Privacy policy

Information you provide to us

When you create an account, fill in your profile, or contact us, we collect the information you choose to give us. Depending on how you use the Services this may include:

• Identity and contact details: name, display name, email address, and the public profile handle you pick.
• Sign-in identifiers from Google or Apple when you use them to sign in. We never receive your Google or Apple password.
• Athlete profile: sex, date of birth or age, height, weight, functional threshold power (FTP), heart-rate and power zones, timezone, preferred units, riding goals, motivations, and the answers you give during onboarding.
• Training plan inputs: the races and events you add to your calendar, your availability, planned workouts, check-ins, and feedback you leave on rides or on coaching output.
• Messages you send to the AI coach and, if you work with a human coach on le domestique, messages and notes exchanged through that relationship.
• Health context you choose to share with the coach (for example an injury, illness, or medication that affects training). This is collected only if you turn on the separate health-context consent described in section 2.
• Early-access requests from our marketing site: name, email, phone number, which bike computer you ride with, and whether you own a power meter or heart-rate monitor.
• Support requests and any other correspondence with us.
• Records of the consents and acknowledgments you give in the product (for example AI coaching, community heat map contribution, and the route-safety acknowledgment), with the time and wording version you accepted.

All personal information you provide must be true, complete, and accurate, and you should tell us if it changes.

Information from devices and platforms you connect

le domestique works by importing your training and recovery data from the services you choose to connect. Connecting is optional and happens through each provider's own authorization flow; we receive an access token, never your password. Depending on the provider and the permissions you grant, we may receive:

• Activity data from Garmin Connect, Strava, Wahoo, Hammerhead, intervals.icu, WHOOP, and Apple Health: completed and planned workouts and their recorded files, including start time, duration, distance, GPS route and elevation, speed, power, heart rate, cadence, temperature, laps, device information, and metrics the provider derives from them.
• Sleep, recovery, and wellness data from WHOOP, Oura, Garmin, and Apple Health: sleep stages and duration, resting heart rate, heart-rate variability (HRV), respiratory rate, recovery or readiness scores, strain, body temperature deviation, and body measurements such as weight.
• Account identifiers that the provider uses to identify you, so we can link their account to yours and receive updates when you record a new activity.

We request only the permissions each integration needs. Section 13 describes provider-specific commitments, including those we make to Garmin, Strava, and Apple.

Files you upload

You can import GPX or FIT files directly. We process them the same way as data from a connected provider and keep the original file so your history can be reprocessed when our analytics improve.

Information collected automatically

When you use the Services we automatically collect some technical information: IP address, browser and device type, operating system, language, the pages and features you use, timestamps, and error reports when something breaks. This is needed to keep the Services secure and working and to understand which features matter. We use it in aggregate and do not use it to build advertising profiles.

To find and fix problems, the app sends error reports to LaunchDarkly, our error monitoring provider, when something breaks: what failed, where in the code, the page you were on, your browser and device, and your account ID. With some sessions it also records a session replay: the layout of the screens, where you tapped and scrolled, and how you moved between pages. Every word, number, input field, and image is replaced with random characters on your device before anything is sent, and maps are not recorded at all, so replays never contain your training, health, or location data, your messages to the coach, or anything you type. We use error reports and replays only to diagnose and fix problems, never for advertising or to profile you.

In the iOS app, and only with your permission, we may also access:

• Location. The route builder can use your current location to pick a start point for a suggested ride. Your position is used for that request and is not tracked in the background. Ride routes themselves come from your recorded activities, not from the app's location permission.
• Apple Health. If you connect Apple Health, we read the workout and health categories you approve. See section 13.
• Push notifications. We store a device token so we can notify you when an analysis is ready or a coach has left a comment. You can turn notifications off in your device settings or in your profile.

Payment information

Subscriptions are billed by Stripe. Your card details go directly to Stripe and never touch our servers. We receive your subscription status, plan, trial and renewal dates, and a Stripe customer identifier so we can show you what is on file and manage your access.

Environmental data we look up

To put a ride in context we may look up historical weather (temperature, wind, precipitation) for the time and place you rode using a third-party weather service, and resolve place names for route start points using a geocoding service. These lookups send approximate coordinates and a time, never your identity.

Sensitive information

Much of what makes le domestique useful is sensitive by nature. Physiological data such as heart rate, HRV, sleep, and recovery is health data. GPS traces are precise geolocation. Health context you type to the coach may reveal medical conditions. We process this information only to provide the Services you have asked for, with the consents described in section 2, and we never sell it or use it for advertising.

