Privacy policy.

1. Data collected

• Account data: email, name, date of birth (optional).
• Training data: plan, workouts, Strava activities, daily check-ins.
• Recovery data (if you connect a sensor): recovery score, HRV (heart rate variability), resting heart rate — provided by Oura or WHOOP via their official API.

2. Use of data

• Adapting your training load based on your daily recovery.
• Calculating your paces and VDOT.
• Displaying your history and progress.
• We do not sell, rent, or share your data with third parties for commercial purposes.

3. Storage

• Data stored on Supabase (AWS eu-west-3 infrastructure, Paris, France).
• Strava, Oura and WHOOP OAuth tokens encrypted at rest.
• Retention: as long as your account is active. Deletion on request.

4. Your rights (GDPR)

• Access, correction, deletion of your data at any time.
• Revoke Strava, Oura or WHOOP access from app settings.
• For any request: matthieu@kallpa.run

5. Contact

• Data controller: Matthieu de Villele
• Email: matthieu@kallpa.run