Privacy Policy
The short version. Coach’s Call recommends indoor cycling workouts based on your training and recovery data. To do that we process your ride and health data — including data you connect from services like Strava, Oura, Apple Health, WHOOP, Polar, and intervals.icu.
Your data is stored in Japan. To generate a recommendation, a summary of your recent training is sent to our AI provider (Anthropic) in the United States. We do not sell your personal information. You can disconnect a source or delete your account and data at any time.
This Privacy Policy explains how James Patrick Messerly ("we", "us", "our"), the operator of the Coach’s Call mobile and web application and related services (the "Service"), collects, uses, shares, and protects your personal information. It applies to users in the United States, Japan, and elsewhere. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.
1. Who we are (data controller / business operator)
- Operator: James Patrick Messerly
- Address: La Porte Aoyama 2F-7, 5-51-8 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan
- Privacy contact: info@coachscall.cc
- Representative / Personal Information Protection Manager (Japan): James Patrick Messerly
2. Information we collect
Information you give us
- Account data — your email address, used to sign you in (via one-time codes / magic links) and to send you service messages.
- Training profile — e.g. your functional threshold power (FTP), training style/persona, goal events and dates, and any free-text notes you add for the coach.
- Manual entries — health or workout values you type in yourself (for example a heart-rate-variability reading, sleep, subjective fatigue, or a session you log).
Health and wellness data
With your permission, we collect recovery and physiological data used to judge how ready you are to train:
- Heart-rate variability (HRV), resting and exercise heart rate, sleep duration and timing, subjective fatigue, and basic body measurements (body mass, and biological sex where your device provides it) used to calculate training load.
- This data comes from sources you choose to connect — Oura, Apple Health / HealthKit, WHOOP, Polar, and intervals.icu — or that you enter manually.
Some of this may be considered sensitive or health-related information under applicable law. We collect it only to operate the Service's core function and only from sources you connect or values you enter.
Activity and performance data
- Cycling activities and their streams — power, heart rate, cadence, speed, duration, distance, and, where present, route/GPS and elevation.
- Sources: Strava, intervals.icu, files you upload, workouts recorded in the in-app player (when connected to a smart trainer, power meter, or heart-rate strap over Bluetooth), and manual logs.
- Derived training metrics we compute from the above — training load, fitness/fatigue/form (CTL/ATL/TSB), FTP estimates, workout completions, and your outcome ratings and feedback notes.
Connection credentials
When you connect a third-party service, we store the access/refresh tokens needed to sync on your behalf. These tokens are encrypted at rest and are never shown to you or shared.
Technical and usage data
Standard operational data such as IP address, device/app version, request timestamps, and error logs, processed to run, secure, and troubleshoot the Service. If you leave usage analytics on (Settings → App preferences), we also collect first-party usage events — which screens and features you use, app version and platform, and in-app error reports — stored on our own servers and used only to improve the Service. You can turn this off in Settings at any time. We do not use third-party analytics or advertising trackers. Messages you send through the in-app "Report a problem" box are stored with your account, along with your app version, device model and OS version, so we can investigate and respond.
3. How we use your information
- To generate your personalized workout recommendations — the core purpose of the Service (see Section 4).
- To compute your training metrics, FTP estimates, plan forecast, weekly reviews, and in-session coaching messages.
- To sync activities and recovery data from services you connect.
- To operate, secure, debug, and improve the Service.
- To communicate with you about sign-in, changes, and support.
- To comply with legal obligations and enforce our Terms.
We rely on your consent (given when you create an account and connect sources) and our legitimate interest in operating the Service. Where the law requires separate consent — for example for health data or overseas transfers — we ask for it.
4. AI processing of your training data
Your daily workout recommendation is produced by our own software — a deterministic engine running on our servers — and is not generated by a large-language model. We do use third-party AI providers for other parts of the Service: conversational coaching (the plan and swap chats), written summaries of your rides and weeks, classification of notes you type, and the spoken coach lines played during a session.
- Anthropic, PBC — servers in the United States — processes text for those features. Where a feature needs your training context, we send a structured summary of your recent training state (for example your recent load, readiness signals, FTP, and recent session outcomes). We send only what the feature needs, not your raw account identifiers beyond what is necessary.
- OpenAI, L.L.C. — servers in the United States — converts a written coach line into speech when you use spoken coaching. It receives the sentence to be spoken and no account identifier.
