Privacy & data control
Your data. Your call. Every read audited.
Health data is the most personal data there is, and a coaching product only works if sharing it feels safe. So access control isn't a settings page bolted on at the end. It's the architecture.
01Coach sharing
Coaches see exactly what you granted. Nothing else.
Zero access by default
Connecting with a coach shares nothing. A brand-new connection has no data access at all until you change that.
Per-category grants
Workouts, readiness, nutrition, health: each category is a separate switch. Share training logs but keep nutrition private. Change your mind anytime.
One gate for every read
Every coach request for your data passes through a single access policy. There's no side door for a different screen or a different app.
An audit trail, always
Every coach read is written to an audit table. Access isn't just permitted or denied; it's recorded.
02Account security
Boring, in the best way.
- On the web, your browser never sees an auth token; sessions live in secure, httpOnly cookies.
- On iPhone, credentials sit in the device keychain, not in app storage.
- Refresh tokens rotate and reuse is detected; failed logins lock the account; auth endpoints are rate-limited.
03Health data
Consent that means something.
- Apple Health access is per-category (readiness metrics, fitness and recovery depth, nutrition), never all-or-nothing.
- Your health data is used to compute your readiness and your plans. It isn't sold.
- Turn a category off and the app keeps working with what's left; a manual check-in can stand in for a wearable.
Sharing on your terms, from day one.
iPhone, iPad + web today, via early access. Android coming. Not yet on the App Store.