process payments when paid plans launch. Card details go directly to Stripe; we never see or store your card number.

We may also disclose information if the law requires it.

• Our database is encrypted at rest, and connections to it are encrypted in transit.
• The access keys that let us read your WHOOP data are encrypted separately with a dedicated key, so they are unreadable even to someone with a copy of the database.
• Athlete and coach accounts are kept in separate sign-in systems.

No system is perfectly secure, but we treat your health data as the sensitive data it is.

• Disconnect a wearable any time from your dashboard. We revoke our access with the provider and delete the keys. Data already synced stays in your account until you ask us to delete it.
• See, correct or delete your data: email privacy@traincloud.co and we will respond within 30 days. Deleting your account removes your data from our active systems; encrypted backups expire within 14 days after that.

We keep your data while your account is open so your history and trends stay meaningful. If you ask us to delete it, we do, as described above.

TrainCloud is for adults 18 and over. We do not knowingly collect data from children.

If we change this policy we will update the date at the top, and tell you by email before any change that affects how your existing data is used.