Privacy Policy

Last updated: July 2026

Template notice: this is a plain-language starting draft, not legal advice. Have it reviewed by a professional (or a generator like Termly/iubenda) before charging real customers.

Overview

This policy explains what data MileMind collects, why, and your choices. We collect only what we need to generate and adapt your training plans, and we don't sell your data.

What we collect

Account: your name, email, and profile picture from your Google sign-in.

Training profile: the fitness details you enter — age, weekly mileage, goal race, injury history and tags, risk tolerance, and related preferences. Some of this is health-related, so we treat it with care.

Activity data (if you connect Strava): the runs and metrics Strava shares under the permission you grant, used to inform pace and load.

Usage: the plans you generate and workouts you log, plus basic technical logs and privacy-friendly analytics for reliability and product improvement.

Billing: if you subscribe, Stripe processes your payment and stores your card details. We store only your subscription status and a Stripe customer reference — never your card number.

How we use it

To generate and adapt your plans, compute your training metrics, run the deterministic safety checks, operate your account and subscription, and keep the service secure and working. Your profile and injury text may be sent to our AI provider (Anthropic) as prompt context to write plan rationale; it is sanitized first and is never used to make the underlying physiological calculations, which are deterministic.

Who we share it with

Service providers that make MileMind work — our hosting and database provider, Stripe (payments), Anthropic (AI plan text), and Strava (only the data you authorize). We share the minimum needed and don't sell personal data. We may disclose data if required by law.

Security

Access is protected by authenticated sessions; third-party access tokens (such as Strava) are encrypted at rest. No system is perfectly secure, but we apply reasonable safeguards and keep them under review.

Your rights and choices

You can export all of your data as a file, or delete your account and its data, at any time from your account settings. You can disconnect Strava to stop activity syncing. Depending on where you live, you may have additional rights (access, correction, deletion, objection) — email us to exercise them.

Data retention

We keep your data while your account is active. When you delete your account, we remove your profile, plans, logs, and connected-service tokens. Some minimal records may persist briefly in backups or where retention is legally required.

Children

MileMind is not intended for anyone under 16, and we don't knowingly collect data from children.

Changes and contact

We'll update this policy as the service evolves; the "last updated" date reflects the latest version. Questions or requests? Email support@milemind.app.