Privacy Policy

Upform is an AI triathlon coaching service operated by Neuralps Sàrl (CHE-425.172.760), Chemin de la Mousse 80, 1226 Thônex, Switzerland (“we”, “us”, “Upform”). We are the controller responsible for the personal data processed through upform.ai and the Upform application.

For any question about this policy or your data, contact us at support@upform.ai.

We collect only what we need to run the service:

• Account data — your e-mail address and name, managed through our authentication provider (Clerk).
• Profile and training settings — physiological thresholds (FTP, LTHR, swim CSS, run threshold pace), weekly availability, equipment and session preferences, and your race objectives.
• Training and health data synced from Intervals.icu — activities (sport, duration, distance, power, heart rate, pace, training load) and wellness/health metrics (sleep, HRV, resting heart rate, readiness, fatigue, weight, VO₂max). This is health data and is treated as a special category (see §4).
• Your Intervals.icu API key — stored encrypted at rest so we can sync on your behalf.
• Billing data — your subscription status and a customer identifier from our payment provider (Stripe). We never see or store your full card number; card data is handled directly by Stripe.
• Technical data — IP address, browser/device information and timestamps in server logs, used for security and reliability.

• Provide the service — generate and adapt your training plan, push workouts to your calendar, and display your training situation.
• Run AI coaching — your relevant training context is sent to an AI model to generate plans, adaptations and session feedback (see §5).
• Sync with Intervals.icu — import activities and wellness, and export planned workouts.
• Billing — manage your trial, subscription and AI credits via Stripe.
• Security and support — protect the service against abuse and respond to your requests.
• Service communications — essential e-mails about your account, billing or important changes.

We process your data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR). Our legal bases are:

• Performance of our contract with you — to deliver the coaching service you sign up for.
• Your explicit consent — for processing health data (a special category). You give this consent when you connect Intervals.icu, and you can withdraw it at any time by disconnecting or deleting your account.
• Our legitimate interests — to keep the service secure, reliable and improving, balanced against your rights.
• Compliance with a legal obligation — e.g. retaining accounting records.

To generate and adapt your plans, the relevant training context (your thresholds, recent activities, wellness trends and objectives) is sent to a large-language-model provider (Anthropic) through the Vercel AI Gateway.

This processing operates under a zero-data-retention arrangement: your prompts and the generated output are not retained by the model provider after the request, and your data is not used to train their models.

We do not sell your personal data. We share it only with the service providers (sub-processors) that operate the platform, each bound by data-protection terms:

• Clerk — authentication and account management.
• Neon — managed PostgreSQL database hosting your data.
• Vercel — application hosting and the AI Gateway.
• Anthropic — the AI model that generates plans and adaptations (zero data retention).
• Stripe — payment processing and subscription management.
• Intervals.icu — the source you connect; we read your activities/wellness and write planned workouts using the API key you provide.

Some providers are located outside Switzerland/the EU (e.g. in the United States). Where that is the case, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and equivalent mechanisms.

We keep your data for as long as you have an account. When you delete your account, your profile, plans, workouts, activities, wellness data and your stored Intervals.icu key are erased immediately. We retain a limited set of billing and accounting records for as long as required by Swiss law (up to 10 years).

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data — you can delete your account yourself at any time from Settings.
• Obtain a copy of your data in a portable format.
• Restrict or object to certain processing.
• Withdraw your consent to health-data processing (this stops the related features).
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority.

To exercise any of these rights, contact support@upform.ai.

We protect your data with encryption in transit (TLS) and encryption at rest for your Intervals.icu API key, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a breach where the law requires.

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising cookies or third-party tracking, so no cookie-consent banner is required for non-essential tracking.

Upform is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Upform provides training guidance, not medical advice. The plans and metrics are informational only and are not a substitute for professional medical or health advice. See our Terms of Service.

We may update this policy as the service evolves. We will post the new version here with an updated date and, for material changes, notify you by e-mail or in the app.

Neuralps Sàrl, Chemin de la Mousse 80, 1226 Thônex, Switzerland. E-mail: support@upform.ai.