This Privacy Policy explains how Torque Lab (“Operator,” “we,” “us”) collects, uses, and shares information when you use the Service. We designed Torque Lab as a private training tool: there is no social feed and we do not sell your personal information.
1. Information we collect
Account
- Email address, authentication identifiers, and sign-in method (e.g. password, magic link, Google).
- Membership request details (name, email) if you ask for access.
Athlete profile (you provide)
- Display name, age, body weight, experience level.
- Equipment, goals, preferred training days, free-text notes.
- Injuries and limitations you type in. This is athlete-reported health-related information, not a medical record we create. Do not submit another person’s health data.
Training data
- Generated plans and workouts.
- Logs (sets, loads, duration, distance, RPE, energy, mood, notes).
Billing
- Subscription status and Stripe customer/subscription IDs. Card numbers are handled by Stripe, not stored on our servers.
Technical and product analytics
- Device/browser data, IP address, approximate location derived from IP, crash reports (e.g. Sentry), and product events (e.g. PostHog) such as finishing a profile, generating a plan, or logging a session.
- Cookies and similar storage needed to keep you signed in.
2. How we use information
- To operate, secure, and improve the Service.
- To generate and evolve training plans from your profile and logs.
- To enforce generation limits, trials, and subscriptions.
- To communicate about access, billing, and support.
- To diagnose errors and understand funnel drop-off (request → profile → generate → log → evolve).
- To comply with law and protect rights and safety.
We send profile and performance summaries to third-party AI providers (currently OpenAI) solely to generate your plan. Do not put names of other people or unnecessary identifiers in notes.
3. How we share information
We share information with processors who help us run the Service, including:
- Supabase (database, authentication)
- Vercel or similar hosts (application hosting)
- OpenAI (plan generation)
- Stripe (payments)
- Resend or similar (transactional email)
- Sentry (errors) and PostHog (product analytics)
We do not sell your personal information. We do not use your training data to train public social features. We may disclose information if required by law, to prevent harm, or in a merger or sale of the operation, subject to this Policy.
4. Retention
We keep account and training data while your account is open. After deletion, we remove or de-identify personal data from production systems within a reasonable period, except where we must retain records for billing, security, dispute, or legal purposes. Backups may persist for a limited time before expiration.
5. Your choices
- Update your profile in the app at any time.
- Export a copy of your profile, plans, workouts, and logs from Profile.
- Delete your account from Profile. This signs you out and removes your athlete data from the live database (subject to Section 4).
- Cancel a subscription in the billing portal. Cancellation does not automatically delete data.
- Email torquelabhelp@gmail.com for access, correction, or deletion requests.
6. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
7. International users
The Service may be hosted in the United States. If you use it from elsewhere, you consent to transfer of your information to the U.S. and other locations where our processors operate.
If you are in the EEA/UK, our legal bases include contract (providing the Service), legitimate interests (security, product improvement, fraud prevention), and consent where required (certain analytics). You may have rights to access, rectify, erase, restrict, port, or object, and to lodge a complaint with a supervisory authority.
If you are a California resident, we do not sell or share personal information as those terms are defined in the CCPA/CPRA. You may request know/delete/correct via the support email above.
8. Security
We use industry-standard safeguards including encrypted transport and row-level access controls so users cannot read one another’s data. No method of transmission or storage is 100% secure.
9. Changes
We may update this Policy. The “Last updated” date will change. Material changes will be indicated in the app or by email where appropriate. Continued use after the update means you accept the revised Policy.
10. Contact
Privacy requests: torquelabhelp@gmail.com