Privacy Policy

• Account info: Your name, email address, and password (stored as a salted cryptographic hash — we never store plaintext passwords)
• Strava activities: With your explicit authorization — workout type, distance, duration, heart rate, elevation, and calories
• Apple Health data: Workout data you voluntarily import through the app
• Chat messages: Conversations with your AI coach, stored to provide continuity across sessions
• Training plans: Plans generated and saved within the app

We use your information solely to provide the AiTri service:

• Display your training history and calendar
• Generate personalized AI coaching and training plans
• Analyze your fitness trends and provide insights
• Maintain your conversation history with the AI coach

AiTri connects to Strava via OAuth 2.0. When you connect your Strava account:

• We request read-only access to your activities (activity:read_all)
• Your Strava access token is stored securely to enable background syncing
• You can revoke access at any time from your Strava settings page
• Revoking access prevents future syncing but does not delete data already stored in AiTri

• All data stored in AWS DynamoDB (us-east-1, N. Virginia)
• Passwords hashed with PBKDF2-HMAC-SHA256 and a unique random salt per user
• All data transmitted over HTTPS with TLS 1.2+
• Session tokens expire automatically after 30 days

We retain your data for as long as your account is active. You may request deletion of your account and all associated data by contacting us at the email below. We will process deletion requests within 30 days.

Your fitness data and chat messages are processed by Amazon Bedrock (Claude AI) to generate coaching responses and training plans.

AiTri is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Disconnect your Strava account at any time
• Export your data upon request

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of AiTri after changes constitutes acceptance of the updated policy.