Privacy Policy

1. Information we collect

• Account information — your email address and name, and either a securely hashed password or, if you sign in with Google, the basic profile your Google account shares with us.
• Training data you provide — workouts, planned sessions, wellness entries (e.g. sleep, fatigue, resting heart rate), notes, and goals you enter.
• Connected‑service data — when you link a third‑party account such as Strava or Wahoo, we import the activity and workout data you authorize (for example: activity type, time, distance, heart‑rate, power, cadence, and derived metrics such as training load). You control each connection and can disconnect it at any time.
• Activity files you upload — if you upload your own workout files (FIT, GPX, or TCX), we parse and store the training data they contain, such as time, distance, heart‑rate, power, cadence, and laps.
• Billing data — if you subscribe, payments are processed by Stripe. We receive limited subscription and customer identifiers; we never see or store your full card number.
• Technical data — IP address, device and browser information, and basic usage and security logs needed to operate and protect the service.

2. How we use your data

• Provide your training dashboard, analytics, and history.
• Generate personalized coaching, feedback, and recommendations based on your training data, including through AI providers (see Section 3).
• At your direction, deliver the workouts we generate to a connected device or platform (for example, your Wahoo head unit), or let you export them as files.
• Operate, secure, troubleshoot, and improve the service.
• Process subscriptions and billing.
• Send essential service communications (and, only with your consent, optional updates you can opt out of).

We rely on your consent (for connected accounts), the performance of our contract with you (to provide the service), and our legitimate interests (to keep the service secure and working) as our legal bases for processing.

3. AI processing

To produce coaching feedback, plans, and insights, we process your training data using trusted third‑party AI providers acting as our processors. This processing is performed solely to generate results for you. We do not use your data to train third‑party AI models, and our AI providers are contractually restricted from doing so with data we send on your behalf.

4. How we share data

We share data only with service providers who help us run Vexar, under contracts that limit their use of it:

• Cloud hosting & database — Microsoft Azure.
• AI processing — our AI provider(s), as described in Section 3.
• Payments — Stripe.
• Authentication — Google, if you choose Google sign‑in.

We do not sell your personal data or share it for advertising. We may disclose data if required by law or to protect the rights, safety, and security of our users and the service.

5. Strava data

If you connect Strava, we access your data through Strava’s official API and handle it in line with Strava’s API Agreement:

• Your Strava data is shown only to you, within your own account — it is never displayed to other users or made public by us.
• We use your Strava activities for display and analysis only. We do not send Strava data to AI features or use it to generate coaching or plans. (Data from your own uploads and from other connected services such as Wahoo may power AI coaching — see Sections 2 and 3.)
• We store your Strava access tokens in encrypted form and use them only to sync your activities.
• You can disconnect Strava at any time from your settings, or revoke access from your Strava account. When you disconnect, revoke access, or delete your Vexar account, we delete the activity data we imported from Strava within 30 days.
• We do not sell or redistribute your Strava data.

Powered by Strava.

6. Wahoo

If you connect Wahoo, we use Wahoo’s official Cloud API to, at your direction:

• Import your completed workouts and their training data (such as power, heart‑rate, cadence, and training load) into your Vexar account.
• Send the structured workouts we generate to your Wahoo device.
• Store your Wahoo access tokens in encrypted form and use them only for the syncing described above.

Workout data you bring in from Wahoo is your own training data, and we use it to power your dashboard and your AI coaching (see Sections 2 and 3). You can disconnect Wahoo at any time from your settings.

7. Data retention

We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records to meet legal, tax, or security obligations. Connected‑service data is removed as described above.

8. Security

We protect your data with encryption in transit and at rest, encrypted storage of third‑party access tokens, network access controls, and least‑privilege access to production systems. No system is perfectly secure, but we work to safeguard your information and to respond promptly to any incident.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit your profile and disconnect services in‑app, delete your account, or contact us to exercise any of these rights. We will not discriminate against you for doing so.

10. Cookies

We use only essential cookies needed to keep you signed in and to keep the service secure. We do not use third‑party advertising or tracking cookies.

11. Children

Vexar is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, please contact us and we will remove it.

12. Changes to this policy

We may update this policy as the service evolves. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

13. Contact

Questions or requests about your privacy? Email us at privacy@vexartraining.com.