Privacy Policy

1. Introduction

This Privacy Policy explains how Platyplus ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website and AI coaching application (the "Service").

2. Information We Collect

To provide our AI coaching services, we must collect and process specific types of data, which we obtain because Platyplus acts as an extension to your existing Intervals.icu account:

2.1 Account & Identity Information

• Authentication: We collect your email address and an authentication token when you link your Intervals.icu account to our extension.
• Payment Data: Handled securely by our PCI-compliant payment processor (e.g., Stripe). We do not store your full credit card number.

2.2 Biometric and Athletic Data

We pull the following data from your Intervals.icu account to feed into our logic engine:

• Historical workout telemetry (Heart Rate, Power, Pace).
• Physiological metrics (FTP, Threshold Heart Rate, Weight).
• Training Load metrics (CTL, ATL, TSB, TSS).
• Self-reported tags (e.g., pregnancy status, menstrual cycle phases, injury markers).

3. How We Process Data with AI (The "AI Clause")

Unlike traditional fitness apps, Platyplus relies on Generative AI. Here is exactly how we handle your data in that context:

• Prompt Generation: We aggregate your athletic metrics into structured, anonymized text prompts (e.g., "Athlete is heavily fatigued with a TSB of -30").
• Third-Party Inference: These prompts are securely transmitted via API to our Large Language Model partners to generate your weekly schedule.
• Zero Retention / No Training: We have executed enterprise agreements with our LLM providers which legally prohibit them from retaining your data or using it to train their models. The data exists in their system only for the few seconds required to generate your plan.

4. Data Portability (EU Data Act / Law 25)

You have the right to access the data that our systems generate for you. You may export your generated AI training plans from Platyplus in standard, machine-readable formats. However, the proprietary algorithmic logic and prompts used to generate those plans remain the intellectual property of Platyplus.

5. Disclosure of Your Information

We do not sell, rent, or lease your personal or biometric data to third parties. We disclose data only to trusted service providers (hosting, payment processing, LLM APIs) bound by strict confidentiality agreements, or if explicitly required by Quebec/Canadian law.

6. Data Security

We implement industry-standard encryption (TLS/SSL) for data in transit and AES-256 encryption for data at rest. Access to our databases is strictly limited to authorized personnel.

7. Your Rights (Law 25 & PIPEDA)

You possess the following rights regarding your data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may correct inaccurate data (mostly managed directly via your Intervals.icu account).
• Right to Erasure: You may request the deletion of your account and all associated biometric data from our servers. (Note: This does not delete your Intervals.icu account).
• Right to Withdraw Consent: You may revoke our OAuth access to your Intervals.icu data at any time, though this will render the Service inoperable.

8. Privacy Officer & Contact Information

In accordance with Law 25, we have appointed a designated Privacy Officer responsible for our compliance. To exercise your rights or ask questions, please contact:

Email: [email protected]
Jurisdiction: Montreal, Quebec, Canada

9. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the new policy here. Continued use of the Service constitutes your acceptance.