TrainingDojo

Privacy Policy

Last updated: May 2026

At TrainingDojo, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our service.

Information We Collect

Account Information

When you create an account, we collect:

  • •Email address
  • •Name (optional)
  • •Password (encrypted and never stored in plain text)

TrainingPeaks Integration

To enable TrainingPeaks imports, we temporarily process:

  • •TrainingPeaks Bearer Token (stored only in your browser's local storage when pasted manually)
  • •TrainingPeaks Athlete ID, detected automatically from your bearer token

Important: If you opt in from Settings, TrainingDojo stores only your Production_tpAuth cookie value encrypted on our servers so we can request short-lived TrainingPeaks access tokens for uploads and plan edits. You can remove it at any time.

TrainingDojo Connector Browser Extension

Our Chrome extension, TrainingDojo Connector, is used only to connect your TrainingPeaks account to TrainingDojo without requiring you to copy values from browser developer tools. The extension:

  • -Reads only the TrainingPeaks Production_tpAuth session cookie when you request a TrainingPeaks connection
  • -Does not read unrelated cookies, browse history, page content, or data from other websites
  • -Does not store the cookie inside the extension or execute remote code
  • -Sends the cookie over HTTPS to TrainingDojo only so we can validate the connection and store it encrypted for TrainingPeaks uploads and plan management

Chrome extension limited use:TrainingDojo uses information received from Chrome extension permissions only to provide the extension's single purpose: connecting TrainingPeaks to TrainingDojo. We do not sell this data, use it for advertising, transfer it to data brokers, or allow humans to read it except where required for security, support with your consent, or legal compliance.

Intervals.icu Integration

To enable Intervals.icu uploads and plan management, we process:

  • •Intervals.icu API key (stored in browser local storage when entered manually, or encrypted server-side when you opt in to a saved connection)
  • •Intervals.icu athlete ID, usually a string beginning with i

Important: Saved Intervals.icu connections are optional. You can remove an encrypted saved connection from Settings at any time, and manual credentials remain browser-local.

Strava Integration

To use Strava as a Coach Dojo history source, we process:

  • -Strava OAuth access and refresh tokens, stored encrypted server-side
  • -Recent Strava activity summaries used to estimate training load for Coach Dojo analysis
  • -Strava athlete ID, display name, granted scopes, and FTP if available

Important: Strava is a read-only Coach Dojo source. TrainingDojo does not upload planned workouts to Strava. Disconnecting Strava removes the saved connection and revokes our OAuth access.

Training Plan Data

We store:

  • •AI conversation history (for Pro users)
  • •Generated training plans (associated with your account)
  • •CSV files you upload (temporarily, for processing only)

Usage and Analytics

We collect anonymous analytics to improve our service:

  • •Page views and feature usage
  • •Error logs and diagnostic data
  • •Browser type and device information

How We Use Your Information

We use the information we collect to:

✓Provide and maintain our services (account management, AI generation, TrainingPeaks and Intervals.icu uploads, Strava-based Coach Dojo analysis)
✓Process payments and manage subscriptions
✓Send important service updates and notifications
✓Improve our AI models and user experience
✓Provide customer support
✓Detect and prevent fraud or abuse

How We Share Your Information

We do not sell your personal information. We may share your information only in these limited circumstances:

Third-Party Services

We use trusted third-party services to operate our platform:

  • • Stripe (payment processing) - Privacy Policy
  • • AI providers (for plan generation)
  • • Cloud hosting providers (data storage and processing)

Legal Requirements

We may disclose information if required by law, court order, or government request.

Business Transfers

If TrainingDojo is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Data Security

We implement industry-standard security measures to protect your data:

  • •All data transmitted over HTTPS/TLS encryption
  • •Passwords are hashed and salted using bcrypt
  • •Manual TrainingPeaks bearer tokens and Intervals.icu API keys stay in browser local storage; optional saved TrainingPeaks, Intervals.icu, and Strava connections store platform secrets encrypted server-side
  • •Regular security audits and updates
  • •Restricted access to personal data (only authorized personnel)

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for different periods based on type:

  • •Account data: Retained while your account is active and for a reasonable period after deletion for legal compliance
  • •Conversation history: Retained for Pro users until account deletion or upon request
  • •CSV uploads: Processed immediately and not permanently stored
  • -Strava activity summaries: Used during Coach Dojo analysis and not stored as raw activity history
  • •Payment records: Retained as required by law and for accounting purposes

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

Request a copy of your personal data in a structured, machine-readable format

Correction

Update or correct inaccurate information through your account settings

Deletion

Request deletion of your account and associated data (subject to legal retention requirements)

Opt-Out

Unsubscribe from marketing emails via the link in each email

To exercise these rights, please contact us through our support channels.

Cookies and Tracking

We use cookies and similar technologies to:

  • •Maintain your login session
  • •Remember your preferences
  • •Analyze site usage and performance

You can control cookies through your browser settings, but disabling cookies may affect functionality.

Children's Privacy

TrainingDojo is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Users

TrainingDojo is operated from the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

By using our service, you consent to the transfer of your information to the United States and agree that such transfer will be governed by this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • •Posting the updated policy with a new "Last updated" date
  • •Sending an email notification to your registered email address
  • •Displaying a prominent notice in the application

Your continued use of TrainingDojo after changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: support@trainingdojo.app