Canary Coach

Privacy Policy

How Canary collects, uses, and protects data across the public platform.

Privacy Policy

Effective date: April 15, 2026

These policies govern your use of Canary Coach, a service of HHH LLC. This policy explains what we collect, why we collect it, and your choices.

Information we collect

  • Account and profile data, such as name, email, and coach-athlete relationship settings.
  • Workout and training records, including manually entered sessions and files uploaded from Garmin devices or Garmin exports.
  • Recovery data imported from Oura when an athlete connects an Oura account.
  • Operational data, such as logs and diagnostics needed to secure and improve the service.

OAuth scopes and why we request them

  • Oura `daily`: lets Canary Coach read daily sleep, readiness, and activity summaries so a coach can see recovery context in the athlete's workspace.
  • Garmin Activity API / Activity Export permission: lets Canary Coach read detailed activity files and summaries so the workspace can compute workout history, training load, and related coach review context.
  • Garmin Health API: requested for the athlete's all-day wellness and recovery signals so the workspace can show broader readiness context alongside workout data when those signals are available.
  • We request the smallest provider access set that matches the coaching features offered today. Provider data is processed only for the user's coaching workspace and is not used to train general AI models.

How we use Garmin and Oura data

  • Garmin workout data is used to generate deterministic training summaries, load metrics, and coach workflow context.
  • Oura recovery data is used to provide recovery context and support coach-facing interpretation.
  • We use this data to operate product features, support customer requests, and improve reliability.

Sharing, sub-processors, and retention

  • We do not sell personal data.
  • Data is shared only with service providers needed to host, secure, and operate Canary Coach.
  • Current sub-processors include Vercel for public-site hosting, Render for backend hosting, and Anthropic for optional bounded narrative generation where enabled.
  • We retain account, workout, and recovery data while a coaching workspace is active and for 90 days after a workspace is deactivated so we can support backup recovery, security review, and auditability of coaching records.

Your choices and deletion requests

  • You can email support@thecanarycoach.com to request data access, correction, export, or deletion. We acknowledge deletion requests within 5 business days and complete them within 30 days unless a legal or contractual retention obligation applies.
  • You can disconnect Garmin and Oura from provider account settings at any time. Canary Coachprocessing of newly synced provider data stops after disconnection.

Questions or requests: support@thecanarycoach.com.