This policy explains what Wodder collects, why we collect it, and what you can do about it. We wrote it in plain English. If something is unclear, tell us.
1. The short version
- We collect what we need to run the service: your email, profile, workouts, and limited usage data.
- We use it to show your training, generate AI insights, and improve the product.
- We do not sell your data.
- You can export or delete your account anytime.
2. What we collect
You give us
- Account information: email address, display name, username, and optional bio.
- Profile choices: weekly training goal, privacy setting (public or private), profile picture.
- Workout data: exercises, sets, reps, weights, duration, distance, calories, notes, tags, and the dates you logged them.
- Readiness feedback: how recovered you feel, when you choose to report it.
- Social activity: follows, reactions, comments, workout tags, and messages.
- Payment details: if you subscribe, Stripe collects and stores your card data. We receive a customer ID and subscription status — not your card number.
Connected services (optional)
- Garmin: if you connect Garmin, Garmin sends us your activities and daily health readings. Section 5 lists exactly what, and how we handle it.
- Apple Health: if you connect Apple Health in the Wodder iPhone app, the app reads your workouts and health readings on your phone and sends them to us. Section 6 lists exactly what.
We generate automatically
- Usage events: pages visited, features used, basic device and browser info.
- Technical logs: IP address, request paths, and errors — used for security, debugging, and rate-limiting.
3. How we use it
- Run the service — show your workouts, history, feeds, and streaks.
- Generate AI insights about training balance, recovery, and progress.
- Send service messages: sign-in codes, receipts, important account notices.
- Detect abuse, enforce our terms, and meet legal obligations.
- Improve the product — measure what works and what breaks.
Our legal bases under GDPR: performing our contract with you, your consent where we ask for it, legitimate interests (product improvement, security), and compliance with law.
4. AI processing
When you log a workout or ask for insights, we send the relevant text — usually an exercise description, set summary, or readiness note — to Anthropic to produce a response. Anthropic processes the request on our behalf under a commercial agreement and does not train its models on our API data.
If you try the workout parser before creating an account, the text you type may go to OpenAI instead, under the same terms: it processes the request for us and does not train on it.
Garmin and Apple Health data are handled differently: they reach an AI system only if you turn that on, separately for each. Sections 5 and 6 explain.
AI output can be wrong. Treat it as a suggestion, not a prescription.
5. Garmin data
Connecting Garmin is optional. When you connect, you approve it on Garmin's own page, and Garmin sends us your data directly through the Garmin Connect Developer Program.
What we receive
- Activities: type, name, start time, duration, distance, calories, heart rate, pace and speed, elevation, cadence, power, laps, GPS route, and the device that recorded it.
- Activity files: the detailed file your watch records, from which we read running dynamics (ground contact time, vertical oscillation, stride length), training effect, and for strength workouts the exercises, sets, reps and weights.
- Daily health: steps, floors, intensity minutes, calories, resting heart rate, stress, Body Battery, sleep (duration, stages, score), heart-rate variability, respiration, blood oxygen (SpO2), skin temperature, VO2 max, fitness age, and, if you use a Garmin scale or blood pressure monitor, weight, body composition and blood pressure.
We do not request Garmin's Women's Health data.
How we use it
Only to run Wodder for you: to fill in your training log so you don't log twice, to draw your routes, splits and charts, and to work out your training load, recovery, fitness trends and the training areas you've been missing. You decide which workouts other people see, as with anything you log. When you first connect we may receive up to 30 days of past data; anything older comes in only if you upload a Garmin export yourself.
Who processes it
We do not sell Garmin data, and we do not share it with anyone for their own purposes. These services process it on our behalf, only to run Wodder:
- Fly.io: runs the server that receives the data from Garmin
- Supabase: stores it in our database
- Vercel: serves the web app that shows it to you
- Mapbox: draws your route maps; your browser sends it the route's coordinates
- Sentry: may see fragments of it in error reports when something breaks
- Anthropic: only if you turn on the AI setting below
- Junction: carried Garmin data to us before we connected to Garmin directly; it stops when you reconnect, and your account there is deleted with your Wodder account
PostHog, our product analytics, records that a Garmin activity synced, never the activity itself.
AI transparency
Wodder's AI coach, Assist, builds workouts from your recent training. By default it leaves out everything that came from Garmin, and no Garmin data goes to any AI system.
If you tick Let Assist use my Garmin workouts (on the Assist card or the Garmin page), Assist will also send Anthropic a summary of your recent Garmin workouts when you ask it for a session: the exercises, dates, sets, reps and weights, and the recovery status we work out from them. Anthropic processes the request for us and does not train on it. To withdraw, untick the same box. It takes effect on your next request.
We never use Garmin data, or anything derived from it, to train, evaluate or improve AI models.
