This Privacy Policy describes how Athlete Mindset Inc. (“we,” “us,” “Threshold”) collects, uses, and shares information when you use the Threshold iOS app and the website at thethresholdapp.com (together, the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

Information you give us

Account information: your email address and a hashed password when you create an account. If you use Sign in with Apple, we receive a private relay email address and your name.
Profile and onboarding data: age, sex, height, weight, running experience, current weekly volume, injury history, goal race, personal records, available training days, cross-training preferences, and lifestyle information you choose to share.
Coach chat messages: the messages you send to the AI coach and any context you share with it.
Training feedback: session completion status, your perceived effort, and notes you log about each workout.

Information we collect automatically

Usage data: pages viewed, features used, session duration, device type, operating system version, and approximate location derived from IP address (city level only).
Diagnostic data: crash reports and error logs that help us fix bugs. These never contain the contents of your training plan or chat messages.

HealthKit data (iOS only)

With your explicit permission, Threshold reads the following categories from Apple HealthKit to personalize and adapt your training:

Workouts (type, duration, distance, pace, average heart rate)
Heart rate and resting heart rate
Active energy burned
Walking + running distance and step count
Body mass (optional)

HealthKit data is never used for advertising, never sold to third parties, and never shared with data brokers or marketing networks. It is used solely to generate and adapt your personalized training plan and to show your progress inside the app. You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → Threshold.

Payment information

We do not store credit card numbers. Payments on iOS are handled by Apple through the App Store. Payments on the web are handled by Stripe, Inc. We receive only a subscription status, plan type, and renewal date.

2. How we use your information

Generate your personalized training plan using the Norwegian double-threshold method.
Adapt upcoming sessions based on your completed workouts, feedback, and HealthKit data.
Respond to messages you send to the AI coach.
Send you reminders and notifications about upcoming sessions (only if you enable notifications).
Process payments and manage your subscription.
Provide customer support.
Diagnose technical problems and improve the Service.
Comply with legal obligations.

We do not sell your personal information, and we do not use your data for targeted advertising.

3. How we share your information

We share information only with the third-party processors listed below, and only as needed to operate the Service. Each processor is bound by a data processing agreement.

Supabase, Inc. — database, authentication, and secure storage.
Anthropic, PBC — processes your chat messages and onboarding data to generate training plans and coaching replies through the Claude API. Anthropic does not train its models on Threshold user data.
OpenAI, L.L.C. — generates text embeddings for our internal knowledge base. User-identifiable data is not sent to OpenAI.
Tavily AI — performs web searches requested by the AI coach (e.g., looking up recent race results). Searches are submitted without user identifiers.
Stripe, Inc. — processes web payments and manages subscriptions.
Apple Inc. — handles in-app purchases and subscriptions on iOS.
Vercel, Inc. — hosts our website and API.

We may also disclose information when required by law, to protect the rights or safety of users, to investigate fraud, or in connection with a merger, acquisition, or sale of assets (in which case you will be notified).

4. Data retention

Account and training data: kept while your account is active. Deleted within 30 days of account deletion.
Chat messages: kept while your account is active unless you delete them sooner.
Payment records: kept for as long as required by tax and accounting law, typically 7 years.
Diagnostic logs: kept for up to 90 days.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain uses. To exercise any of these rights, email threshold@athletemindset.app from the address on your account, or use the in-app controls:

Access / export: Profile → Account → Export My Data
Delete account: Profile → Account → Delete Account
Revoke HealthKit access:iOS Settings → Privacy & Security → Health → Threshold
Unsubscribe from emails: click the unsubscribe link at the bottom of any email we send

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have the rights described in the California Consumer Privacy Act, including the right to know, the right to delete, and the right to opt out of the sale or sharing of personal information — we do not sell or share your personal information for cross-context behavioral advertising.

6. Security

We protect your data with industry-standard safeguards: encryption in transit (TLS) and at rest, hashed passwords, row-level access control through Supabase, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security, but we work hard to protect your data and will notify you promptly of any breach that affects your personal information.

7. International data transfers

Threshold is operated from the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our processors operate. We rely on Standard Contractual Clauses and similar mechanisms for lawful cross-border transfers.

8. Children's privacy

Threshold is not directed to children under 13 (or under 16 in the European Economic Area and the United Kingdom). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact threshold@athletemindset.app and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “Last updated” date at the top of this page and, for material changes, notify you in the app or by email. Continued use of the Service after a change means you accept the updated policy.

10. Contact us

Questions about this Privacy Policy? Email threshold@athletemindset.app.

Athlete Mindset Inc.
Apple Developer Team ID: B22LUXH6CQ