Privacy Policy

1. Introduction

Welcome to WattsUp, a product of 021 Ventures, based in Melbourne, Australia. We are committed to protecting your privacy and ensuring you have a positive experience using our AI-powered cycling coach application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using WattsUp, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account and set up your profile
• Connect third-party services (Wahoo, Garmin) to your account
• Interact with our AI coaching features
• Contact us for support or inquiries

2.2 Ride Activity and Metrics Data

With your explicit authorization, we collect ride activity and metrics data from:

• Wahoo: Ride data, power metrics, heart rate, cadence, and other cycling-related metrics
• Garmin Connect: OAuth-authenticated connection used to push training plan workouts and scheduled sessions to your Garmin device and, with your authorization, to automatically receive your completed activities from Garmin Connect (rides and every other activity type, such as runs, walks, and strength sessions), including metrics such as power, heart rate, cadence, speed, elevation, and GPS route data. See Section 4.2 for a full description of how Garmin data is collected, used, processed, and stored, including its use with third-party AI services.
• Apple Health (HealthKit): On iOS, with your explicit permission granted through the system Health permissions sheet, we read your workouts and daily wellness data (sleep, resting heart rate, heart rate variability, steps, active energy, body mass, respiratory rate, and wrist temperature) and can write your completed WattsUp rides back to Apple Health. See Section 4.3 for full details.
• Health Connect (Android): On Android, with your explicit permission granted through the Health Connect permission screen, we read your workouts together with their heart rate, distance, calorie, and step data (including up to 90 days of history when you first connect), your daily step count and, if you allow it, your daily resting heart rate, heart rate variability, and weight. We can also write your completed WattsUp rides back to Health Connect. See Section 4.4 for full details.
• Manual FIT file uploads: Activity files exported from any cycling computer (Garmin, Wahoo, Hammerhead, etc.) and manually uploaded by you. These files are processed and used by our AI coaching features in the same way as synced activities, as described in Section 4.1.

Note on GPS data: GPS route data from your rides (the route, its start point, and where your best efforts happened) may be stored and displayed as a map within the app. To draw the map, the app loads map images for the area of your ride from our map provider, OpenFreeMap, which can see the area being shown and your device's IP address. We do not collect real-time location tracking or use GPS data for any purpose beyond displaying your ride route. GPS route data from any source, including Garmin Connect, is never passed to any AI service or to our AI monitoring service.

2.3 Conversation History

We store your conversation history with our AI coaching feature to provide continuity in your coaching experience and improve the quality of personalized advice over time.

2.4 Usage Information

We automatically collect certain information about how you use our app, including:

• Feature usage and interaction patterns
• Model call usage (to track your monthly quota)
• Device information (type, operating system version)
• App performance and error logs

3. How We Use Your Information

We use the information we collect to:

• Provide AI Coaching Services: Process your ride data and conversations to deliver personalized cycling advice, workout suggestions, and training plans
• Maintain Your Account: Manage your subscription, track usage quotas, and provide customer support
• Improve Our Services: Analyze usage patterns to enhance features and user experience, and review records of AI coaching requests and responses to fix errors and improve the quality of coaching (see Section 4.1)
• Process Payments: Handle subscription billing and payment processing through RevenueCat
• Communicate: Send you service-related notifications, updates, and respond to your inquiries
• Ensure Security: Protect against fraud, unauthorized access, and other security issues

4. AI Services and Data Processing

4.1 AI Features in the App

To provide our AI coaching features, we process your data using third-party AI services:

• OpenAI (GPT): Used for generating personalized coaching advice and insights, AI-powered training plan generation, and workout suggestions

Your data is sent to these AI services solely to generate personalized responses and recommendations. These services process data according to their own privacy policies and terms of service. We do not share personally identifiable information beyond what is necessary to provide the coaching service.

Activity and wellness data: To personalize your coaching, ride and activity metrics from the services you connect (Garmin Connect, Wahoo, Apple Health, and Health Connect) and from FIT files you upload are processed by OpenAI, together with daily wellness data from Apple Health and daily step counts from Health Connect. This is on by default. GPS route data is never sent to any AI service.

The Share Activity Data with AI setting (Settings, Privacy) controls detailed analysis of individual rides. You can turn it off at any time:

• While it is on: the coach writes a post-ride insight for your rides, reads rides you attach to a chat message, and can open the full details of an individual ride (such as heart rate, power, training zones, and laps) or compare two rides.
• While it is off: none of the above happens. The coach still uses summaries of your training built from your activities, which can list individual rides by name and date with their duration, distance, power, and training stress. These include your training load, weekly and period summaries, trends, power records, and FTP suggestions. The coach also still uses your recent cross-training, your daily wellness and step trends, and your maximum heart rate together with the name and date of the ride it was recorded on.
• To stop synced data from being used at all: disconnect the service (Settings, Connections) and remove the data it has already synced. When you disconnect Garmin or Wahoo you can choose to delete the activities it synced, and Delete All Data (Settings, Account) removes all synced activities and wellness data. Disconnecting Apple Health or Health Connect stops new data from arriving but does not remove data already synced. Values already saved to your profile or coaching notes, such as your maximum heart rate, stay until you change or delete them.