We process your personal information to:

• Create and secure your account and let you sign in.
• Import activities and wellness data from connected providers and files, deduplicate them across providers, and normalize them into your training history.
• Compute training analytics: power and heart-rate curves, training load and form, personal records, effort detection, segment matching, sleep and recovery trends, fueling estimates, and the day-to-day metrics shown throughout the product.
• Generate AI coaching output you request, as described below.
• Suggest and build routes, match routes to planned workouts, and export routes or workouts to a connected device when you ask us to.
• Show your personal ride heat map, and, unless you turn it off, include your rides in the community heat map described below.
• Operate public profiles, follows, and coach–athlete relationships that you set up.
• Send transactional email and push notifications, such as a post-ride analysis or a coach comment, according to your notification preferences.
• Process subscriptions, trials, and payments through Stripe.
• Respond to support requests and early-access enquiries.
• Monitor for errors, abuse, and security incidents, and debug problems.
• Understand how features are used, in aggregate, so we can improve them.
• Comply with legal obligations and enforce our Terms.

AI coaching

le domestique uses a large language model that we host ourselves, on servers we control, to write post-ride analyses, answer questions in coach chat, write your daily and weekly summaries, propose training-plan changes, and keep a short coaching journal about your training. AI coaching is opt-in; you turn it on during onboarding or in your profile, and you can turn it off at any time. When it is on:

• The model is used when you open a ride's insights, ask the coach a question, or when a new ride, your daily briefing, or your weekly recap is prepared for you.
• The model receives a bounded set of facts drawn from your training data (summaries, metrics, and the specific evidence the analysis needs), not your name or email. We do not send raw provider payloads or GPS coordinates to the model.
• Health context you have written to the coach is included only if you have separately granted the health-context consent. Without it, that context is stored but kept out of what the model sees.
• The model runs only on infrastructure we operate. Your data is not sent to, shared with, or processed by any external AI provider or third-party AI service, including data we receive from connected platforms such as Garmin Connect or Strava.
• Autonomous plan changes (letting the coach adjust upcoming workouts without asking first) are a separate switch that you control.

AI output, like everything else in the product, is information for you to consider, not medical or professional advice, and you decide what to do with it. See our Terms of Use for the limits of what it can do.

Community heat map

Your own heat map, showing where you have ridden, is private to you. Separately, your rides contribute to a community heat map that shows where le domestique athletes ride collectively. Contribution is on by default, and you can turn it off at any time in your profile. While it is on:

• Your rides are converted into a grid of cells roughly 100 meters across, recording only that a cell was ridden and how many times. Route lines, timestamps, speeds, and your identity are not part of the community layer.
• Nothing within about 300 meters of the start or end of a ride is included, so the area around your home, work, or car is never painted.
• A cell appears in the community heat map only when at least two different athletes have ridden it. Cells ridden by fewer athletes are left out entirely.
• Rides you have hidden or trimmed are excluded, and the aggregate is rebuilt regularly so those changes flow through.
• If you turn contribution off, your rides are dropped from the next rebuild and no longer influence the community layer.

The community heat map is visible to signed-in athletes. Because it is aggregated across many riders and stripped of anything that identifies a route or a person, we treat it as de-identified data and do not attempt to re-identify anyone from it.

Public profiles, follows, and human coaches

Your profile is private by default. If you make it public, other people can see the display name, photo, and training summaries you choose to show; you can change visibility at any time. If you accept a human coach on le domestique, that coach can see your activities, planned workouts, analyses, and training metrics so they can coach you. Coaches cannot see your billing details, notification preferences, connected-account credentials, consent settings, AI coach chat, or the coach's private memory about you, and cannot see combined daily rows that mix training load with sleep, HRV, and weight. You can end a coaching relationship at any time, which removes the coach's access.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the law requires us to explain the legal bases for processing your personal information:

• Performance of a contract. Creating your account, importing and analyzing your training data, billing, and delivering the features you use are necessary to provide the Services you signed up for.
• Consent. We rely on your explicit consent to process health data (heart rate, HRV, sleep, recovery, health context) and precise location, to use AI coaching, to include health context in AI requests, to contribute to the community heat map, to make your profile public, to share data with a human coach, and to send push notifications. You can withdraw any of these consents at any time from your profile or by contacting us, without affecting the lawfulness of processing before withdrawal.
• Legitimate interests. We process technical and usage information to secure the Services, prevent abuse, fix bugs, and understand in aggregate how features are used, where those interests are not overridden by your rights.
• Legal obligation. We may process information to comply with tax, accounting, and other legal requirements, or to respond to lawful requests.

