Privacy Policy
Training Stack — Run & Strength Tracker
TL;DR — The short version
- Your data stays on your device unless you turn on Cloud Sync, which is off by default
- We never sell your data and never show ads
- Your calendar, GPS routes, and location never reach our servers
- You can delete your cloud data and account at any time
- We collect basic usage analytics — never the contents of your health data
Overview
Training Stack ("the App") helps you track running and strength workouts, follow training plans, and review your progress. It includes the iOS and watchOS app, an optional web dashboard at trainingstack.ravenhoward.org, and an optional connector that lets an AI assistant you choose work with your training data. Training Stack is developed and operated by Raven Howard ("we," "us").
This policy explains what data the App uses, where it goes, and how to control it.
Data on Your Device
Health & Fitness Data (Apple HealthKit)
With your permission, the App reads from Apple Health:
- Workouts, including distance, duration, pace, heart rate, cadence, elevation, and route
- Heart rate, resting heart rate, heart rate variability, and VO2 max
- Steps, active energy, and sleep
- Age, sex, height, and weight
It writes your strength workouts back to Apple Health. This data is used to show your stats, track progress, and plan training.
Location
With your permission, the App uses your location to show local weather and running conditions. It also uses the starting point of a workout route to look up the weather during that workout. These lookups go to Apple's weather service. Your location is never sent to our servers.
Calendar
With your permission, the App reads your calendar events and shows them in your daily timeline so you can plan around your schedule. Calendar data stays on your device.
Photos
The App asks for permission to save the share-card images you create to your photo library. It does not read your photos.
Data That Leaves Your Device
By default, your training data is stored only on your device. It leaves your device only in the cases below, most of which you have to turn on.
iCloud (optional)
If you use iCloud, App data syncs between your own devices through Apple iCloud, under Apple's privacy policy.
Cloud Sync (optional — off by default)
If you sign in and turn on Cloud Sync, the App sends the following to our backend, hosted on Cloudflare:
- Recent workouts: type, date, distance, duration, pace, heart rate, calories, and weather
- Strength sessions: exercises, sets, reps, and weights
- A health summary: age, sex, height, weight, VO2 max, resting heart rate, HRV, average sleep and steps, and running volume
- Your training plans, journal entries, and coaching notes
GPS routes, precise location, and calendar data are never uploaded. This data powers the web dashboard and any AI assistant you connect.
Your Account (Sign in with Apple)
Cloud features require signing in with Apple. We receive and store your name and email address — or an Apple private relay address if you choose to hide your email — plus an account identifier. When you create an account we send you one welcome email through our email provider (not sent to private relay addresses).
AI Assistants (optional)
If you connect an AI assistant — such as Claude, ChatGPT, or Muse — you authorize it to read and update your synced training data on your behalf. The assistant's provider processes that data under its own privacy policy. You can disconnect an assistant at any time.
Push Notifications (optional)
If you allow notifications, the App registers a device token with our backend so we can send training reminders and updates.
Strava (optional)
If you connect Strava, you sign in on Strava's site, and the App uploads only the images you choose to your Strava activities. Strava handles that data under its own privacy policy.
Purchases
Subscriptions and purchases are processed by Apple. We never receive your payment details — the App only checks with Apple whether you have an active subscription.
Sharing
When you share a workout card through the iOS share sheet, it goes wherever you send it.
Analytics
We use PostHog to understand how Training Stack is used so we can improve it:
- Our backend records basic usage events — for example, that a sync ran or which connector tool was used — linked to your account
- The web dashboard and this website record page views
- Analytics never include the contents of your workouts, health data, plans, or journal
- The iOS app itself does not include an analytics SDK
What We Don't Do
- We don't sell your data
- We don't share your data with advertisers or show ads
- We don't use HealthKit data for advertising or marketing
- We don't disclose HealthKit data to third parties except the AI assistants and services you choose to connect
Service Providers
- Apple — HealthKit, iCloud, Sign in with Apple, WeatherKit, MapKit, push notifications, and purchases
- Cloudflare — hosts the Cloud Sync backend and web dashboard
- PostHog — usage analytics
- Resend — sends the welcome email
- Open-Meteo — historical weather data (no personal data is sent)
- AI assistants and Strava — only if you connect them
Each provider handles data under its own privacy policy. See Apple's privacy policy.
Data Retention & Deletion
- Data on your device stays until you delete the App
- HealthKit data stays in Apple Health until you delete it there
- Cloud data stays until you delete it. Delete your account and all cloud data from the Account page of the web dashboard, or email us
- Deleting your account is permanent and immediately cuts off any connected AI assistant
Your Choices & Rights
- Access — see your data in the App and on the web dashboard
- Export — export your health profile as JSON from within the App
- Control — manage HealthKit permissions in Settings › Health › Data Access, and turn Cloud Sync off at any time
- Delete — delete your account and cloud data, or delete the App to remove local data
Depending on where you live, you may have additional rights over your personal data. Email us and we'll help.
Security
Cloud data is sent over encrypted connections and access requires your signed-in account. No system is perfectly secure, but we work to protect your data and limit what we collect to what the features need.
Children's Privacy
Training Stack is not intended for children under 13 and does not knowingly collect their data. If you believe a child has provided us data, email us and we'll delete it.
Changes to This Policy
We may update this policy. Changes will be reflected in the "Last updated" date above, and significant changes will be highlighted in the App or on this page before they take effect.
Contact Us
Questions about privacy or your data? Get in touch:
- Email: ravenhoward@gmail.com
See also the Terms of Service.
Effective as of September 19, 2026