Privacy Policy

1. The short version

Triple Peaks is a small, independent app built and run by one person. To coach you, the app sends your training and performance data to an AI provider, which generates your plans, analyses, and chat replies. Before we send it, we remove direct identifiers like your name and email, so the AI provider sees your training data and not who you are. We ask you to agree to this when you sign up. We don't sell your data, and we don't use it for advertising. The sections below fill in the details.

2. Who we are

Lukas Carullo
Switzerland
Email: triplepeaks@online.de

Triple Peaks is run by one person, not a company. For anything about your data, email the address above. This policy covers triplepeaks.coach, app.triplepeaks.coach, and our iOS and Android apps, and is written to follow the Swiss data protection act (revFADP) and the EU GDPR.

3. What we collect

• Account: your email and, optionally, your first name. You can sign up with your Apple ID, an email address, or Strava. When you sign in with Apple or Strava, we never receive your password for those.
• Training data: the activities and profile details you authorize from the sources you connect, such as Strava and Apple Health — things like duration, distance, pace, heart rate, GPS, power, cadence, and your training history. This is health-related data.
• What you tell the app: your goals, availability, feedback on workouts and races, and your messages to the AI coach.
• What the app creates: your training plans, analyses, and coach replies.
• Subscription status from the App Store or Google Play. We never see your card details.
• Basic technical data needed to run the app, such as device type, app version, and error reports.

4. Why we use it

We use your data to do the one thing the app is for: generate and adapt your training, analyze your workouts and races, and answer your coaching questions. We rely on:

• Your consent to process your training and health-related data, including sending it to the AI provider. You give this when you sign up, and you can withdraw it at any time by disconnecting Strava, turning a feature off, or deleting your account.
• Our agreement with you to actually provide the service you signed up for.
• Our legitimate interest in keeping the service secure and working.

We don't sell your data, and we don't use it for advertising.

5. AI coaching and your data

This is the core of how Triple Peaks works, so we want to be clear about it. To create your plans, analyses, and chat replies, we send your training and performance data to a third-party AI provider that runs a large language model.

Before we send anything, we remove direct identifiers such as your name and email address, so the AI provider receives your training data rather than your identity. We do not send your Strava password or login tokens, or your payment details.

The AI provider processes this data on our behalf to generate a response.

Plans and advice are generated by software and are suggestions only — not medical advice, and not a substitute for a doctor or a professional coach. You can ignore or change anything it suggests, turn off AI features, or delete your account at any time.

6. Who else is involved

As a one-person project, we rely on a few outside services to run Triple Peaks. We keep the list short and use only what we need:

• An AI provider — generates your plans, analyses, and chat replies (see section 5).
• A hosting provider — runs the app and stores your data.
• An email provider — sends account and notification emails.
• Strava and Apple Health — you connect these yourself to sign in (Strava) and import your activities. Strava's and Apple's own terms and privacy policies apply to those accounts.
• Apple and Google — distribute the app and handle subscriptions on their own account.

We're happy to tell you the specific provider behind any of these — just email us.

7. Where your data is processed

Your data is stored in Europe. Some of the providers above — for example the AI provider — may process data outside Switzerland and the EU, including in the United States. Where that happens, we rely on those providers' standard data-protection terms to keep your data protected.

8. How long we keep it

We keep your account and training data for as long as your account exists. When you delete your account, we delete your personal data from our systems, and it then clears from our backups over time. We may keep the minimum records we're legally required to, for example for tax purposes.

9. Your rights

You can ask us to show you your data, correct it, delete it, or send you a copy. You can object to or restrict some processing, and withdraw your consent at any time. Just email triplepeaks@online.de and we'll handle it as quickly as we reasonably can.

10. Security

We take reasonable care with your data: connections are encrypted in transit, access is limited to what's needed to run the app, and we use established providers for hosting and AI. No service can promise perfect security, but if something goes seriously wrong with your data, we'll let you and any required authority know.

11. Cookies, children, and changes

Cookies: this website uses no cookies, analytics, or advertising trackers. The app uses only what's needed to keep you signed in.

Children: Triple Peaks is meant for adults and isn't intended for anyone under 16.

Changes: if we change this policy, we'll update the date above and, for anything important, let you know in the app or by email.

12. Contact

Questions about your data? Email triplepeaks@online.de.