We are the "controller" of the personal information described in this notice. Human coaches who use le domestique to coach their own athletes are independently responsible for how they use what they see.

Service providers

We use a small number of companies to run le domestique. Each processes personal information only on our instructions and under contracts that require them to protect it:

• Supabase (database, authentication, and private file storage) and Vercel (application hosting, background workflows, and scheduled jobs).
• A server hosting provider (the infrastructure on which we run our own AI model).
• Stripe (subscription billing and payments).
• Resend (transactional email delivery).
• Apple and Google (sign-in and push notification delivery on your device).
• Mapbox (map rendering and geocoding), openrouteservice and OpenStreetMap data (route directions and road data), and a weather data provider (historical conditions for your rides). Requests to these services carry coordinates, not your identity.
• LaunchDarkly (error monitoring and privacy-masked session replays, described in section 1, and feature settings that turn parts of the app on or off). It receives your account ID and technical detail about errors, never your training, health, or location data or your messages.
• Slack (internal alerts when an error occurs; alerts contain technical detail about the failure, not your training data).

Platforms you connect

When you connect a provider, data flows from that provider to us as described in section 1. Some integrations also let you send data back, for example exporting a planned route or workout to a Hammerhead or Garmin device. We only send data to a provider when you ask us to. Your use of each provider is governed by its own privacy policy.

TAP Coach (Mindset Intelligence)

If you choose to connect TAP Coach, you sign in to TAP Coach with your phone number and approve the connection on TAP Coach's own screen. Only then:

• To create or find your TAP Coach account and score your TAP fairly, we send TAP Coach your first and last name, your sex, your language and, if you have confirmed it with us, your email address.
• You answer the TAP's questions in our app; each answer goes to TAP Coach, which scores it. We never see or keep scores, only the trait levels and coaching guidance TAP Coach returns.
• Your coach uses those levels and that guidance to adapt how it coaches you. When you ask about the mental side of training, the coach may send TAP Coach your question and a short description of the situation (for example, an upcoming race and how many days away it is). It does not send your rides, health data or location.
• You can disconnect TAP Coach at any time from the Mindset Intelligence screen. We then delete the connection and the TAP results we stored. Your TAP Coach account and your TAP stay with TAP Coach under its own privacy policy; ask TAP Coach to delete them.

Other people, at your direction

Other users see what you choose to show them: a public profile, an accepted follow, a human coach you have added, or your anonymous contribution to the community heat map.

Business transfers

If TPrimmz, LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor this notice or give you notice and a choice.

Legal reasons

We may disclose information when we believe in good faith it is necessary to comply with law or legal process, protect the rights, property, or safety of you, us, or others, or investigate fraud or abuse.

What we do not do

We do not sell your personal information, we do not share it with advertisers or data brokers, and we do not use your training, health, or location data for advertising of any kind.

We use strictly necessary cookies and similar storage to keep you signed in and to protect your session, and browser storage that ties an error report or session replay to the session it came from (see section 1). We do not use third-party advertising cookies, and we do not allow third parties to track you across other sites through our Services. Blocking cookies in your browser will prevent you from signing in.

We keep your personal information for as long as you have an account so your training history remains available to you. Within that period:

• Raw activity files and provider payloads are kept for up to 730 days from receipt so we can reprocess your history when our analytics improve, then removed on a rolling basis. The normalized activity remains in your history.
• AI coach conversations, analyses, and the coaching journal are kept while your account is active so your coaching history stays consistent, and are removed when you delete your account.
• Email and notification delivery logs are kept for a limited period to diagnose delivery problems.
• Error reports and session replays are kept for a limited period to diagnose problems, then deleted.
• Early-access requests are kept until you create an account or ask us to remove them.

When you delete your account we remove your profile, activities, streams, analytics, analyses, conversations, plans, routes, connections, and consents from our active systems, cancel any active subscription, revoke provider tokens, and remove your rides from the next community heat map rebuild. Copies may persist in encrypted backups for a limited time before they are overwritten, and we may retain limited records where required for tax, accounting, fraud prevention, or legal compliance. Aggregated data that cannot identify you may be retained.

