Coachwork Privacy Policy

Effective date: 24 September 2026

Coachwork is an iPhone workout tracker. This policy describes what the app does with your data. The short version: your training data lives on your device and in your own iCloud, and we run no accounts and no analytics. Beyond your iCloud, three features send your data off your device, each one only when you use it:

We process parse text and Coach messages transiently, and we do not store them. A Strava upload goes from your iPhone straight to Strava, and never through our servers.

Data we do not collect

Where your training data lives

Everything you record — programmes, logged sets, cardio completions, body metrics, Coach conversations, settings — is stored in a database on your device and, via Apple's CloudKit, in your private iCloud database. That private database is encrypted and controlled by your Apple ID; we have no ability to read it. Deleting the app removes the on-device copy; your iCloud copy can be managed in iOS Settings under your Apple ID's iCloud storage.

A workout you are part-way through is held in a file on this phone only, until you finish it. It is not in iCloud and not in your device backup. If you discard the workout, the app deletes that file.

Programme parsing

When you paste a training programme and ask Coachwork to parse it, the text you pasted is sent over an encrypted connection to our parsing service, which uses Anthropic's Claude API to convert it into a structured programme. This processing is transient:

Our legal basis for parsing your text is our contract with you: parsing is part of the paid service that you subscribe to.

Coach

Coach is a chat inside the app that writes a training programme with you and, later, adjusts the one you are running. When you send a message, these things travel over an encrypted connection to our service and on to Anthropic's Claude API:

Nothing else goes with it. A Coach message never carries your logged sets, loads, personal records, body metrics or Apple Health data. Coach never asks for injuries, medical history, your age, or your body measurements, and it does not give medical advice. It is a chat, so you can type anything into it; whatever you type is sent, so send only what you are content to send.

Our service stores nothing from a turn — not your messages, not Coach's reply, not your programme's structure. It holds them only for as long as the reply takes, which is why your phone sends the whole conversation again each time. Anthropic processes what is sent as a sub-processor solely to produce the reply, under its commercial API terms. Building a programme Coach has written sends its text through the parsing service described above.

Our legal basis for sending your Coach messages is our contract with you: Coach is part of the paid service that you subscribe to.

Your conversations are stored on your device and in your private iCloud database like the rest of your training data, and deleting a conversation removes it from both.

Usage counts

Usage needs counting, so our service keeps one kind of anonymous count. It holds nothing you or Coach wrote.

Our legal basis for these counts is our contract with you: they are part of how we deliver the paid service.

If Apple tells us a subscription has been refunded or revoked, we record that as an anonymous marker only, which expires with the subscription itself. Our legal basis for this marker is our legitimate interest in preventing abuse of the service.

Strava

Strava is optional. When you connect a Strava account, Coachwork can upload your finished workouts to it. Coachwork writes to Strava, and it reads nothing from your Strava account except the status of its own uploads. A Strava connection is free, and it is not a Coachwork account.

Before you connect

Before you connect, the Strava screen in Settings shows what an upload holds: "Connecting uploads each finished workout — name, time, exercises, sets and loads — to Strava. Cardio doesn't upload." The screen also says that your Strava privacy settings decide who sees each workout. It shows our support address and links to this policy, which says how to withdraw your consent and how to delete Coachwork's Strava data (see "Your consent, and how to withdraw it" below). When you tap "Connect with Strava", Strava's own page asks you to sign in and to give your permission. It asks each time you connect. Coachwork asks Strava only for permission to upload activities.

What an upload holds

An upload holds:

An upload never holds a warm-up, a skipped set, a note, the programme's name, a load suggestion, a personal record, your bodyweight or any Apple Health data. Coachwork never uploads cardio.

When the app uploads

Coachwork can upload a finished workout that has at least one logged set: a workout from your programme, or an ad-hoc workout.

Each workout goes to Strava once. When you change a workout after its upload, Coachwork does not send the change. Strava keeps the version that you uploaded, and you can change it on Strava.

What our servers see

An upload goes from your iPhone straight to Strava. It never passes through our servers.

Three steps need Coachwork's secret key for Strava, and the app does not hold that key: the connect, the renewal of the app's access, and the end of that access. For these steps, the app sends Strava's sign-in code or one of the app's Strava tokens to our Strava service. The service adds the key, passes the request to Strava, and passes the answer back. It sees that code or token, and never a workout.

