Privacy

What you enter and what your watch records: your profile (name, birth date, heart-rate settings, time zone, language), your activities with their laps and second-by-second recordings (heart rate, pace, cadence, power, position, the watch's temperature), strength workouts and the weights you logged, how each run felt and your notes, wellness readings (resting heart rate, HRV, sleep, and body weight when your export carries it), goals, milestones, your training profile, plans and sessions, equipment and its photos, and your conversations with the coach.

Body weight is stored because it is in what you import. It is never used in a calculation, a plan or the coach.

To sign you in: your passkeys, or, if you choose a password instead, your username, the password as a one-way hash, your authenticator app's secret (encrypted) and your recovery codes as hashes.

The app runs on Fly.io in Frankfurt. The database is Postgres at Neon, also in Frankfurt. An encrypted copy of the database is made every day and kept for 90 days outside Neon, as a GitHub Actions artifact in the app's own repository.

The coach, only once you have turned it on: what it sends to Anthropic, which provides the model, is set out under “The coach and AI” below.

Garmin: if you connect it, the app reads your activities and your daily wellness readings (resting heart rate, HRV and sleep) from Garmin Connect, and the sessions you send to your watch are written to Garmin Connect through Garmin's Training API. Disconnecting Garmin on Profile, or deleting your account, ends the connection at Garmin's end too.

intervals.icu: if you connect it, the app reads your activities and wellness from it, and the sessions you send to your watch are written to your intervals.icu calendar.

Notifications go through your browser's push service (Apple, Google or Mozilla). They never say what a session is, or anything about your health.

Have I Been Pwned: when you set a password, the first 5 characters of a hash of it are sent to its breached-password list, to refuse one that is already known. The password itself never leaves the app.

The server's logs carry ids and counts, never health data, names or credentials.

Feedback you choose to send is stored with its kind, message, page, app version, browser and device context, your account and the time sent. Screenshots are optional and stay in the database until you delete the feedback or your account. The owner can read feedback, reply, and copy its text and context into a private GitHub issue; screenshots remain in the app. Deleting feedback does not delete a GitHub issue already filed from it. Your data export includes feedback text and context, without screenshot bytes.

There is no analytics and no advertising. The only cookies are the ones signing in needs.

Your data is not sold, and it is not shared with anyone beyond the services named on this page, each only for the part it does.

This is the app's AI transparency statement. The coach is a language model, Claude, provided by Anthropic. It runs only after you turn it on and agree to what it sends; until then no model is called with your data. You can turn it off on Profile at any time.

When you ask for a run insight, a paragraph on your week or a plan, or send the coach a message, Evenpace sends Anthropic summaries of your activities and wellness readings (Garmin's included), your training profile, goals, plan and check-in notes, and your message. Never your body weight. Each message is also checked by a smaller Anthropic model before the coach sees it. When dictation ends in a check-in, Evenpace also sends just the current unsaved note text to a smaller Anthropic model to tidy punctuation and spelling, if the coach is enabled. No audio is sent to Evenpace or Anthropic by this cleanup. The result stays editable and is saved only when you press Save.

Nothing you send, and nothing derived from your Garmin data, is used to train, evaluate or improve an AI model. Evenpace does not do it, and Anthropic's commercial terms for its API do not allow it.

No one at Evenpace reads your conversations. Anthropic keeps what it receives for up to 30 days, or up to 2 years if its automated safety checks flag it, and only flagged content can be read by a person there.

Turning the coach off stops every later call. What was already sent cannot be recalled; Anthropic deletes it as above. Your conversations and insights stay in the app until you delete them or your account.

To correct something: your profile, zones, training profile, goals, milestones and equipment are edited on Profile; how a run felt and its notes on the run's own page; a planned session in the session editor. A recording is what your watch measured: it can be deleted, not edited.

On Profile, “Export my data” downloads everything you entered or imported as one JSON file. Figures the app works out from it (fitness, fatigue, personal bests) are left out, and so are secrets: your keys, passkeys, password, recovery codes and sessions.

To withdraw consent: turn the coach off on Profile, and disconnect Garmin or intervals.icu there. Each stops at once; what was received before is covered below.

On Profile, “Delete my account” removes all of the above from the app's database at once, after first removing the sessions it put on your intervals.icu calendar. It cannot reach Neon's own restore history (the last 6 hours) or the daily copies already made, which expire within 90 days, nor what Anthropic, Garmin or intervals.icu have already received; their own policies apply there.