Your control
- See and correct it: everything we hold appears in your log, where you can edit or delete any workout.
- Stop it: disconnect Garmin from the Garmin page in Wodder, or remove Wodder in Garmin Connect. Either way, Garmin stops sending us data.
- Delete it: deleting your account erases all of it (see section 8) and tells Garmin to stop sending data.
- Export it: write to privacy@wodder.ai and we'll send you a copy within 30 days.
6. Apple Health data
Connecting Apple Health is optional and only possible in the Wodder iPhone app. When you connect, iOS asks which kinds of data Wodder may read, and you can allow or refuse each one. The app then reads that data on your phone and sends it to our server. Wodder only reads from Apple Health; it never writes to it.
What we read
- Workouts: type, start and end time, duration, distance, calories, heart rate during the workout, GPS route, elevation, running and cycling power, cadence, running form (stride length, ground contact time, vertical oscillation), swim strokes, and the app and device that recorded it.
- Daily health: steps, exercise minutes, active calories, resting heart rate, heart-rate variability, sleep (duration and stages), respiratory rate, blood oxygen, sleeping wrist temperature, VO2 max, and weight and body-fat percentage if you record them.
When you connect, you choose how much history to bring in (30 days to everything on your phone). After that the app sends new data as it arrives, including in the background. If you also connect Garmin, workouts Garmin Connect copied into Apple Health are skipped so nothing counts twice.
How we use it
Only to run Wodder for you, exactly as with Garmin data: your training log, routes and charts, training load, recovery and fitness trends, and the training areas you've been missing. We never use Apple Health data for advertising or marketing, we never sell it or give it to data brokers, and we don't store it in iCloud. The same services listed for Garmin data in section 5 process it on our behalf, and PostHog records only that a sync happened, never the data.
AI transparency
By default no Apple Health data goes to any AI system, and Assist leaves out workouts that came from Apple Health. If you tick Let Assist use my Apple Health workouts (in the Apple Health settings in the app), Assist will send Anthropic a summary of those workouts when you ask it for a session, on the same terms as section 5. Untick it to withdraw. We never use Apple Health data to train, evaluate or improve AI models.
Your control
- Choose what we read: change it any time in the iPhone Settings app under Health, Data Access & Devices, Wodder.
- Stop it: tap Disconnect Apple Health in the app. The phone stops sending data at once, and the key it used is revoked on our side.
- Delete it: edit or delete any imported workout in your log, or delete your account to erase all of it (see section 8).
8. How long we keep it
We keep your data while your account is active.
When you delete your account, we erase it from our production database right away. That covers your profile and sign-in record; your workouts, personal records, templates and settings; your AI coaching history; your follows, reactions, tags and notifications; your coaching relationships and any programs written for you; and everything that came from a connected device, including Garmin activities, GPS routes, heart-rate and other sensor data, daily health readings, and the training-load and recovery figures we calculated from them.
We also ask our vendors to delete what they hold. If you connected Garmin, we tell Garmin to stop sending us your data, and if your account ever went through Junction we delete your account there, which erases Junction's copy within 7 days. If you subscribed, we delete your customer record at Stripe, which cancels your subscription immediately. Stripe keeps records of past payments for as long as tax and accounting rules require, usually seven years.
A few copies take longer to disappear. Database backups age out within 30 days, and error reports within 90 days. Product analytics are tied to a random account ID, not your name or email, and once your account is gone nothing in Wodder links that ID back to you.
9. Your rights
Depending on where you live, you may have the right to:
- Access the data we hold about you
- Correct inaccurate information
- Delete your data — available in-app from your profile page
- Export a copy of your data in a portable format
- Object to certain processing, or withdraw consent you gave
- Lodge a complaint with your local data protection authority
California residents have the rights described in the CCPA, including the right to know what we collect, the right to delete, and the right not to be discriminated against for exercising these rights. We do not sell personal information.
To exercise any of these rights, use the controls in your profile or write to privacy@wodder.ai.
11. Security
We encrypt data in transit with TLS and at rest in our hosting providers. Access to production systems is limited and audited. No system is perfectly secure, and we cannot guarantee absolute security.
12. Children under 13
Wodder is not for children under 13. We do not knowingly collect information from children under 13. If we learn we have, we will delete it. A parent or guardian who believes we have such information can write to privacy@wodder.ai.
13. International transfers
Wodder is based in the United States and our vendors operate in several countries. When we move data out of your region, we rely on safeguards recognized by applicable law — including the European Commission's standard contractual clauses.
14. Changes to this policy
We will update this policy as the product changes. Material changes trigger an in-app notice or an email at least 14 days before they take effect. The date at the top tells you when the current version was published.
15. Contact
Privacy questions: privacy@wodder.ai. General questions: hello@wodder.ai.