AI quality monitoring: To keep our AI coaching accurate and reliable, we use LangSmith, a monitoring service provided by LangChain. Each time our AI coaching features handle a request, such as a coach chat message, a post-ride insight, or a training summary, LangSmith keeps a record of the request and the response. A record contains your message and anything attached to it, the coach's reply, and the training, activity, wellness, and profile information used to answer it, together with technical details such as timing and errors, internal account and activity identifiers, and any thumbs up or thumbs down rating you give a response. We use these records to find and fix errors, check the accuracy and quality of coaching responses, and improve how the coach works. LangSmith keeps these records private to our account, does not use them to train AI models, and deletes them automatically after 14 days. GPS route data is never sent to LangSmith.

For a detailed description of how Garmin Connect API data specifically is collected, used, processed, and stored, including its use with third-party AI services, see Section 4.2.

4.2 Garmin Connect Data and AI Processing

WattsUp integrates with the Garmin Connect platform in two directions: we deliver training plan workouts and scheduled sessions to your Garmin device, and, with your explicit authorization, we automatically receive your completed activities from Garmin Connect. In line with Garmin Connect Developer Program requirements, this section describes exactly how Garmin data is collected, used, processed, and stored.

• What we collect: When you connect your Garmin account and grant activity permissions, we receive your completed activities of every type (rides, and also runs, walks, swims, strength sessions, and any other activity you record) from the Garmin API. For each activity we receive its summary, its detailed samples and laps, and, where Garmin provides it, the original activity (.fit) file. This includes the activity name and type, start time, duration, distance, speed, power, heart rate, cadence, elevation, temperature, calories, the name of the device that recorded it, and GPS route data. If you request it, we also receive historical activities (backfill) for the period you choose. We do not receive Garmin health data such as sleep, stress, or daily wellness summaries.
• How we use it in the app: Garmin activity data is used to show your activity history, activity details, charts, and route maps; calculate training metrics such as TSS, Intensity Factor, time in training zones, and your training load (fitness, fatigue, and form); mark the days you trained on your training calendar; choose which workout reminder to send you each day; update your maximum heart rate when an activity records a new high; show your weekly training load, which you can choose to share as an image; and, if you import your history when you sign up, suggest starting values for your training plan, such as an estimated FTP and weekly training hours, which you can accept or change and which the coach then uses to build your plan.
• How we use it for AI coaching: Garmin activity data is used by these AI coaching features:
  • Post-ride insights: a short comment on each new activity of 10 minutes or more, based on its name, type, duration, distance, average heart rate, and training stress, together with your FTP and the session you had planned that day.
  • Activity analysis in coach chat: when you attach an activity to a message or ask about one, the coach can read its full details (such as power, heart rate, and training zones) and compare it with your other activities.
  • Training summaries: your training load, weekly and period summaries that list individual activities by name and date with their duration, distance, power, and training stress, your trends and power records, and FTP suggestions, which change your FTP only if you confirm.
  • Coaching context: your recent non-cycling activities (type, duration, effort, and training load) and your maximum heart rate together with the name and date of the activity it was recorded on.
• Third-party AI processing: The data these features use is sent to our AI service provider, OpenAI, solely to generate your personalized coaching responses. This is on by default. Turning off Share Activity Data with AI (Settings, Privacy) stops post-ride insights and activity analysis in coach chat, but training summaries and coaching context built from your Garmin activities are still used while it is off; Section 4.1 sets out exactly what the setting covers. Under our API agreement, OpenAI does not use this data to train its models. GPS route data is never sent to any AI service. Activity names are sent, and Garmin often names an activity after the place where it started, such as your town or city.
• AI quality monitoring: Each coaching request and response, including the Garmin-derived activity metrics it contains, is also recorded by our AI monitoring service, LangSmith (provided by LangChain), so we can find and fix errors and check the accuracy and quality of coaching responses, as described in Section 4.1. LangSmith keeps these records private to our account, does not use them to train AI models, and deletes them automatically after 14 days. GPS route data is never sent to LangSmith.
• Other third parties: Garmin data is stored on Firebase (Google Cloud Platform), our database infrastructure, and passes through our servers, which are hosted by Vercel. Vercel keeps our server logs for a limited period so we can diagnose problems. These logs can include an activity's name, type, duration, average heart rate, and training stress, your maximum heart rate, and your Garmin user ID. To draw route maps, the app loads map images for the area of your ride from our map provider, OpenFreeMap. If the coach searches the web or sends a support request for you, the text it writes is sent to our search provider (Tavily) or email provider (Resend) and may mention your activities. Beyond these providers and the AI processing and AI monitoring described above, Garmin data is not shared with, sold to, or made available to any other third party.
• Storage and retention: Garmin data is stored securely on our servers and retained while your account is active. Copies in our server logs and AI monitoring records are deleted automatically after a limited period (14 days for AI monitoring records). When you disconnect Garmin you can choose to also delete the activities previously synced from Garmin, and deleting your account permanently deletes all of your data, including all Garmin-sourced data.
• Your controls: You can disconnect Garmin at any time (Settings, Connections) and choose to delete the activities it synced, which stops your Garmin activities from being used for AI coaching. A maximum heart rate recorded on a Garmin ride stays in your profile until you change it. You can turn off detailed ride analysis at any time (Settings, Privacy), and you may still manually upload .fit files from any device as an alternative to the automatic sync.

