Back to Home

Privacy Policy

Last updated: December 8, 2024

1. Introduction

Outside ("we," "our," or "us") is a personal project and is not a registered company or trademark. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at trainingoutside.com, mobile applications, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information as described in this policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you:

  • Create an Account: Email address, name, password (encrypted), and profile information
  • Set Up Your Athlete Profile: Primary sport, Functional Threshold Power (FTP), lactate threshold heart rate (LTHR), maximum heart rate, resting heart rate, weight, and training zones
  • Create Events: Event names, dates, locations, goals, and target performance metrics
  • Use Social Features: Display name, bio, avatar, location, comments, and activity captions
  • Log Nutrition: Meal information, dietary preferences, and nutrition goals
  • Track Readiness: Sleep quality, HRV scores, fatigue levels, stress levels, mood, and soreness data
  • Contact Support: Name, email address, and message content

2.2 Information from Third-Party Integrations

When you connect third-party accounts (such as Strava, Garmin, Wahoo, or Coros), we collect:

  • Account Information: Platform user ID, athlete name, email, profile picture, and location
  • Workout Data: Activity type, duration, distance, speed, heart rate, power, elevation, GPS coordinates, and timestamps
  • Performance Metrics: Normalized power, Training Stress Score (TSS), intensity factor, and variability index
  • Activity Streams: Time-series data including heart rate, power, cadence, altitude, and GPS tracks
  • Authentication Tokens: OAuth access and refresh tokens (stored securely and encrypted)

2.3 Information Collected Automatically

When you use the Service, we automatically collect:

  • Device Information: Device type, operating system, browser type, and unique device identifiers
  • Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
  • Log Data: IP address, access times, and referring URLs

2.4 AI Conversation Data

When you use our AI coaching assistant, we collect:

  • Your messages and questions
  • AI-generated responses
  • Conversation history to provide context for future interactions
  • Embeddings of conversation content for semantic search and personalization

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Improve the Service

  • Create and manage your account
  • Sync and display your workout data
  • Calculate fitness metrics (CTL, ATL, TSB, power zones, heart rate zones)
  • Generate personalized training plans
  • Provide AI-powered coaching and recommendations
  • Enable social features and community interactions
  • Track nutrition and readiness data

3.2 Personalization

  • Customize training recommendations based on your fitness level and goals
  • Tailor the AI coaching experience to your training history
  • Provide relevant suggestions and insights

3.3 Communication

  • Respond to your support requests and inquiries
  • Send service-related notifications and updates
  • Provide information about new features (with your consent)

3.4 Analytics and Improvement

  • Analyze usage patterns to improve the Service
  • Debug and fix technical issues
  • Develop new features and functionality

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

When you choose to make your profile or activities public, other users can view your shared content. You control your privacy settings and can make your profile private at any time.

4.2 Service Providers

We share information with third-party service providers who help us operate the Service:

  • Clerk: Authentication and user management
  • Neon: Database hosting (PostgreSQL)
  • Cloudflare: Hosting, CDN, and AI inference
  • Resend: Email delivery for support communications

These providers are contractually obligated to protect your information and may only use it to provide services to us.

4.3 Third-Party Integrations

When you connect third-party platforms, data flows between Outside and those platforms according to the permissions you grant. Each platform has its own privacy policy governing how they handle your data.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests.

4.5 Project Transfers

If the project is transferred to another party or becomes part of a formal business entity, your information may be transferred as part of that transition. We will notify you of any such change.

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure servers provided by our infrastructure partners:

  • User accounts and authentication data are managed by Clerk
  • Application data is stored in Neon PostgreSQL databases
  • AI embeddings are stored in Cloudflare Vectorize
  • Files and media are stored in secure cloud storage

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of sensitive data at rest
  • Secure authentication with support for OAuth, passkeys, and multi-factor authentication
  • Regular security assessments and updates
  • Access controls limiting who can access your data

5.3 Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to:

  • Access the personal information we hold about you
  • Request a copy of your data in a portable format
  • View and export your workout data

6.2 Correction

You can update your account information and athlete profile at any time through your account settings.

6.3 Deletion

You have the right to:

  • Delete individual workouts or activities
  • Disconnect third-party integrations
  • Request deletion of your entire account and associated data

6.4 Privacy Controls

You can control your privacy through:

  • Making your profile public or private
  • Controlling visibility of individual activities
  • Managing who can follow you
  • Choosing what data to sync from third-party platforms

6.5 Communication Preferences

You can opt out of non-essential communications through your account settings.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

8. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you use.

10. Cookies and Tracking Technologies

We use cookies and similar technologies on the Service. When you first visit, a cookie consent banner lets you accept or decline non-essential cookies.

Cookie Categories

  • Necessary Cookies — Required for the Service to function. These handle authentication, session management, and security. They cannot be disabled.
  • Analytics Cookies — Help us understand how you use the Service so we can improve it. These are only set if you consent. You can change your preference at any time using the "Cookie Settings" link in our site footer.

Managing Your Preferences

You can change your cookie preferences at any time by clicking "Cookie Settings" in the site footer. You can also control cookies through your browser settings. Disabling necessary cookies may affect the functionality of the Service.

Your consent preferences are stored locally in your browser and are not transmitted to our servers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information we collect and how it is used
  • Right to delete your personal information
  • Right to opt out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

Our legal basis for processing your data includes: performance of our contract with you, your consent, our legitimate interests in operating the Service, and compliance with legal obligations.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

For data protection inquiries or to exercise your privacy rights, please email us with the subject line "Privacy Request."

Privacy Policy | Outside