We have implemented technical and organizational measures appropriate to the sensitivity of the data we hold. Data is encrypted in transit. Every table that holds your training data is protected by row-level security so that only you (and, where you have set one up, a coach you have accepted) can read it. Provider access tokens are encrypted before storage and, together with raw webhook payloads, live in a schema that is not reachable from the browser. Service credentials are held server-side only. Webhooks from providers are verified before they are processed.

No method of transmission or storage is completely secure, and we cannot guarantee that unauthorized parties will never defeat our safeguards. Use a strong, unique credential for the account you sign in with, and tell us at privacy@ledomestique.cc if you suspect a problem.

le domestique is intended for people 18 years of age or older. We do not knowingly collect personal information from, or market to, anyone under 18. By using the Services you represent that you meet this requirement. If we learn we have collected information from someone under 18, we will delete the account and its data. If you believe that has happened, contact us at privacy@ledomestique.cc.

Most of what you might want to do is available directly in the product:

• Export your data. Your profile includes a download of your account and athlete data in a machine-readable format.
• Correct your data. Edit your profile, thresholds, and settings at any time. Trim or hide an activity if a recording is wrong.
• Delete your account. Permanently delete your account and all stored athlete data from your profile.
• Disconnect a provider. Stop syncing from any connected platform at any time from Connections.
• Manage consents. Turn AI coaching, health-context sharing, community heat map contribution, and autonomous plan changes on or off from your profile.
• Control visibility. Make your profile private, unfollow other athletes, or end a coaching relationship.
• Control communications. Change email and push preferences in your profile. We will still send messages necessary to run your account.

Depending on where you live, you may also have statutory rights to access, correct, delete, restrict, or object to processing of your personal information, to data portability, and to withdraw consent. To exercise a right you cannot exercise in the product, email privacy@ledomestique.cc. We will verify your identity, usually by confirming the email address on your account, and respond within the time the applicable law requires (generally 30 to 45 days). We will not discriminate against you for exercising your rights.

If you are in the EEA, UK, or Switzerland and believe we are processing your information unlawfully, you have the right to lodge a complaint with your local data protection authority.

Some browsers offer a Do-Not-Track (DNT) signal. Because no uniform standard for honoring DNT has been adopted, we do not respond to DNT signals. We do not track you across third-party sites in any case. Where a state law treats a Global Privacy Control signal as a valid opt-out of sale or sharing, we honor it; because we do not sell or share personal information for advertising, the signal does not change how we process your data.

This section applies if you are a resident of a US state with a comprehensive consumer privacy law, including California (CCPA/CPRA), Texas (TDPSA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Oregon, Utah, and others. We honor the rights in this section for all US residents regardless of state.

Categories of personal information we collect

In the preceding twelve months we have collected the following categories:

We collect these categories from you, from your devices, and from the platforms you connect, for the purposes described in section 2. We disclose them to the service providers listed in section 4 for business purposes only.

Sale and sharing

We have not sold or shared personal information for cross-context behavioral advertising in the preceding twelve months, and we do not sell or share it. We have no actual knowledge of selling or sharing the personal information of anyone under 16. We use sensitive personal information only to provide the Services you request and for the purposes permitted by law without a right to limit; we do not use it to infer characteristics about you for unrelated purposes.

Your rights

• To know what personal information we collect, use, and disclose, and to access it in a portable format.
• To correct inaccurate personal information.
• To delete your personal information, subject to legal exceptions.
• To opt out of sale, sharing, targeted advertising, and profiling that produces legal or similarly significant effects. We do none of these.
• To limit use of sensitive personal information to what is necessary to provide the Services. We already do this.
• Not to be discriminated against for exercising any of these rights.

You can exercise most of these rights in your profile, or by emailing privacy@ledomestique.cc. We verify requests by matching them against the email address on your account and, where needed, by asking you to confirm from within the signed-in product. An authorized agent may make a request on your behalf with proof of authorization. We respond within 45 days and may extend once by a further 45 days with notice. If we decline a request, you may appeal by replying to our decision; we will answer the appeal within 60 days and, if you are still unsatisfied, you may contact your state attorney general.

California "Shine the Light"

California residents may request once a year information about any personal information we disclosed to third parties for their direct marketing purposes. We do not make such disclosures.

TPrimmz, LLC is based in the United States and our service providers process data primarily in the United States. If you use the Services from elsewhere, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as standard contractual clauses with our service providers.

The commitments in this section apply to every platform you connect, and where a platform requires additional commitments they are set out below. To the extent this section conflicts with another section with respect to platform-sourced data, this section controls.