The service stores nothing. Its log line holds its result, Strava's result, the time that the request took, and which of the three steps it was. The line holds no code, no token and nothing about you. This service is separate from the service for parsing and Coach. Nothing from Strava reaches Coach, the parsing service or Anthropic.

What Coachwork keeps

Coachwork keeps its Strava tokens, with the details that come with them, in the Keychain on this iPhone. iCloud does not sync them, and no other iPhone receives them. While Strava processes an upload, the app also keeps Strava's ID for that upload, for 7 days at most. Coachwork keeps nothing else from Strava: no name, photo or location from your profile, and no account ID or activity ID. No server of ours keeps any Strava data.

Each workout that you upload keeps the date on which it went to Strava. That date is part of your training data, on your device and in your iCloud.

Who sees your workouts on Strava

Coachwork sets no visibility on a workout that it uploads. Your Strava privacy settings decide who sees each one. Strava's privacy policy, at strava.com/legal/privacy, governs what Strava does with your workouts.

Strava's Usage Data. Strava's API policy tells us to include this statement. Strava can monitor and collect Usage Data, and it can use Usage Data for any business purpose, internal or external. For example, Strava can use it to improve the Strava API or the Strava platform, to give developer or user support, or to make sure that developers obey Strava's API agreement.

Your consent, and how to withdraw it

Our legal basis for uploading your workouts to Strava is your consent. You give it when you connect, and you withdraw it when you tap Disconnect.

Disconnect. Disconnect is on the Strava screen, and it asks you to confirm. The app then asks Strava to end Coachwork's access, deletes the tokens from this iPhone, and empties the waiting list. The connection ends on every iPhone that is connected to that Strava account. The screen then confirms the deletion in writing: "Coachwork deleted its Strava connection from this iPhone." Our servers keep no Strava data, so Disconnect deletes all the Strava data that Coachwork keeps on this iPhone.

If the request to Strava fails, the app still deletes the tokens and empties the waiting list. The screen then asks you to remove Coachwork on Strava with "Manage on Strava", a link to strava.com/settings/apps. You can also remove Coachwork on that page at any time.

When Strava ends the connection. Strava can end the connection, for example when you remove Coachwork on Strava or tap Disconnect on another iPhone. The app learns of it at its next call to Strava, and it then deletes the tokens from this iPhone. The screen confirms the deletion in writing, as Disconnect does. The app keeps the waiting list. When you connect again, it asks before it uploads those workouts.

When you delete the app. Deleting the app does not tell Strava. To end the connection, tap Disconnect before you delete the app, or remove Coachwork on Strava. When you install Coachwork again, it ends any earlier connection that it finds and deletes those tokens.

Workouts on Strava stay there. Coachwork never deletes, edits or hides a workout on Strava, and Strava gives apps no way to delete one. To delete a workout from Strava, delete it on Strava. A workout in Coachwork keeps its upload date after you disconnect.

Apple Health

If you grant permission, Coachwork can write your finished workouts to Apple Health and read your bodyweight from Apple Health to show it in the Metrics tab. Health data is used only for these features. Like the rest of your training data, it stays within your devices and your private iCloud database — it is never sent to our servers or to any third party. You can revoke access at any time in the Health app, and the app continues to work fully without it.

Export

The CSV export in Settings creates files on your device and hands them to the iOS share sheet. Where they go from there is entirely your choice.

Who is responsible for your data

Coachwork's data controller is Ash Booth, United Kingdom. In this policy, "we", "us" and "our" mean Ash Booth. To reach the controller, use the address under Contact.

Your rights

UK data protection law gives you rights over your personal data. Among them are the rights to see it, to correct it, to delete it, to limit or object to its use, and to receive a copy of it. Where our legal basis is your consent, as it is for Strava, you can withdraw your consent at any time.

Most of your data is on your devices and in your own iCloud, where you can see, export and delete it yourself. Our servers keep none of your training data and nothing that you or Coach wrote. To use a right, write to the address under Contact.

If you are not satisfied with how we use your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint. If you are in the European Union or the European Economic Area, you can also complain to the data protection authority of your country.

Children

Coachwork is not directed at children under 13 and we do not knowingly process their data.

Changes

If this policy changes, the updated version will be published at this same address with a new effective date.

Contact

Questions about this policy: ashbooth88@gmail.com