Privacy Policy

What we collect

• Account details — your email address and password (passwords are stored hashed by our authentication provider; we never see them in plain text).
• Training logs — sessions, runs, lifts (reps, weight, distance, pace, heart rate), RPE, and any notes you enter.
• Recovery & health metrics — data you provide such as HRV, resting heart rate, sleep, body battery, and body weight.
• Onboarding intake — your goals, race date, training history, available days, equipment, and any injuries or physical constraints you tell us about.
• Billing information — handled by Stripe; we store a customer/subscription reference and your plan status, not your full card number.
• Usage & device data — basic technical data (timezone, request logs) needed to run the service.

How we use it

• To build and adapt your personalized HYROX training plan.
• To generate AI coaching suggestions and weekly reviews based on the data you log.
• To operate your account, process your subscription, and provide support.
• To send you service messages and, if you opt in, training reminders.
• To keep the service secure and comply with our legal obligations.

Third parties we share with

We use a small set of processors to run Sigra. We share only what each needs to do its job:

• Supabase — database, authentication, and hosting of your account and training data.
• Stripe — subscription billing and payment processing.
• Anthropic — the AI model that powers coaching, weekly reviews, and plan generation. Relevant training/recovery context is sent to generate your responses.
• Notion — only if you explicitly connect a Notion workspace, so we can mirror your plan there.

We do not sell your personal data.

Your rights & account deletion

You can edit your training profile at any time from the app. You can permanently delete your account and all associated training data from Account; deletion also cancels any active subscription. Depending on your jurisdiction ([jurisdiction]) you may have additional rights to access, correct, export, or restrict processing of your data — contact [support email] to exercise them.

Data retention & security

We keep your data for as long as your account is active and delete it on request or on account deletion, except where we must retain records to meet legal or billing obligations. We rely on our processors’ industry-standard safeguards to protect your data, but no method of transmission or storage is perfectly secure.

Changes

We may update this policy from time to time. Material changes will be reflected by a new effective date at the top of this page.