BORGCoach

Privacy Policy

Last updated 9 October 2026

BORGcube Systems (“we”, “us”) builds BORGCoach, a private AI running and activity coach. This policy explains what we collect, why, and the choices you have. BORGCoach is designed to keep your data isolated to your own account and under your control.

The short version

  • We never sell your data, we do not share it with advertisers or data brokers, and we do not use it for advertising or to build profiles.
  • We do not monetize your personal health data, and our team does not browse it. BORGCoach is funded solely by the subscriptions our users pay for.
  • To generate your coaching, we send relevant workout and fitness metrics and coaching context to the AI service configured for BORGCoach. Login credentials are not used as coaching inputs. We redact some common contact details from selected free-text fields where detected, but this may not catch every identifying detail.
  • Only the services needed to run the app (listed under Sharing) receive anything at all. There are no advertising or third-party analytics tools in the app.
  • You can delete your account from inside the app at any time.

Who is responsible for your data

The data controller is BORGcube Systems. Contact us at [email protected]. Where BORGCoach is self-hosted by an organization, that organization is the controller for its users’ data and this policy describes the software’s behavior.

Information we collect

  • Account information: your email address, a hashed password (Argon2id; we never store the plaintext), your preferred name, and authentication material.
  • Coaching context you provide: your goals, schedule preferences, training constraints, safety-screening answers, session logs, and feedback (effort, feel, pain notes).
  • Connected source data: when you link Garmin Connect, we sync activities, sleep, HRV, training status, body composition, devices, badges, and gear. Source credentials are encrypted at rest with Fernet keys.
  • Apple Health data: when you connect Apple Health from the iPhone app, we receive the read-only, normalized activity, workout, sleep, and fitness samples you authorize. Apple Health credentials and raw HealthKit payloads remain on the device.
  • Location: if you allow it or set a home location, we use it only to show local weather and adjust pace guidance. It is sent to Apple’s weather service to get the forecast, without your name or account details.
  • Subscription status: when you subscribe, Apple processes the payment and tells us whether your subscription is active, its plan, and its dates. We never receive your payment card details.
  • Notification token: if you turn on notifications, a device token so Apple can deliver them. Notifications never contain your health numbers or coaching text.
  • Mac updates & beta list: if you sign up on our website, we store your email, name, and, if you opt in to the beta, the devices you chose, solely to tell you when the Mac app is available and to send TestFlight invitations. TestFlight itself is run by Apple.
  • Free-month eligibility: when an account is deleted we keep only a one-way, keyed hash of its email address, so a returning email is not given a second free month. The hash cannot be turned back into the address and is used for nothing else.
  • Operational data: minimal logs needed to run and secure the service. We do not log your personal activity values.

How we use your information

  • To generate and adapt your training plans and coaching.
  • To provide safety screening before activating a plan.
  • To send you plan updates, coaching notifications, and (if you opt in) Mac launch and beta emails.
  • To operate, secure, and improve the service.

We do not use your data for advertising, profiling, or sale, and we do not view your personal health data. Our team can see account and usage information, such as your subscription status and how often coaching features are used, in order to run and support the service, but not your workouts or health metrics.

AI processing

Coaching plans are generated using large language models. Depending on the service configuration, prompts may be processed by a hosted provider (for example Anthropic, OpenAI, Google, xAI, or OpenRouter) or a locally operated model. Requests can include workout and fitness metrics needed for coaching (such as pace, heart rate, sleep, and readiness) and free text you provide to your coach, including injury notes. Login credentials are not used as coaching inputs. Selected free-text fields are checked for email addresses, phone numbers, and URLs and those patterns are redacted where detected; this does not guarantee that all identifying details are removed. When a hosted provider is used, it receives the prompt to generate coaching. Its retention and model-training practices depend on the selected provider’s applicable terms and service configuration.

Activity data and medical disclaimer

BORGCoach provides fitness coaching, not medical advice. It asks only for training-relevant context and does not request diagnoses, treatment records, or a comprehensive health history. Safety screening is based on exercise pre-participation principles and is not a clinical assessment. Always consult a qualified clinician about your health.

Sharing

We do not sell your personal data, we do not share it with advertisers or data brokers, and we do not use it for advertising or profiling. BORGCoach is funded solely by subscriptions paid by its users. There are no public profiles, feeds, or leaderboards.

We share data only with the services needed to run BORGCoach, and where required by law:

  • AI providers, as described above, to generate your coaching.
  • Apple, for push notifications, App Store subscriptions, Sign in with Apple, and the weather for your location.
  • Garmin, only when you connect your account: we use your credentials to sync your data, and send structured workouts to your watch only when you ask.
  • BORGPost Email services, a BORGcube Systems subsidiary operating on BORGcube’s internal mail server, for account messages such as password resets.

Retention & deletion

We keep your account data while your account is active. You can delete your account from within the app. Account deletion is a hard purge of account-derived identifiers and user-facing data, including linked-source credentials, coaching data, and account billing history; linked sources are disconnected as part of the purge. We do not retain your email address or any Garmin, Apple, or Fitbit account identifier. The only trace kept is the one-way keyed hash of the email address described above, used solely to decide free-month eligibility. Apple controls introductory-offer eligibility separately. A minimal system record may remain only to document that a purge occurred, without identifying the deleted account. Mac updates and beta list entries can be removed by emailing [email protected] or using the unsubscribe link.

Your rights

Subject to your jurisdiction, you may have rights to access, correct, export, or delete your data, and to object to certain processing. Contact [email protected] to exercise them.

Security

Connections are encrypted in transit (HTTPS). Passwords are hashed with Argon2id, source credentials and session material are encrypted with Fernet, every query is scoped to your account (multi-tenant isolation), and the platform can be self-hosted on infrastructure you control.

Children

BORGCoach is not directed to children under 13. We do not knowingly collect their data.

Changes

We will post updates here and, for material changes, notify you in-app or by email.

← Back to BORGCoach