Privacy Policy

1. Who we are

Jacso Coach (jacso-coach.vercel.app) is a running coaching platform that connects coaches with their athletes and helps solo runners build structured training plans. This policy explains what data we collect, how we use it, and your rights.

2. Data we collect

• Account data: email address and password (stored via Supabase Auth)
• Profile data: name, role (coach / athlete / solo), training preferences
• Training data: training plans, sessions, target paces, reference times (5km, 10km, half marathon, marathon)
• Strava activity data: running activities imported with your explicit authorization (distance, duration, pace, heart rate, elevation). Only activities you authorize are imported.
• Garmin workout data: structured workouts pushed to your Garmin Connect account with your explicit authorization.

3. How we use your data

• Display your training plan and sessions in your dashboard
• Allow your coach to monitor your progress and adjust your plan
• Calculate personalized target paces based on your reference times
• Sync your runs from Strava for training analysis
• Push structured workouts to your Garmin device

We do not sell, rent, or share your data with third parties for advertising or commercial purposes.

4. Third-party services

• Supabase — authentication and database hosting (EU region). Privacy policy: supabase.com/privacy
• Strava — activity import via OAuth 2.0. Only data you explicitly authorize is accessed. Privacy policy: strava.com/legal/privacy
• Garmin Connect — structured workout delivery via OAuth 2.0. Only workout data is written; no health data is read. Privacy policy: garmin.com/privacy
• Vercel — application hosting. Privacy policy: vercel.com/legal/privacy-policy

5. Data retention

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us.

6. Your rights (GDPR)

As a user located in the EU, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent for Strava or Garmin integration at any time
• Lodge a complaint with your national data protection authority

7. Security

All data is transmitted over HTTPS. Strava and Garmin tokens are stored encrypted in our database and are never exposed publicly. Access to athlete data is restricted to the athlete themselves and their assigned coach.

8. Contact

For any privacy-related request, contact us at: contact@jacso-coach.vercel.app