Privacy Policy

Bib is a training dashboard made by FITR (“we”, “us”), at fitr.us. It reads the training data you already record, computes a few numbers from it, and coaches you from them: a training plan, a read on each run, and answers when you ask. This policy says what we collect, why, where it lives, who else touches it, and how to get it deleted. Questions go to info@fitr.us.

What we collect

• Your account. When you sign in with Google, Apple or an emailed link we keep the email address and, if the provider shares it, your name. Apple may give us a relay address instead of your real one; either works. We never see a password.
• Your training data from Strava. When you connect Strava, you authorise us to read your activities: distance, time, pace, heart rate, cadence, elevation, laps and the per-second streams, plus gear. We store what we read. We never write to Strava or post on your behalf. The access token Strava gives us is encrypted at rest and revoked when you disconnect.
• Your Garmin data, if you connect Garmin. You sign in with your Garmin email and password. They are encrypted on your device so that only a computer we operate can read them; that computer uses them once to sign in to Garmin and keeps Garmin’s sign-in tokens, not your password. It then reads your daily recovery (resting heart rate, heart-rate variability, sleep, Body Battery, stress, breathing rate), the breathing rate, Performance Condition and heart-rate sensor recorded on your runs, and the sets from your strength workouts. If you turn on sending sessions to your watch, it also writes your next planned sessions to your Garmin calendar.
• Data from Apple Health, on your phone. With your permission the iPhone app reads sleep, resting heart rate, heart-rate variability, wrist temperature, respiratory rate, hydration, nutrition, height, body fat and body weight from Apple Health. Sleep, breathing rate, nutrition, height, body fat and weight are sent to our servers so your check-in, fuelling targets and weight goal can use them; the rest stays on the phone. Meals and water you log in Bib are written back to Apple Health so it stays your one record.
• What you say to the coach. When you tap the microphone in Ask the Coach, your phone turns your words into text using Apple’s speech recognition — on the phone itself where the phone supports it. Only the text is sent, exactly as if you had typed it; the audio is never stored or sent to us. Replies read aloud are spoken by your phone from the text it already has.
• What you type. Daily check-ins (sleep, how you feel, soreness and where it hurts, alcohol), notes before and after a run (effort, weight, fueling, stops), meals, your goal and races, your plan and the changes you make to it, and anything you ask the coach.
• Feedback you send. A thumbs up or down on a coaching read, a plan change or a reply, with any reasons and words you add, and notes from Send feedback in Settings (tagged with the screen you came from and the app version). It is stored with your account and read by the Bib team to improve the coaching; a reply you marked down may be left out of the examples we train on, or kept as a test case for the coaching. Analytics records only that feedback was sent and whether it was up or down — never your words.
• Usage analytics. The apps and the dashboard record which screens are opened and which controls are tapped, as ids only — never a value, a date or anything about your health. You can turn this off in Settings. It is processed by TelemetryDeck with no advertising identifiers.
• Server logs. Our hosting provider keeps short-lived request logs (IP address, time, path) for security and debugging.

What we use it for

• To compute the numbers the product shows you: efficiency, your fitness at a reference heart rate, the marathon you could run today, weekly load, durability, your Standing.
• To build and adjust your training plan, and to write your coaching reads — the post-run assessment, the morning brief, the weekly Standing sentence, plan reviews, and answers when you ask the coach. A change to your plan is applied only when you choose it. These are generated by AI language models from your numbers and your notes. Some run on a computer we operate; some are sent to Anthropic’s API, which processes the text to produce the reply and retains it under Anthropic’s policies. We also keep the prompts and replies as examples to improve the model we run ourselves. We do not sell them or use them to train models for anyone else.
• To send you the emails you asked for: sign-in links, and an invitation when a spot opens.
• To keep the service working and secure.

Where it lives

Our servers run on Cloudflare (Workers, KV and D1) in the United States. Emails are sent through Resend. Sign-in identity comes from Google and Apple. Training data comes from Strava and, if you connect it, Garmin. Coaching reads may be generated through Anthropic, which may also search the web for public facts such as a race’s start time. Weather comes from Open-Meteo for a fixed location, and a food search or barcode is looked up in USDA FoodData Central or Open Food Facts — only the search text or barcode is sent. Each of these is a processor acting on our instructions; none of them is given your data for their own purposes beyond what their published terms require.

What we don’t do

• We don’t sell your data, and we don’t show ads.
• We don’t share your data with other athletes. Your dashboard is yours. If you choose to share your past training blocks with the cohort, only anonymous weekly medians are shown, and only once at least twenty athletes have shared.
• We don’t post to Strava or write to your Google or Apple accounts. We write to Apple Health and Garmin only what you ask for: meals and water you log in Bib, and your planned sessions if you turn on sending them to your watch.

How long we keep it, and how to delete it

We keep your data while your account is open. Disconnecting Strava or Garmin revokes our access and stops new reads; your stored activities stay until you ask us to remove them. To delete your account and everything under it, email info@fitr.us from the address you signed in with; we complete deletion within 30 days and confirm by reply. Sign-in links expire in 15 minutes and are single-use. Sessions expire after 7 days on the web and 30 days on a phone or TV, unless used.

Your rights

You can ask for a copy of your data, a correction, or deletion at any time at the address above. If you are in a region with data-protection law (the EU, the UK, California, among others) those rights apply as that law provides, and we honour them for everyone.

Children

Bib is for adults. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes in a way that matters, we will say so on this page and, for anything significant, by email before it takes effect.

Contact

FITR · Clayton, California · info@fitr.us