Privacy Policy

1. Data we collect

• Account and profile information: email address, password credentials handled by our authentication provider, display name, and optional athlete profile details you enter (such as date of birth, sex, weight and sport settings).
• Training plans: seasons, goals and races, training blocks, weeks, weekly targets, workout templates and scheduled sessions.
• Completed activities: manually logged activities and activities imported from FIT files, including duration, distance, pace, heart rate, cadence, power, laps and device metadata contained in the file.
• Uploaded FIT files: the original file bytes are retained in private storage so activities can be re-processed later.
• Subjective feedback: RPE, feeling, fatigue, soreness and pain notes, motivation and free-text execution notes.
• Derived analytics: values computed from the above, such as Session-RPE training load, weekly volume and planned-versus-actual adherence.
• Technical logs generated by our infrastructure providers for security and reliability.

We do not collect data from third-party wearable platforms today. If Garmin integration is approved in the future, Garmin data would be retrieved only after you explicitly authorize the connection, and only the scopes you approve.

2. Why we process it

• To provide the service: store your plan, show your calendar, import your activities and compute your analytics.
• To keep an accurate training history, including versioned prescriptions and archived records.
• To secure accounts and prevent abuse.
• To respond to support requests you send us.

We do not use your data for advertising or profiling for marketing purposes, and we do not sell athlete data. If Garmin integration is approved, Garmin data would likewise never be sold or used for advertising.

3. Storage, isolation and security

Data is stored in a managed database. Every training table enforces row-level security, so a signed-in user can read and write only rows belonging to their own athlete record. Uploaded FIT files are kept in a private storage bucket, scoped per athlete, and are never publicly accessible; access is granted only through short-lived, owner-scoped signed URLs generated server-side.

Objective imported data (parsed activity results and laps) is written only by server-side code, not by the browser.

No system is perfectly secure, and we do not claim certification under any specific security standard.

4. Service providers

Momentum Trainer uses Lovable Cloud and its infrastructure providers for managed database, authentication, private object storage, application hosting and edge delivery. These providers process data on our behalf under their own terms.

5. Retention and deletion

Training records are retained for as long as your account exists, because training history is the core value of the product. Activities and sessions removed in the interface are archived rather than hard-deleted, so history stays consistent.

You can request complete deletion of your account and all associated data, including uploaded FIT files, by emailing navedror@pureflowisr.com. See the Data Deletion page for the full process.

6. Data export

You can view all of your data in the application. Your original uploaded FIT files remain available to you through your activity records. A one-click full-account export is not implemented yet; until it is, you can request a copy of your data by email and we will provide it in a machine-readable format.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent and stop using the service at any time. Contact navedror@pureflowisr.com and we will respond in Hebrew or English.

8. Future Garmin data

Garmin integration is planned and pending official approval. Momentum Trainer has no Garmin API access today, and this project is not affiliated with, certified by, partnered with or endorsed by Garmin. Activity data is currently added manually or by uploading a FIT file that you export yourself.

If and when integration is approved and you connect a Garmin account, you will be able to disconnect it from the settings screen. Disconnecting will revoke our access token, stop further synchronization, and delete the data retrieved from Garmin on request. Garmin data would never be sold, shared with advertisers, or used for any purpose other than showing and analysing your own training.

9. Children

The service is not intended for users under the age of 16.

10. Changes to this policy

We will update this page and its version number when the service changes. Material changes will be communicated by email to registered users.