4.3 Apple Health (HealthKit) Data

On iOS, WattsUp can connect to Apple Health. Access is granted by you through the system Health permissions sheet and can be changed at any time in the iOS Settings app under Privacy, Health.

• What we read and write: With your permission we read workouts and daily wellness data (sleep, resting heart rate, heart rate variability, steps, active energy, body mass, respiratory rate, and wrist temperature), and we can write your completed WattsUp rides back to Apple Health.
• How we use it: Health data is used solely to provide the app's health and fitness features: your ride history, training metrics, wellness trends, and personalized coaching. Wellness and ride metrics derived from Apple Health are processed by our AI service provider (OpenAI) to generate coaching responses, and are included in the records our AI monitoring service (LangSmith) keeps for 14 days. This is on by default, and Section 4.1 explains what the Share Activity Data with AI setting turns off. Your daily wellness trends are used for coaching even while that setting is off.
• What we never do with it: Apple Health data is never used for advertising or marketing, never sold, and never shared with data brokers or any other third party beyond the AI processing, AI monitoring, and hosting infrastructure described in this policy.
• Storage and deletion: Health-derived data is stored securely on Firebase and deleted when you delete your account. Disconnecting Apple Health in the app stops all further reading and writing.

4.4 Health Connect (Android) Data

On Android, WattsUp can connect to Health Connect. Access is granted by you through the Health Connect permission screen and can be reviewed or revoked at any time in Health Connect on your device.

• What we read and write: With your permission we read your workouts and, for each workout, the heart rate, distance, calorie, and step records that describe it. We also read your total step count for each day, starting with up to the last four weeks when you first connect. If you also grant the optional wellness permissions, we read your daily resting heart rate, heart rate variability, and weight. With the optional history permission, your first sync can import up to 90 days of past workouts. We can also write your completed WattsUp rides back to Health Connect.
• How we use it: Health Connect data is used solely to provide the app's health and fitness features: your ride history, training metrics, daily step and wellness trends (shown on the app's Wellness page), and personalized coaching, where your coach uses them to balance training and recovery. Workout metrics, daily step counts, and the wellness metrics above derived from Health Connect are processed by our AI service provider (OpenAI) to generate coaching responses, and are included in the records our AI monitoring service (LangSmith) keeps for 14 days. This is on by default, and Section 4.1 explains what the Share Activity Data with AI setting turns off. Your daily step trends are used for coaching even while that setting is off.
• What we never do with it: Health Connect data is never used for advertising or marketing, never sold, and never shared with data brokers or any other third party beyond the AI processing, AI monitoring, and hosting infrastructure described in this policy. Our handling of data received from Health Connect adheres to Google's Health Connect Permissions policy, including its Limited Use requirements.
• Storage and deletion: Health-derived data is stored securely on Firebase and deleted when you delete your account. Disconnecting Health Connect in the app stops all further reading and writing, and you can additionally revoke WattsUp's permissions in Health Connect itself.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 Third-Party Service Providers

• RevenueCat: For subscription management and payment processing
• AI Services: OpenAI, as described in Section 4
• AI Monitoring: LangSmith (provided by LangChain), for monitoring and troubleshooting our AI coaching features, as described in Section 4.1
• Firebase: For data storage and hosting infrastructure
• Vercel: For hosting our website and servers
• OpenFreeMap: For the map images used to show your ride routes
• Tavily: For web searches the AI coach runs to answer your questions, such as looking up an event you are training for
• Resend: For sending emails, including support requests the AI coach sends on your behalf

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

5.3 Business Transfers

If WattsUp or 021 Ventures is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Storage and Security

Your data is stored securely using Firebase, a Google Cloud Platform service. We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. If you delete your account, all data associated with your account will be permanently deleted from our systems. Records of AI coaching requests kept by our AI monitoring service (LangSmith) are deleted automatically after 14 days, and server logs are deleted automatically after a limited period.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Revoke Authorization: Disconnect third-party integrations (Wahoo, Garmin, Apple Health, Health Connect) at any time
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at jerry@watts-up.app.

9. Children's Privacy

Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

While we are based in Melbourne, Australia, your information may be transferred to and processed in other countries where our service providers operate (including the United States, where our AI and AI monitoring services process data). We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: