Privacy Policy

Last updated: March 24, 2026

This Privacy Policy describes how FitCoach AI ("we", "us", or "our"), developed by the Artificial Intelligence Research Group at the Facultad de Informática Mazatlán (FIMAZ), Universidad Autónoma de Sinaloa (UAS), collects, uses, and protects your personal data, including health and fitness data obtained through Garmin Connect.

1. Data We Collect

With your explicit consent, we collect the following data from your Garmin Connect account:

• Sleep data (duration, stages, sleep score)
• Heart rate variability (HRV)
• Body Battery levels
• Training load and readiness scores
• VO2 Max estimates
• Activity data (type, duration, distance, calories)
• Steps and intensity minutes
• Body composition data (if available)
• Stress levels

We also collect your name, email address, and optional athlete context you provide to personalize your analysis.

2. How We Use Your Data

Your Garmin health data is used exclusively to:

• Generate personalized training analysis and recommendations using AI
• Create weekly training plans adapted to your recovery status
• Store your analysis history so you can track progress over time
• Conduct anonymized academic research on AI-powered athletic performance analysis (only with your additional consent)

We do not sell, rent, or share your personal health data with third parties for commercial purposes.

3. Data Storage and Security

• Your Garmin credentials are encrypted using AES-128 encryption before storage
• All data is stored on secure servers with industry-standard protection
• Access to your data is restricted to authorized personnel only
• We use HTTPS for all data transmission
• Authentication tokens expire automatically and are renewed securely

4. Data Sharing

Your health data is shared only with:

• Anthropic (Claude AI): To generate your personalized training analysis. Anthropic processes data according to their privacy policy at anthropic.com/privacy
• Garmin Connect API: To retrieve your fitness data with your authorization

We do not share your identifiable health data with any other third party.

5. Your Rights

You have the right to:

• Access all data we hold about you
• Request deletion of your account and all associated data
• Revoke Garmin Connect authorization at any time from your Garmin account settings
• Export your analysis history
• Opt out of any anonymized research use of your data

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data including Garmin credentials, health metrics, and analysis history are permanently deleted within 30 days.

7. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Legal Basis

We process your data based on your explicit consent, which you provide when connecting your Garmin account to our platform. You may withdraw this consent at any time.