Last updated: 6 November 2026
CoachSage ("the app", "we") is an AI training coach for endurance athletes. This policy explains what data the app accesses, how it is used, and the control you have over it. We have designed CoachSage to keep your data on your device wherever possible.
With your explicit permission, CoachSage reads the following from Apple Health (HealthKit) to assess your recovery and build your training plans:
This data is read on demand and processed on your device. CoachSage does not write to Apple Health unless a future feature explicitly asks you to.
You may enter goals (such as a target event and date), training-day preferences, your post-workout effort ratings, and notes for your coach. This is stored locally on your device.
To generate your daily guidance, weekly plan and goal plan, the app sends a summary of the relevant health and training context, along with your goals and preferences, to:
Requests to Anthropic carry only the health and training context needed for that one reply. No account identifier, email address, or other identifying information is attached to the request. This means Anthropic has no way to link that data back to you personally or build a profile of you over time, unlike a general AI assistant with a direct connection to Apple Health tied to your account there.
We do not sell your data, use it for advertising, or share it with any other third parties. CoachSage contains no third-party advertising or analytics tracking.
CoachSage records a small set of anonymous usage events (such as "chat sent" or "weekly plan viewed") on our own infrastructure, to understand which parts of the app are actually used, never a third-party analytics SDK. These events carry a random identifier generated once on your device, and never any health data, goals, notes, or other personal content. They are not stored against your account; the analytics records contain no account identifier, and the random identifier is never included in your account backup. (Your request is sent over an authenticated connection so we can reject spam, but the stored event is not tied to your account.)
Separately from product analytics, our backend keeps a short operational log of coaching requests (which endpoint was called, when, which AI model answered, how long it took, and the token count used) so we can investigate abuse, unexpected cost spikes, and outages. Failed sign-in attempts are logged with the network address they came from, to detect probing. While your account is active, these entries are linked to your account identifier; they never contain the content of your questions or the coaching reply. Entries older than 90 days are deleted automatically. A separate, much smaller log used only to enforce the request-rate limits described below is deleted after 2 days.
CoachSage uses Sign in with Apple, and an account is required to use the app. For your account we store:
Account data is stored with our database provider, Supabase, in Sydney, Australia, and is protected so that only your signed-in account can read it. Your raw health metrics (HRV, resting heart rate, sleep, workouts and steps) are not stored in your account. They remain on your device and are only processed transiently to answer coaching requests, exactly as described above. The plans the coach writes for you are different: they are saved in your account, and their text can quote or describe your recovery and training, for example an HRV or sleep figure or a recent session. You can delete your account at any time in the app under Settings → Account → Delete Account: everything listed above is removed immediately and permanently. The short operational log described above is not deleted outright (it exists to protect the service from abuse); instead, any entries tied to your account are stripped of your account identifier and replaced with a random one that isn't linked to you or to anything else about your account, so nothing in it can be traced back to you after deletion. We also keep a daily summary of each account's activity (subscription tier, when it was last active and how many coaching requests it made) so we can understand how the app is used. When you delete your account, we remove your email address and name from that summary and replace your account identifier with a random one. We do both of these as part of the deletion; if either step doesn't complete, a daily clean-up finishes it, normally within a day. Deleting your account also clears your coaching data, effort ratings, workout notes and coach feedback from this device, including what the Home Screen widget shows, and a paired Apple Watch clears its copy the next time it connects.
Your plans, goals, preferences and effort ratings are stored locally on your device (and your plans, goals and preferences are also backed up to your account as described above). Your sign-in session is stored in the iOS Keychain. Raw health data read from Apple Health is not retained on our servers after a request is processed. Two things are retained: the plans the coach writes, whose text can mention recovery and training figures, as described above; and the operational log, which keeps request metadata (not health data or coaching content) for up to 90 days, as explained there.
CoachSage is not directed at children and is intended for users aged 16 and over.
We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.
Questions about this policy or your data? Email support@coachsage.app.