Privacy Policy

Privacy Policy

Effective date: April 15, 2026

These policies govern your use of Canary Coach. Canary Coach is a service of HHH LLC. This policy explains what we collect, why we collect it, and your choices.

Information we collect

• Account and profile data, such as name, email, and coach-athlete relationship settings.
• Workout and training records, including manually entered sessions and files uploaded from Garmin devices or Garmin exports.
• Recovery data imported from Oura when an athlete connects an Oura account.
• Operational data, such as logs and diagnostics needed to secure and improve the service.

OAuth scopes and why we request them

• Connected providers such as Oura and Garmin may ask you to approve access to training, recovery, sleep, readiness, activity, and related athlete data. We request provider permissions only so Canary Coachcan sync the data needed to produce coaching insights inside your workspace.
• Oura data is used for recovery context such as sleep and readiness signals when an athlete connects an Oura account.
• Garmin data is used for activity and training context such as workouts, training load, and related coach review signals when those features are available.
• We avoid over-collecting provider data and do not use athlete or provider data to train general AI models.

How we use Garmin and Oura data

• Garmin workout data is used to generate deterministic training summaries, load metrics, and coach workflow context.
• Oura recovery data is used to provide recovery context and support coach-facing interpretation.
• We use this data to operate product features, support customer requests, and improve reliability.

Sharing and sub-processors

• We do not sell personal data.
• Data is shared only with service providers needed to host, secure, and operate Canary Coach.
• Current sub-processors include Vercel for public-site hosting, Render for backend hosting, and Anthropic for optional bounded narrative generation where enabled.

Retention

• Account and workspace data is retained while the account or coaching workspace is active and for up to 90 days after closure or deactivation, unless a longer period is required for legal, security, or contractual reasons.
• Synced activity, training, recovery, sleep, readiness, and related athlete data is retained while the workspace is active and for up to 90 days after provider disconnection or workspace deactivation.
• Support and contact requests are retained for up to 24 months so we can respond to follow-up questions and maintain business records.
• Security, diagnostic, and operational logs are generally retained for up to 12 months, unless needed longer to investigate abuse, security events, or service reliability issues.

Your choices and deletion requests

• You can email support@thecanarycoach.com to request data access, correction, export, or deletion. We target acknowledgment of deletion requests within 5 business days and completion within 30 days unless a legal, security, or contractual retention obligation applies.
• You can disconnect Garmin and Oura from provider account settings at any time. Canary Coachprocessing of newly synced provider data stops after disconnection.

AI processing

Canary Coach does not use athlete, workout, recovery, sleep, readiness, or provider data to train general AI models. If AI-generated summaries or narratives are enabled, data may be processed to provide that product functionality inside the user's workspace, not for general model training.

Questions or requests: support@thecanarycoach.com.