Privacy

We collect the email you submit on this page and any optional answers you give us (next race, training mix). We use them to send you product updates about Smash Coach and to shape what we build. No third-party advertising. No selling your data.

If you use the Smash Coach app, we also store your account (your email — or no email at all if you train as a guest) and the training data you add: your sports, sessions, goals, events, injuries or limitations you report, your conversations with the coach, and — only if you explicitly switch it on — menstrual-cycle tracking. Health-related entries are used only to shape your training, never for anything else. If you sign in with Google, we receive the name, email address, and profile picture your Google account shares — we use them to create your account and to set your initial profile photo, which you can replace or remove at any time.

To coach you, the relevant training context is sent to Anthropic's Claude, the AI that programs your plan and answers your chats. Your email and account identifiers are never included in what the model sees, and this data is not used to train AI models. Your daily training metrics (status, balance) are computed on your device and stay there. Exercise illustrations in the app are drawn by Google's Gemini image model — the only thing it receives is the exercise name and drawing instructions, never anything about you. When you use the microphone to talk to your coach, your recording is turned into text either by your device's built-in dictation or, where that isn't available, by Cloudflare's Whisper speech-to-text service, and is never stored. Anthropic keeps API inputs and outputs for up to 30 days for abuse monitoring, then deletes them. Alongside your training, that context includes your first name, your age, your gender if you gave one, any baselines you entered (resting heart rate, 5k time, VO2max) and how you said recent sessions felt.

We use your data to run the service you asked for: your training data on the basis of our contract with you, health entries such as injuries and cycle tracking only with your explicit consent (which you can withdraw at any time), and a small amount for our legitimate interest in keeping Smash Coach secure, working and improving — which is the basis for the usage counts described above, and which you can object to at any time by switching them off in the app. We keep it while your account exists and erase it the moment you delete the account; guest accounts inactive for 30 days go automatically, usage counts are kept for 13 months, and billing records are kept as long as tax law requires but are detached from your identity. Anthropic, Google, Cloudflare and Paddle process data on servers in the United States under the European Commission's standard contractual clauses. Everything is encrypted in transit and at rest, and access is limited to the few people who need it. Withdrawing consent to cycle tracking deletes that data and any notes your coach kept about it; earlier messages in your own chat history that mention it remain, as your record of those conversations, and you can delete them yourself.

We measure how Smash Coach is used, and we do it ourselves. On the website we record which pages are opened, which link or search brought you, your country, and whether you are on a phone or a computer. In the app we record which screens you use and what you do with your training — a session marked done, a chat started, a plan change accepted — and where things go wrong: an error you saw, a wait that took too long, a button that did not respond. Three things this is not. It is not a third party: no analytics company receives any of it, and nothing on this site or in the app reports to one. It stores nothing on your device — no cookie, no hidden identifier — which is why you have never been asked to accept cookies here. And it never records what you write: not your injuries, not your goals, not a single word of your conversations with the coach. So that one person visiting four times counts as one visitor and not four, our server turns your IP address and browser into a scrambled code that is different every day; the address and the browser themselves are thrown away and never stored. We keep these counts for 13 months. Deleting your account removes the link between them and you — the counts stay on as numbers with nobody attached. If you would rather not be counted at all, switch it off in the app under You → Settings → Privacy & data. Behind the scenes Smash Coach runs on Lovable, which hosts it, handles Google sign-in and receives error reports.

When you subscribe, the payment is handled by Paddle, our authorised reseller and the seller shown on your invoice. You enter your card and payment details directly with Paddle — they never reach us and we never store them. From Paddle we receive only what we need to unlock your plan: which plan you are on, whether it is active, and when it renews. Paddle handles your payment data under its own privacy policy and uses it to take the payment, issue your invoice, and calculate and remit VAT. The free trial takes no card, so if you never subscribe you are never charged and we never send Paddle anything about you. Opening the billing screen does load Paddle's checkout, which lets them see your device and IP address the way visiting any website would.

If you send feedback from inside the app, we store your message along with the date and app version. Including your email and device details (browser, device type, screen size, language, timezone) is optional — it helps us debug and follow up — and you can switch it off to send your feedback anonymously, with no link to your account. If you flag an exercise illustration as wrong, we record which exercise it was, when, and the app version, linked to your account; deleting your account removes that link while the flag itself stays, so the drawing still gets fixed.

A small number of Smash Coach staff can see your account details — your name, email, profile photo, the sports you train, when you signed up, and your AI coaching usage and cost — to run the service: billing and cost checks, support, safety, and improving the product. They never see your conversations with the coach, the injuries you report, or your cycle data in these tools. One exception, which we would rather name than have you discover: every plan generation and every plan change the coach proposes is checked by a second AI for safety, and that check is logged together with its reason. When it flags something, staff read that log so the plan can be reviewed before it reaches you — and when they do, they see the review in full: the safety reason, the injuries and limitations you reported, the sessions being proposed and the notes the checking AI wrote. We keep that context because judging whether a plan is safe for you without knowing what it is working around is not really judging it. These reviews are kept for 12 months and are deleted along with your account. Access is limited to our team and kept confidential, and we never sell your data.

Smash Coach is operated by Multipassionate, Duikerstraat 16C, 3582 TB Utrecht, the Netherlands (Chamber of Commerce 87872110, VAT NL004497791B91). Multipassionate is the data controller for everything described here. To ask what we hold, get a copy, correct it, delete it, or object to how we use it, email hello@smashcoach.app. If you think we have handled your data badly you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

You stay in control: deleting your account in the app (You → Settings) erases everything immediately — sessions, chats, and the coach's notes included. Guest accounts inactive for 30 days are deleted automatically. For anything else, email hello@smashcoach.app. One thing we cannot delete is the billing record of a payment you actually made: tax law requires us to keep invoices for seven years, with your name removed, so what remains is the transaction and not you. Deleting removes your data from the live service straight away; encrypted database backups can still hold a copy for up to 7 days before they roll off, and sign-in and security logs are kept for 30 days.