- Data from some connected sources is never included in AI processing at all: Strava activity data is always excluded, because Strava's API terms prohibit it.
- Per each provider's terms, data sent to their APIs is not used to train their models.
These are cross-border transfers of your data to the United States (see Section 6).
Recommendations are training suggestions produced by software and are not medical advice (see our Terms of Service).
5. How we share your information
We do not sell your personal information and we do not share it for advertising. We share it only with service providers ("sub-processors") that help us run the Service, and only as needed:
| Recipient | Purpose | Location |
|---|---|---|
| Anthropic, PBC | Conversational coaching, written summaries, and classification | United States |
| OpenAI, L.L.C. | Text-to-speech for spoken coach lines | United States |
| Supabase | Database & authentication (your data at rest) | Japan (Tokyo) |
| Fly.io | Application hosting | Japan (Tokyo) |
| Resend | Sending sign-in and service emails | United States |
| RevenueCat, Inc. | Managing your subscription and validating App Store purchases. Receives your account identifier and purchase status; never your health or activity data. | United States |
| Expo (650 Industries, Inc.) | Delivering push notifications and app updates. Receives your device's push token; never your health or activity data. | United States |
| OpenStreetMap Foundation | Supplying the map tiles drawn behind a ride's route. When you open a ride with GPS, your device requests the map squares covering it, so the Foundation receives those tile coordinates and your IP address; it never receives your account, your health data, or the route itself. | United Kingdom / EU |
| Connected services you enable (Strava, Oura, WHOOP, Polar, intervals.icu) | Syncing your activities / recovery data at your direction | Varies by provider |
We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (e.g. merger or acquisition), in which case we will notify you.
6. International data transfers
Your account and activity data are stored on servers located in Japan. However, some processing necessarily occurs in other countries:
- United States — AI text processing (Anthropic), text-to-speech (OpenAI), email delivery (Resend), subscription management (RevenueCat), and push notifications and app updates (Expo).
- Other sub-processors or connected services may process data in the country where they operate.
For users in Japan: by using the recommendation feature and connecting sources, you consent to the provision of your personal data to third parties in foreign countries as described here, in accordance with the Act on the Protection of Personal Information (APPI). Information about the data-protection regimes of the relevant countries is available from us on request at info@coachscall.cc.
7. Connected third-party services
When you connect a third-party account, that provider's own privacy policy governs the data on their side, and you can disconnect at any time in Settings. In particular, if you connect Strava, your use of Strava data is also subject to Strava's terms; Strava-sourced data is handled under those terms and, consistent with them, is not used as input to AI/LLM processing.
8. Data retention and deletion
- We keep your data while your account is active and as needed to provide the Service.
- Disconnecting Strava schedules deletion of Strava-sourced activity data (immediately on request, or within 30 days after disconnection).
- Deleting your account permanently deletes your personal data from our systems (cascading across your rides, health data, recommendations, and notes), subject to short-lived backups and any records we must keep by law.
- You can request deletion at any time via the app or by contacting us.
9. Your rights and choices
Subject to applicable law, you can:
- Access, correct, or delete your personal data;
- Withdraw consent or disconnect a source (this may limit recommendations);
- Request that we stop using or sharing your data, or request a copy;
- Object to or complain about our handling.
To exercise any of these, use the in-app controls or email info@coachscall.cc. We will respond within the time required by law.
United States (including California)
We do not sell or "share" (as defined by California law) your personal information, and we do not process it for cross-context behavioral advertising. California residents may exercise rights to know, delete, and correct, and will not be discriminated against for doing so. Some health data may be "consumer health data" under state laws; we process it only to provide the Service and with your consent.
Japan (APPI)
You may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of your retained personal data. Requests and complaints can be sent to the contact in Section 1. The purpose of use is as described in Section 3; foreign third-party provision is described in Section 6. You may also contact the Personal Information Protection Commission of Japan (PPC).
10. Security
We protect your data with encryption in transit (HTTPS/TLS), encryption of connection tokens at rest, per-user database isolation (row-level security), and access controls. No system is perfectly secure, but we work to protect your information and to promptly address any incident.
11. Children
The Service is not directed to children and is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, provide additional notice in the app or by email.
13. Contact us
Questions or requests: info@coachscall.cc · James Patrick Messerly, La Porte Aoyama 2F-7, 5-51-8 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan.