Privacy Policy
Last updated: May 7, 2026
This Privacy Policy explains what data AskMyCoach collects, why, and how it is protected. We keep this short and plain.
1. What We Collect
| Data | Why |
|---|---|
| Name and email address | Account creation and communication |
| Password (hashed) | Authentication — never stored in plain text |
| Google account ID (if you use Google sign-in) | OAuth authentication |
| Intervals.icu API key (AES-GCM encrypted at rest) | Fetching your training data on request |
| MCP access tokens (AES-GCM encrypted at rest) | Granting AI assistants and coaches access to your data |
| IP address and user-agent | Session security and abuse prevention |
| Invite code used at sign-up | Access control auditing |
We do not collect payment information, location data, or any training data itself — your Intervals.icu data is fetched on demand and never stored in our database (except briefly in a short-lived cache to reduce API calls).
2. Intervals.icu Training Data
When an AI assistant uses your MCP URL, AskMyCoach retrieves data from Intervals.icu in real time using your encrypted API key. This data is passed directly to the AI assistant and is cached for up to 14 days to reduce repeat requests. The cache is stored in our database and associated only with your account. You can disconnect your Intervals.icu account at any time from the Dashboard, which immediately removes the stored API key.
3. Coach Access
When you invite a coach, a separate encrypted MCP token is generated for that coach. The coach can only access the tools you explicitly enable. You can revoke coach access at any time, which immediately invalidates their token. We store the coach's email address to identify the relationship.
4. How We Use Your Data
- To operate and secure your account.
- To provide the MCP integration with AI assistants.
- To send transactional emails (account creation, password reset, coach invitations) via Resend.
- We do not sell your data to third parties.
- We do not use your data to train AI models.
- We do not send marketing emails without your consent.
5. Third-Party Services
- Cloudflare — hosting, DDoS protection, bot mitigation (Turnstile). Your requests pass through Cloudflare's network.
- Resend — transactional email delivery. Your email address is shared with Resend only to send messages you trigger.
- Intervals.icu — your training data source. Subject to their own Privacy Policy.
- AI providers (Anthropic, OpenAI, etc.) — when you or your coach uses an MCP URL, data is sent to the AI provider you choose. AskMyCoach does not control how those providers handle that data.
6. Data Retention
- Account data is retained until you delete your account.
- Cached training data expires after 14 days automatically.
- Deleting your account permanently removes all stored data, including tokens, coach relationships, and cached data.
7. Security
Sensitive values (Intervals.icu API keys, MCP tokens) are encrypted with AES-GCM before being written to the database. Passwords are hashed using a strong algorithm and never stored in plain text. All traffic is served over HTTPS. Access tokens are scoped and can be regenerated or revoked at any time.
8. Your Rights
- Access: You can view your profile and connections from the Dashboard at any time.
- Deletion: Settings → Delete Account removes all your data immediately and permanently.
- Correction: You can update your name and email from Settings → Profile.
- Portability: Contact us to request a copy of the data we hold about you.
9. Cookies
AskMyCoach sets a single cookie:
| Name | Purpose | Duration |
|---|---|---|
| better-auth.session_token | Keeps you logged in between page loads. Strictly necessary for the Service to function. |
This is a strictly necessary cookie under GDPR and the ePrivacy Directive — it is required for authentication and cannot be disabled while using the Service. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
11. Changes to This Policy
We will update the "Last updated" date at the top of this page when changes are made. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact
Questions or requests about your data? Email us at sayhello@askmycoach.app.