• We receive platform data only after you authorize the connection through the platform's own flow, and we request only the scopes each integration needs.
• We use platform data solely to provide and improve the Services for you: to show your history, compute analytics, generate coaching you have asked for, suggest routes, and, only if you opt in, contribute anonymized cells to the community heat map.
• We do not sell platform data, do not use it for advertising, and do not transfer it to third parties for their independent use. Service providers act only on our behalf.
• You can disconnect a platform at any time from Connections, which stops further syncing and revokes our token. When you disconnect or delete your account, we delete the data sourced from that platform, except where the law requires us to keep it.
• Your use of each platform is also governed by that platform's own terms and privacy policy.

Garmin Connect

This section describes how we collect, use, process, and store data from Garmin Connect.

• Collection. You connect Garmin by signing in on Garmin's own authorization screen and choosing what to share. Garmin then delivers data to servers we control (our application hosted on Vercel) only for the categories you switched on: activity summaries and the original activity files recorded by your device (Activity API), daily health summaries such as resting heart rate and stress, and sleep summaries (Health API). If you switch on historical data export, Garmin also delivers your earlier activities. We never ask Garmin for your Garmin password, and Garmin data is delivered only to endpoints we own.
• Use. Garmin data is used solely to provide the Services to you: to show your rides, runs, sleep, and recovery in your own account; to compute your training load, fitness, and zones; to plan and adjust your training; to suggest routes; and, only if AI coaching is on, to generate the coaching described in section 2. It is never sold, never used for advertising, and never shared with other users beyond what you choose to make public on your profile.
• Processing by third parties. Garmin data is stored and processed only by the service providers that run le domestique on our instructions, listed in section 4: Supabase for the database and file storage, Vercel for hosting and background processing, and the server hosting provider on which we run our own AI model. Garmin data is never sent to, shared with, or processed by any external AI provider or third-party AI service; the AI coaching described in section 2 is opt-in and runs only on infrastructure we operate, on bounded facts derived from your data (never the raw files, GPS coordinates, or your identity). No other third party receives Garmin data: our error monitoring provider never does, because session replays scramble every value on your device before anything is sent and do not record maps.
• Storage and retention. Garmin data is stored in our database and private file storage in the United States, encrypted in transit and at rest, and kept while your Garmin connection and account are active so your history stays complete. When you disconnect Garmin in Connections, or revoke le domestique in your Garmin Connect account settings, we stop receiving data and delete the data sourced from Garmin. When you delete your account, all of it is deleted. We honor deregistration and permission-change notices that Garmin sends us, and we may keep a minimal record of a deletion where the law requires it.

Garmin's own privacy policy is at garmin.com/en-US/privacy/connect. Garmin, the Garmin logo, and Garmin Connect are trademarks of Garmin Ltd. or its subsidiaries. le domestique is not affiliated with, sponsored by, or endorsed by Garmin.

Strava

If you connect Strava, we receive the activities you make available through Strava's API. We use Strava data only within your own le domestique account, do not display it to other users beyond what you choose to make public on your profile, do not use it to train AI models, and do not use it for the community heat map without your separate opt-in. Strava's privacy policy is at strava.com/legal/privacy.

Apple Health

If you connect Apple Health in the iOS app, we read only the categories you approve in the Health permissions prompt. Apple Health data is used solely to provide the Services to you. It is never used for advertising, marketing, or data mining, is never sold, and is never disclosed to third parties except service providers acting on our behalf or as you direct. You can revoke access at any time in the Health app.

WHOOP, Oura, Wahoo, Hammerhead, and intervals.icu

The same commitments apply. WHOOP and Oura supply recovery and sleep data; Wahoo and Hammerhead supply activities and, when you ask, receive routes and workouts you export. intervals.icu supplies the activities you have synced to it, as their original files, except activities it received from Strava, which we do not read from intervals.icu. Each is a trademark of its respective owner, and none of them endorses le domestique.

We will update this notice as the product and the law change. The revised version will be indicated by an updated date at the top and takes effect when posted. If we make material changes, in particular any change to how we use health or location data, we will notify you in the product or by email before the change takes effect.

Questions, requests, or complaints about privacy can be sent to privacy@ledomestique.cc. For general support, use support@ledomestique.cc.

TPrimmz, LLC
doing business as le domestique
Austin, Texas, United States

To review, update, export, or delete the data we hold about you, open your profile in the product or visit ledomestique.cc/profile.