Privacy policy

Athkit is a running coach that you shape yourself and use from Claude. It is run by Fraser Louden, who is responsible for your data (the “controller” under data protection law).

Contact details for privacy questions will be added here before friends connect a watch.

• Account: your email address, used to sign you in with a magic link and to check your invite.
• Profile and coaching settings: your name, time zone, threshold pace and heart rate, the days you can train, quiet hours, race goals, and the coach settings you choose (method, tone, autonomy, how other sport counts). We use them to build your plan and to write to you the way you asked.
• Training and health data from the devices you connect: activities, laps and intervals, heart rate, heart rate variability, resting heart rate, sleep, stress and similar summaries. We use it to work out your fitness, fatigue and readiness, to plan and review your training, and to show you charts. We store summary-level data only, not raw device files.
• Your consents: what you agreed to and when, and when you withdrew it.
• Operational records: a log of notifications sent to your Claude routine (event type, date, status). These never contain health data, and we never write health data to our logs.

We do not sell your data and we do not show advertising.

Athkit’s coaching decisions (your load, readiness and plan) are made by ordinary software rules, not by an AI model. Athkit does not run its own AI on your data in this version.

Your data is processed by AI only when you connect Athkit to your own Claude (made by Anthropic) and ask it to work with your data. Claude then reads your coaching summary and training data through the Athkit connector, on your instruction, and its handling of that data is governed by your own agreement with Anthropic. If you set up a Claude routine, Athkit sends it a short notification when something new arrives (such as “new activity”); the notification contains no health data, and Claude fetches what it needs through the connector.

We never use your data to train AI models, and we do not allow anyone else to. You can stop all AI access at any time by withdrawing your AI consent (see below).

We ask for your explicit consent twice, separately: to store and process your training and health data in order to coach you, and for that data to be processed by AI as described above. Without both, the app stays empty. Health data is a special category of personal data, and your consent is the basis on which we process it.

You can withdraw your AI consent in Settings at any time. It takes effect immediately and your Claude can no longer read your data through Athkit. Withdrawing does not affect what happened before.

• Supabase hosts our database and sign-in. Our database is in the EU (Ireland).
• Vercel hosts the Athkit website and server.
• Garmin is where your training data comes from, when you connect a Garmin device (see below).
• Anthropic, only through your own Claude, at your instruction (see “How AI is used”).

If you connect a Garmin device, you authorise Athkit through Garmin’s own sign-in and we receive the data you allow, and we may send planned workouts back to your device. You can disconnect at any time from your Garmin account.

Garmin and the Garmin logo are trademarks of Garmin Ltd. or its subsidiaries. Athkit is not affiliated with, or endorsed by, Garmin.

We keep your data while you have an account. In Settings, “Delete everything” permanently deletes your account and all your data in one step. Copies in our provider’s backups disappear on the provider’s normal backup schedule. Raw notifications received from a device provider, if we keep them so that processing can be re-run, are deleted after 30 days.

You can ask to see your data, correct it, receive a copy, or have it erased, and you can withdraw consent at any time. Most of this you can do yourself in Settings; for anything else, contact us using the details above. You also have the right to complain to your local data protection authority.

Data is encrypted in transit. Access to the database through Supabase’s public interface is blocked, so only our server can read your data, and using Athkit requires an invite and a signed-in account.