Privacy Policy

Last updated September 1, 2026

WorkRate (“WorkRate”, “we”, “us”) makes the WorkRate iPhone app and the website at getworkrate.com. This policy explains what we collect, why, and the choices you have. The short version: we collect what the app needs to score your readiness and coach you, we do not sell it, and we do not use it for advertising.

What we collect

Account

Your email address and a password. Passwords are stored only as a salted bcrypt hash; we cannot read them.

Athlete profile

What you tell us during onboarding: first name, primary goal, training days per week, experience level and preferred units.

Workouts you record

When you start a run in WorkRate, the app records your location (GPS route points with timestamps), from which our servers compute distance, pace, splits and elevation. Location is only collected during a run you started, including in the background if you grant “Always” permission so tracking continues while your phone is locked. The app never collects location at any other time.

Apple Health data

With your permission, the app reads from Apple Health: workouts and their routes (including those recorded by Garmin, Apple Watch and other apps), heart rate during workouts, and your daily resting heart rate, heart-rate variability (HRV) and VO2max. These are used solely to show your training history and to compute your daily WorkRate Score and coaching targets. In line with Apple’s HealthKit rules, health data is never used for advertising or marketing, never sold, and never disclosed to third parties except as needed to provide the service described here. The app does not write to Apple Health.

Garmin watch

If you install the WorkRate data field on a Garmin watch, the app sends today’s workout targets to the watch and receives a summary of the completed workout (duration, distance, average heart rate and pace, time in the target zone, heart-rate drift). This travels through the Garmin Connect app on your phone; we never access your Garmin account or Garmin’s servers.

Waitlist and support

If you join the waitlist on our website we store your email address and where you signed up from. If you email us, we keep the correspondence to help you.

Technical data

Our servers keep standard request logs (IP address, endpoint, timestamp, errors) for a short period to run and secure the service. The app contains no advertising SDKs and no third-party analytics or tracking. The website sets no tracking cookies.

How we use it

• To record, import and display your workouts and compute metrics from them.
• To compute your daily WorkRate Score from recovery, training load and consistency.
• To generate coaching: post-workout analysis, next-workout plans, and program schedules.
• To deliver targets to your watch and read back what you did.
• To run subscriptions, answer support requests, and keep the service secure and reliable.
• To email you about the beta and launch if you joined the waitlist. You can unsubscribe at any time.

AI coaching and what the model sees

Coaching text is generated by a large language model provided by Anthropic. Before anything is sent, our servers reduce your data to structured training metrics: your first name, goal, experience level and training days, and per-workout aggregates such as sport, date, duration, distance, average pace, average heart rate and elevation gain, plus summary trends. Raw GPS routes, your email address and your account identifiers are never sent to the model. Anthropic processes this data to return the coaching response and, under its API terms, does not use it to train its models. When the model is unavailable, a built-in rule-based coach answers instead and nothing leaves our servers.

Who we share data with

We share personal data only with service providers that process it on our behalf:

• Railway — hosting for our API and database (United States).
• Anthropic — AI coaching, as described above.
• Apple — App Store distribution and subscription billing. We receive subscription status, never your payment details.

We do not sell personal data, we do not share it with advertisers or data brokers, and we disclose it beyond the above only if the law requires it or to protect the rights and safety of our users.

Retention

Your account, profile, workouts, health-derived data and coaching insights are kept while your account exists and deleted when you delete it. Waitlist emails are kept until launch communications are done or you ask us to remove yours. Server logs are retained for a short, rolling window.

Your choices and rights

• Revoke Apple Health or location access at any time in iOS Settings; the app keeps working with less data.
• Request a copy of your data, a correction, or deletion of your account and everything tied to it by emailing support@getworkrate.com. We complete deletion requests within 30 days.
• Depending on where you live (for example the EU/UK or California) you may have additional rights, including to object to or restrict processing and to lodge a complaint with a supervisory authority. Email us and we will help.

Security

Data travels over TLS, passwords are hashed, access to production systems is limited to the people who run the service, and the API authenticates every request. No system is perfectly secure, so please use a strong, unique password.

Children

WorkRate is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Not medical advice

The WorkRate Score and coaching are training guidance derived from your data. They are not medical advice and do not diagnose or treat any condition. See the Terms of Use.

Changes

We will post any changes here and update the date at the top. If a change materially affects how we handle your data, we will tell you in the app or by email first.

Contact

Questions or requests: support@getworkrate.com.