Privacy Policy.

1. Controller

Yuval Ben Moshe, Tel Aviv, Israel. For access, correction, deletion or consent requests: coach@uvcycling.com, +972 52 645 4478.

2. Data collected

• Account: email, user ID, name and interface language.
• Rider profile: age band, disciplines, goals, availability, equipment, timezone, FTP/LTHR and fitness.
• Health/safety restrictions you choose to provide.
• Plans, feedback, metrics and summaries derived from FIT or Intervals.icu. Raw FIT files and GPS coordinates are not retained in the current design; necessary processed analysis is retained.
• Membership status, transaction/subscription IDs and dates. PayPal processes full card details; we do not receive them.
• Security/error logs, essential cookies and consent-based analytics.
• Consent evidence: document versions, language, time and account ID.

3. Purposes

Account security, plans and analysis, requested imports, membership/support, service messages, abuse prevention, legal compliance and improvement. Sensitive data is used for the requested service with explicit consent where required.

4. Providers and transfers

Data may be processed by hosting/infrastructure providers, Supabase (authentication), Resend (service email), PayPal (billing), Intervals.icu when connected, and analytics only with consent. Processing may occur outside Israel under appropriate safeguards. We do not sell personal data.

5. Intervals.icu and FIT

Your API key is encrypted and used only for required requests. Upload/connection are optional. Disconnecting does not erase imported data; deletion may be requested.

6. Automation and AI

Rules-based automated analysis is used. It is not a medical decision and creates no coach–athlete relationship. This version does not send FIT or health data to an external generative-AI model. Material changes will be notified and consent requested where required.

7. Retention

Data is kept while active and as needed for service, security, accounting and law. On deletion it is removed/anonymised within a reasonable time, except transaction or consent evidence we must or legitimately need to retain. Backups expire cyclically.

8. Security

We use access controls, encrypted integration secrets, rate limits and user separation. No system is perfectly secure; incidents are handled under applicable duties.

9. Rights

Subject to law, request access, correction, deletion, objection/withdrawal, and export. Withdrawal does not affect earlier lawful processing and may disable dependent features.

10. Adults and changes

The self-service product is for adults 18+. Material changes will be published and renewed consent requested where required.