This policy explains what data Train Arc ("Train Arc", "we", "us") collects, how we use and share it, and the choices you have. It applies to the Train Arc web and mobile applications and the connected integrations you choose to enable.
Information we collect
We collect the following categories of data:
- Account details — your email address, name, and authentication credentials.
- Activity and training data — workouts, routes, heart rate, power, pace, and similar metrics you upload or sync from a connected provider.
- Data from connected providers — if you choose to connect a third-party account or import a file, we receive the activity, wellness, profile, device, route, and related records you authorize that source to share with us.
- Usage and device data — basic analytics and log data needed to operate, secure, and improve the product.
Connected provider data
If you connect an external account, Train Arc accesses that provider only under your explicit authorization, usually through OAuth or another provider-approved connection flow. We request the scopes needed to provide the integration you choose, and the provider may show you the exact categories of data before you approve access.
We use connected-provider data solely to provide Train Arc features to you, including import, sync, duplicate reconciliation, analytics, recovery context, planning, sharing you initiate, support, security, and troubleshooting. We do not sell connected-provider data, use it for advertising, or use it to train generalized machine-learning models.
You can revoke Train Arc's access at any time by disconnecting the integration in Train Arc or, where available, revoking access inside the provider's own account settings. Revocation stops future syncing. You can also delete previously synced provider data from your Train Arc account, subject to limited retention required for security, legal compliance, backups, or dispute resolution.
Your use of connected services is also governed by each provider's own terms and privacy policy. We follow applicable provider developer policies, including access, use, disclosure, deletion, and branding requirements, and may remove or stop syncing provider data when required by your instructions, provider policy, law, or security needs.
How we use your data
We use your data to compute your training analytics, provide the features you ask for, sync data from connected providers, secure your account, and improve the product. We do not sell your personal data, and we do not use it for advertising.
How we share your data
We do not sell your personal data. We share it only with service providers that help us operate Train Arc (such as hosting and infrastructure), and only to the extent needed to provide the service. We may disclose data if required by law or to protect the rights and safety of our users. We do not transfer or disclose data obtained from connected providers to any third party except as described here, through service providers operating under our instructions, or as you explicitly direct.
AI and connected-provider data
If you use chat, connector, or assistant features, Train Arc may process relevant training context to answer your request. Connected-provider data is used only to generate the response or tool result you asked for, and not to build advertising profiles or train generalized models.
Data retention
We keep your data for as long as your account is active or as needed to provide the service. When you delete data or your account, we remove it from our active systems and instruct our processors to do the same, subject to limited retention required by law.
Your rights and control
You can access, export, or permanently delete your data at any time from your account. Disconnecting a provider stops future syncing immediately, and you can delete already-synced data. Depending on where you live, you may have additional rights under laws such as the GDPR and CCPA, including the right to access, correct, delete, or port your data, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at privacy@train-arc.com.
Security
We use industry-standard measures, including encryption in transit, to protect your data. No method of transmission or storage is completely secure, but we work to safeguard your information and limit access to it.
Children's privacy
Train Arc is not directed to children under 16, and we do not knowingly collect personal data from them.
Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.
Contact
Questions about privacy or your data? Reach us at privacy@train-arc.com.