Privacy

Overview

Complete ("we", "our", "us") operates the Complete training platform. This policy explains how we collect, use, and protect your information when you use our iOS application and website. It also explains the third-party AI processing behind several features, and how to turn it off. Creating an account or continuing to use Complete means you accept this policy, which is the basis for the processing described below.

Information We Collect

• Account information: When you sign in via Apple or Google, we receive your name and email address.
• Assessment data: Fitness level, training preferences, running paces, and race details you provide to generate your plan.
• Health and training data: With your permission, we access selected Apple HealthKit data, such as workouts, heart rate, distance, energy, route, sleep, and recovery samples, to track progress and adapt your plan. Selected records can be synced to your Complete account.
• Body and nutrition data: With the separate nutrition and body permission, we may read body mass, height, dietary energy, protein, carbohydrates, fat, and date of birth from HealthKit. When data is available, selected measurements and daily summaries may be synced to your Complete account to support nutrition and Complete Age features.
• Connected wearables (WHOOP and Oura): If you connect a WHOOP or Oura account, that service sends us data through its official API, within the permissions you grant when you connect. From WHOOP we receive daily recovery scores, heart rate variability, resting heart rate, blood oxygen, skin temperature on WHOOP 4.0 and later, day strain, energy burned and average and maximum heart rate for the day, and sleep records with sleep performance, sleep stages, breathing rate and sleep need. We also receive your WHOOP workouts, but we keep only sauna sessions. From your WHOOP profile we keep only your WHOOP user ID. From Oura we receive daily readiness and sleep scores, body temperature deviation, and your detailed sleep records: heart rate and heart rate variability during sleep, lowest heart rate, breathing rate, sleep stages, movement, bed times, and your ring's identifier. The permissions you grant also cover WHOOP body measurements and Oura personal information such as age, weight, height and sex; Complete does not currently read these. We store the data we receive in your Complete account to calculate recovery and adapt your training. Sauna sessions from WHOOP are added to your activities and appear in your feed like your other workouts.
• Payment information: Subscriptions are processed by Apple through the App Store. We do not collect, store, or have access to your payment details.
• Usage and diagnostics: We collect product and operational metrics, such as feature usage and training-plan engagement. These metrics can be linked to your account, and error reports can include a pseudonymous account identifier and device or release context.
• AI processing data: AI processing is part of the terms you accept when you create an account or continue using Complete, and it is on unless you turn it off in Settings. When you use an AI feature, it can send the following categories to the AI processor handling that feature: chat messages and voice transcripts; workout and plan information; training, performance, health, recovery, and injury context; preferences and goals; and user-submitted workout or race image content when that feature is used. Your health and training data is held against a random account identifier, not against your name. An AI request carries that training data and, at most, that identifier: your name, username, email address, and profile photo are not sent with it. TypeSafe, which checks sessions and coach replies, does not receive the identifier. Anything you type into a chat message is sent as you wrote it, so a name you type there is included. Some of this is health data, which we treat as a special category and process only on the basis of that acceptance.

How We Use Your Information

• To generate and deliver your personalized training plan.
• To adapt your plan based on performance data and workout feedback.
• To provide race predictions and training-load monitoring.
• To provide optional AI features, including coach conversations, workout creation and enrichment, workout-image parsing, HYROX result parsing, and selected recommendations.
• To decide whether an unusually long session counts in full for points, from the session's numbers and your resting heart rate.
• To improve the service through product, operational, and error-monitoring metrics.

HealthKit Data

Complete uses Apple HealthKit to read the categories you authorize. The base training scope can include workouts, heart rate, distance, energy, route, sleep, recovery, date of birth, and biological sex. The separate nutrition and body scope can include body mass, height, dietary energy, protein, carbohydrates, and fat. HealthKit data is processed on your device for uses such as matching workouts, calculating training load, adapting your plan, supporting nutrition features, and calculating Complete Age; selected records can also be synced to your account. If an AI feature needs relevant health, performance, recovery, or training context, that context can be sent to an AI processor named below, unless you have turned AI processing off in Settings. HealthKit data is not used for advertising.

Running Evidence and Device Cache

With your HealthKit permission, Complete can use selected workout distance and heart-rate data to calculate running pace evidence and improve training features. The evidence may include time-bounded workout portions, activity and workout identifiers, and limited technical diagnostics. Selected evidence can be stored in your private Complete account and included in an authenticated data export.

The app may keep an account-scoped evidence cache locally for offline use, retry, and recovery. It is excluded from device backups, has no fixed expiry, and may remain until the operating system or app clears it; signing out cancels recovery but does not itself erase the cache. Server evidence follows the applicable account, feature, operational, and legal retention requirements. Deletion of an activity, workout, or account queues related private evidence for asynchronous erasure, so completion may be delayed while deletion and retries finish.

Third-Party AI Processing

Several Complete features use AI. When you use one, Complete sends the disclosed data categories to the AI processor handling that feature. Our AI processors are OpenAI, Anthropic, and TypeSafe. That list is enforced in code rather than by policy alone: every AI request is checked against a disclosed-recipient list immediately before it is sent, and a request to any provider outside that list is blocked instead of delivered. Until an AI processor is named in this policy and added to that list, requests to it are blocked, so a new recipient cannot receive your data before the disclosure changes. You can turn AI processing off at any time in the app's Settings. Turning it off prevents later requests; the non-AI parts of those features remain usable. A request already in progress cannot be recalled, and turning AI processing off does not delete existing local chat history. Each processor describes its API data controls in its published documentation:

• OpenAI describes no training by default plus endpoint and abuse-monitoring controls for API data.
• Anthropic describes no training on API inputs or outputs by default.

