This policy explains what Wodder collects, why we collect it, and what you can do about it. We wrote it in plain English. If something is unclear, tell us.
1. The short version
- We collect what we need to run the service: your email, profile, workouts, and limited usage data.
- We use it to show your training, generate AI insights, and improve the product.
- We do not sell your data.
- You can export or delete your account anytime.
2. What we collect
You give us
- Account information: email address, display name, username, and optional bio.
- Profile choices: weekly training goal, privacy setting (public or private), profile picture.
- Workout data: exercises, sets, reps, weights, duration, distance, calories, notes, tags, and the dates you logged them.
- Readiness feedback: how recovered you feel, when you choose to report it.
- Social activity: follows, reactions, comments, workout tags, and messages.
- Payment details: if you subscribe, Stripe collects and stores your card data. We receive a customer ID and subscription status — not your card number.
Connected services (optional)
- Garmin: if you connect Garmin, we receive activity data — workouts, heart rate, distance, duration — so we can match and enrich your Wodder log.
We generate automatically
- Usage events: pages visited, features used, basic device and browser info.
- Technical logs: IP address, request paths, and errors — used for security, debugging, and rate-limiting.
3. How we use it
- Run the service — show your workouts, history, feeds, and streaks.
- Generate AI insights about training balance, recovery, and progress.
- Send service messages: sign-in codes, receipts, important account notices.
- Detect abuse, enforce our terms, and meet legal obligations.
- Improve the product — measure what works and what breaks.
Our legal bases under GDPR: performing our contract with you, your consent where we ask for it, legitimate interests (product improvement, security), and compliance with law.
4. AI processing
When you log a workout or ask for insights, we send the relevant text — usually an exercise description, set summary, or readiness note — to Anthropic to produce a response. Anthropic processes the request on our behalf under a commercial agreement and does not train its models on our API data.
AI output can be wrong. Treat it as a suggestion, not a prescription.
6. How long we keep it
We keep your data while your account is active. When you delete your account, we remove your profile and training data from our production database. Backups age out within 30 days. We keep a minimal record of billing transactions for as long as tax and accounting rules require — usually seven years.
7. Your rights
Depending on where you live, you may have the right to:
- Access the data we hold about you
- Correct inaccurate information
- Delete your data — available in-app from your profile page
- Export a copy of your data in a portable format
- Object to certain processing, or withdraw consent you gave
- Lodge a complaint with your local data protection authority
California residents have the rights described in the CCPA, including the right to know what we collect, the right to delete, and the right not to be discriminated against for exercising these rights. We do not sell personal information.
To exercise any of these rights, use the controls in your profile or write to privacy@wodder.ai.
9. Security
We encrypt data in transit with TLS and at rest in our hosting providers. Access to production systems is limited and audited. No system is perfectly secure, and we cannot guarantee absolute security.
10. Children under 13
Wodder is not for children under 13. We do not knowingly collect information from children under 13. If we learn we have, we will delete it. A parent or guardian who believes we have such information can write to privacy@wodder.ai.
11. International transfers
Wodder is based in the United States and our vendors operate in several countries. When we move data out of your region, we rely on safeguards recognized by applicable law — including the European Commission's standard contractual clauses.
12. Changes to this policy
We will update this policy as the product changes. Material changes trigger an in-app notice or an email at least 14 days before they take effect. The date at the top tells you when the current version was published.
13. Contact
Privacy questions: privacy@wodder.ai. General questions: hello@wodder.ai.