Privacy Policy

• Account: your email address and a password (handled by our authentication provider; we never see or store your password in plain text).
• Profile & training data: the details you enter to build your plan — body metrics (e.g. weight, height, age, biological sex), fitness baselines, race goals, your training plan, and the workouts you complete (duration, distance, heart rate, pace, power).
• Nutrition data: dietary preferences, exclusions, and meal/fueling logs, if you use the Fuel features.
• Location (optional): while a guided outdoor session is open, to show live distance and pace. Coordinates stay on your device — only the resulting distance/pace totals are saved. See “Location” below.
• Notifications (optional): if you turn notifications on, a device push token so we can send session reminders and update the live session on your lock screen. Notifications are delivered through Apple’s Push Notification service, are never used for advertising, and can be turned off at any time in iOS Settings — nothing else about your account changes.
• Product analytics: first-party usage events (e.g. “workout completed”, “meals planned”) with your account id, platform, and app version — used only to understand and improve the app. No third-party ad or tracking SDKs.

With your permission, Trimate reads data such as workouts, heart rate, and activity from Apple Health to personalize your plan and record guided sessions, and saves completed sessions back to Health. HealthKit data is never used for advertising or marketing, is never sold, and is never shared with third parties. You can revoke access at any time in iOS Settings.

If you allow it, Trimate uses your device location only while a guided outdoor session is open on screen, to show your live distance and pace. Your location is used on the device to work out how far and how fast you’ve gone: we do not store or upload your coordinates, and we never record a map or route of where you went. When you finish a session, only the resulting totals — distance, duration and average pace — are saved with that workout.

Location is never used for advertising, never sold, and never shared with third parties. Declining or revoking it (iOS Settings › Privacy & Security › Location Services) doesn’t stop you training — the guided session simply runs as a timer.

Voice coaching uses your device’s built-in speech engine to read out each interval. It is generated on the device from your own training plan — no microphone access is requested and nothing is recorded, transmitted or stored.

If you choose to connect a service like Strava, Trimate uses that connection — authorized by you via OAuth — to receive your completed activities, so sessions are marked done automatically and your training load stays accurate. Trimate can also export a structured workout file for you to load onto a Garmin device. You can disconnect at any time in the app, which deletes the connection and its tokens. If you revoke access from the provider’s side, we honour it and remove the provider’s data.

Data is stored in our database hosted by Supabase (PostgreSQL), encrypted in transit and at rest, with row-level security so each record is accessible only to the account that owns it. We use Sentry for crash reporting (technical error data, not your training content) and Expo (EAS) to deliver app updates. These processors act on our instructions; none of them may use your data for their own purposes.

• — No selling of personal data — to anyone, ever.
• — No advertising or ad tracking in the app.
• — No sharing with third parties beyond the processors and connections described above.

Your data is kept while your account is active. You can delete your account in the app (Profile → Delete account), which permanently removes your account and all associated data — profile, plans, workouts, activities, nutrition logs, and service connections.

Depending on where you live (including under UK/EU GDPR), you have rights to access, correct, export, or erase your personal data. Email us and we’ll help.

support@broadai.co.uk

If this policy changes materially, we’ll update this page and the effective date above.