The app saves the latest server-owned AI disclosure on your device, scoped to your Complete account, so it can show your current setting. Your setting is synced with Supabase. The device copy is a display cache only: before an AI request, Complete checks your current setting with Supabase, and AI requests remain blocked when that check cannot be completed. AI operational telemetry sent to PostHog contains metrics only and excludes prompts, model output, image content, tool payloads, and provider-error content.

Third-Party Services

We use the following third-party services:

• Supabase — Authentication, account data storage, and consent synchronization.
• Apple App Store — Subscription payment processing.
• OpenAI — AI processing for coaching, workout, parsing and recommendation features. Can be turned off in Settings.
• Anthropic — may handle AI processing for coach conversations and selected recommendations. Can be turned off in Settings.
• TypeSafe (typesafe.ai) — AI checks on sessions and coach conversations. When a session recorded with heart rate runs much longer than usual for its type of activity, its numbers (sport, duration, distance, pace, heart rate and heart-rate zones, a pace score adjusted for age and sex, and the device or app that recorded it) are sent so TypeSafe can give a second opinion on whether it was a real session. That opinion is stored with the points decision but does not set it. The coach can also send your recent messages and the coach's reply so TypeSafe can sort the question and check the reply. Your name, username, email address and account identifier are not sent. Can be turned off in Settings; with it off, points are still decided from the session's numbers and your resting heart rate.
• WHOOP: Only if you connect your WHOOP account. WHOOP sends us the recovery, sleep, strain and sauna data listed above. You can disconnect in Settings. Disconnecting deletes the daily WHOOP data we stored and our access to your WHOOP account. Recovery values already calculated from it, and sauna sessions already added to your activities, stay in your account until you delete them or ask us to.
• Oura: Only if you connect your Oura account. Oura sends us the readiness, sleep, heart rate and temperature data listed above. You can disconnect in Settings; disconnecting removes our access to your Oura account and stops new syncs. Oura data already synced stays in your Complete account until you ask us to delete it.
• Google Analytics (Google Ireland Limited): Website analytics and audience data for personalized Complete advertising, only with your consent.
• Vercel — Website hosting and analytics.
• PostHog — Product and operational analytics, including account-linked feature metrics.
• Sentry — Error monitoring.

Each service has its own privacy policy governing their handling of your data.

Cookies

Our website uses essential cookies for authentication and session management where needed. Vercel Analytics and Speed Insights measure website usage and performance.

We load Google Analytics 4 only after you consent, to understand which pages people read and how they use the website. It sets the first-party cookies _ga and _ga_<ID> to distinguish visitors and maintain session information. These cookies last for up to 12 months. We do not upload customer email addresses or phone numbers or send Complete account identifiers to Google Analytics.

If you accept, Google Analytics processes the pages you view and how you reached them, your device type, browser and screen size, and your approximate location (city, region and country), derived from your IP address. According to Google, Google Analytics does not log or store IP addresses from visitors in the EU, Switzerland or the UK. For other regions, Google uses IP addresses for location and service operation, including spam detection, and discards raw IP addresses after use. You can withdraw your consent at any time via "Cookie settings" in the footer. Withdrawal does not affect the lawfulness of processing before it.

Analytics only grants website measurement with advertising storage, Google signals and ad personalization disabled. Accept all also enables Google signals, advertising-related cookie storage and personalized advertising. Google may link your website visits with Google-account data for age, gender and interest reports if you are signed in to Google and have enabled Ads Personalization in your Google account. With a linked Google Ads account, we may use consented visit data and audiences to show you personalized Complete ads on Google services, including YouTube, and websites that display Google ads. Google may read or set cookies on its own domains and advertising cookies such as _gcl_* and _gac_* on our domain for these purposes. Reports cover eligible visitors and may omit small groups. An Accept from an earlier consent version must be renewed before tracking resumes. For website measurement, Google Ireland Limited acts as our processor under the Google Ads Data Processing Terms. For Google signals and personalized advertising through Google Ads, Google also uses the data as an independent controller under its own privacy policy (Google Privacy Policy). See Google's processor and controller terms.

The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. Google Analytics user-level and event-level data is retained for 14 months. Data may be transferred to Google LLC in the United States under the EU-US Data Privacy Framework.

We store your Accept all, Analytics only or Reject choice in your browser's localStorage for 12 months. You can change your choice at any time using Cookie settings in the footer, or Cookie-Einstellungen on German pages. To withdraw consent, open that link and choose Reject or Ablehnen. This stops Google Analytics, deletes its _ga, _ga_<ID>, _gcl_* and _gac_* cookies on our domain and reloads the page to unload the running tag. Switching consent levels also reloads the page; switching to Analytics only deletes advertising cookies while keeping measurement cookies. Cookies on Google's own domains are managed through Google and your browser settings.

Data Retention & Deletion

Retention depends on the data type, account state, operational and legal requirements, and each AI processor's applicable terms for data sent to it. This policy does not promise a single retention period. AI setting changes are stored as metadata so Complete can enforce your latest choice.

Running evidence and related server metadata are retained according to the applicable account, feature, operational, and legal requirements. Pending uploads have a minimum seven-day grace period before cleanup. When an activity, workout, or account deletion is processed, related private evidence is queued for asynchronous erasure, so completion may be delayed while deletion and retries finish.

Turning AI processing off stops later AI requests once the change is synced. It cannot recall a request already in progress, erase data already sent to an AI processor, or delete local chat history.

To request account deletion or ask about data handled by Complete, contact us. Processor-side handling is governed by each AI processor's applicable terms and policies.

Contact

If you have questions about this privacy policy, contact us at support@ccomplete.app.