Last updated: 20 October 2026
The short version: We collect the fitness, schedule, and account data you give us in order to build and adapt your training plan. We don't sell your data. It's shared with the specific third-party services described below (e.g. Strava, if you connect it, and the AI model that powers the coach chat) only as needed to run the Service. You can ask us to delete your data at any time.
This Privacy Policy explains how Tri Lab ("we", "us") collects, uses, and protects information when you use our triathlon training app (the "Service"). It should be read alongside our Terms of Service.
Name, email address, and a securely hashed password (we never store your password in plain text).
| Category | Examples |
|---|---|
| Profile | Age, weight, gender, race distance/date/goal |
| Performance | Swim pace, bike FTP/40km time, run time, best efforts |
| Schedule preferences | Training days, weekly hours, rest day, equipment (turbo trainer, open water access) |
| Workout history | Planned and completed sessions, distance, duration, power, perceived effort, notes |
| Coach chat | Messages you send to the AI coach and its replies |
If you choose to connect Strava, we store an access/refresh token so we can read your activity data (to match logged workouts and estimate fitness) and, if enabled, receive real-time activity updates via webhook. We do not receive your Strava password. You can disconnect Strava at any time from Connected Apps in your profile.
If you join our launch list on jointrilab.com, we store your email address, and optionally your first name, the race distance you're training for and the device you'll use, plus which link brought you to the page. You don't need an account for this. We use it only to email you when Tri Lab launches, with your free month of Pro and occasional launch news, and only because you ticked the box asking us to.
Your session is authenticated using a token stored in your browser's local storage. We don't use third-party advertising trackers.
We don't sell your personal data. We share limited data with the following categories of service providers, only as needed to operate Tri Lab:
| Service | Purpose | What's shared |
|---|---|---|
| Anthropic (Claude) | Powers the in-app AI coach | Your training context and chat messages, sent per-request to generate a reply |
| Strava | Activity sync (optional, only if you connect it) | Your Strava access token; we read your activity data from Strava |
| Resend | Email delivery | Your email address, to send account emails (such as password resets) and, if you joined the launch list, launch emails |
| Stripe | Payments for subscriptions bought on the website | Your name, email address and payment details (which go straight to Stripe — we never see your card number) |
| Apple | Payments for subscriptions bought in the iPhone app | Apple handles the payment and tells us which plan you're on; we don't receive your payment details |
We may also disclose information if required by law, or to protect the rights, safety, or property of Tri Lab or our users.
Your data is stored on our servers and retained for as long as your account is active. Passwords are hashed, never stored in plain text. Password-reset links expire after one hour. While we take reasonable technical and organisational measures to protect your data, no system is perfectly secure, and we can't guarantee absolute security.
We keep launch-list details until shortly after launch, or until you unsubscribe or ask us to remove them, whichever comes first. We keep your account and training data for as long as your account exists, so your plan and history remain available to you. If you delete your account, we delete your personal data within a reasonable period, except where we're required to retain it for legal or security reasons.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Most of your training data can already be viewed and edited directly in the app. For anything else — including a full account deletion — email hughes.alex@hotmail.co.uk and we'll action it promptly.
We use browser local storage (not third-party tracking cookies) to keep you signed in and to remember a few UI preferences on your device. This data stays in your browser and isn't accessible to other sites.
Tri Lab isn't intended for anyone under 16. We don't knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we'll remove it.
Some of our service providers (including our AI and email providers) may process data outside your home country, including in the United States. Where this happens, we rely on appropriate safeguards required by applicable data protection law.
We may update this Privacy Policy from time to time. If we make material changes, we'll take reasonable steps to notify you, such as a notice in the app.
Questions, requests, or concerns about your data? Email hughes.alex@hotmail.co.uk.