Privacy Policy

1. Data controller

77OS S.R.L., Via Andrea Solari 11, 20144 Milano (MI), Italia, VAT no. 11689230966. For any privacy request write to 77ossrl@legalmail.it.

2. Data we collect

Account data: name, email address and password (stored only in encrypted form) or, if you sign in with Google, the name, email and profile picture provided by Google.

Training data you enter: goals, races, weekly availability, level, measurements and thresholds (for example weight, heart rate, FTP, pace), and any injuries or limitations you choose to share.

Data imported from Intervals.icu, only if you connect it: completed activities (duration, distance, pace, power, heart rate, load) coming from Garmin, Strava or other devices linked to Intervals. We store your Intervals API key to read activities and, if you allow it, to send planned workouts to your watch.

Minimal technical data: access logs, IP address and browser information, used for security and to operate the service.

We do not collect payment data: the service is free during the alpha phase (until 31 December 2026).

3. Purposes and legal basis

Providing the service and building and adapting your training plan (performance of a contract, Art. 6(1)(b) GDPR).

Security, abuse prevention and technical maintenance (legitimate interest, Art. 6(1)(f)).

Service communications, for example plan notices or password recovery (performance of a contract).

Health or fitness-related data, if you enter it: processed only to build your plan, on the basis of your explicit consent (Art. 9(2)(a)), which you can withdraw at any time by deleting the data or your account.

4. Sign in with Google

If you choose “Sign in with Google” we receive from your Google account only your name, email address and profile picture, to create and recognise your account. We do not access Gmail, Drive, Calendar or any other Google data.

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising and not shared with third parties except as needed to operate the service.

5. Artificial intelligence

Plans and texts are generated with AI models (Anthropic, Claude). To generate them we send the provider the information needed about your profile and training history. Under the provider's API terms, this data is not used to train its models. Generated content may contain errors: see the Terms of Service.

6. Who we share data with (processors)

Supabase (database and authentication), Vercel (hosting), Anthropic (plan generation), Intervals.icu (only if you connect it, on your instruction), Google (sign-in only). To receive internal alerts about new sign-ups we may use Telegram or email: in that case the new user's name and email are sent to the controller.

We do not sell your data and do not use it for advertising. Some providers are outside the European Economic Area (for example in the United States): transfers rely on the safeguards required by the GDPR (standard contractual clauses or an adequacy decision).

7. Retention

We keep data while your account is active. When you delete your account we erase or anonymise your data within 30 days, unless the law requires otherwise. You can disconnect Intervals at any time and revoke access from your Intervals or Google account settings.

8. Your rights

You may request access, rectification, erasure, restriction, portability and object to processing by writing to 77ossrl@legalmail.it. You also have the right to lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. Cookies

We use only technical cookies needed for sign-in and the session. We use no profiling cookies and no advertising.

10. Children

The service is intended for people aged 16 or over.

11. Changes

If we change this policy we will publish the new version on this page and update the date at the top.