Privacy Policy

Effective date: October 7, 2026

1. Introduction

OmniCoach ("we," "us," or "our") is operated by Dichotomy.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

a. Account Information

Email address
Name (if provided)
Authentication credentials
Date of birth, used only to derive your age for training calculations

b. Health & Fitness Data

Health and fitness data reaches OmniCoach from Garmin Connect, from Apple Health, or from what you enter yourself. Section 3 describes the Garmin Connect data in full.

c. Usage Information

App interactions and feature usage
Device type and operating system
Server logs recording requests to our API, retained for a short period for reliability and security

d. Pregnancy Information You Enter

If you turn on pregnancy mode, we store your due date and nothing else about your pregnancy. We use it only to adapt your training plan: easier sessions, no racing, and optional late-pregnancy sessions. It is never sent to AI providers or shared with any other third party; it is stored only on our own servers (Section 6). It is deleted when you turn pregnancy mode off, and with the rest of your data when you delete your account (Section 7).

3. Garmin Connect Data

This section describes specifically how data from Garmin Connect is collected, used, processed, stored, and shared. It applies whenever you have connected a Garmin account to OmniCoach.

a. What we collect, and how

We receive Garmin data only after you authorize it through Garmin Connect's OAuth consent flow, and only the categories you grant there. Garmin sends this data to our servers by webhook notification; we do not poll Garmin for it. Depending on your device, watch settings, and the permissions you grant, this can include:

Daily activity summaries — steps, calories, active minutes, resting heart rate, stress
Sleep — duration, sleep stages, and sleep score
Body Battery energy monitoring
Heart rate variability, pulse oximetry, and respiration
VO2 max and fitness age
Body composition, if you use a connected Garmin scale
Activities and activity details — type, duration, distance, pace, heart rate, power, and GPS track
Activity files (FIT) containing the per-second sensor record of an activity

b. How we use it

We use Garmin data to produce your training plan and daily coaching: to estimate readiness and accumulated load, to schedule and adapt sessions, to learn your thresholds and training zones, and to compare what you actually did against what was planned. These training decisions are computed deterministically on our own servers. Where we send workouts back to Garmin Connect so they appear on your watch, we do so only while you grant the workout import permission.

c. How it is processed and stored

Garmin data is stored in encrypted databases hosted on Amazon Web Services in the United States, encrypted in transit (TLS) and at rest, under access controls described in Section 6.

d. Third parties that process Garmin data

We do not sell Garmin data, and we do not share it for advertising. We use no analytics, attribution, or crash-reporting service that receives it. Garmin data is processed by the following third parties, and no others:

Anthropic (AI processing). OmniCoach uses Anthropic's Claude models to write coaching text and conversation replies. To do that, we send a summary of your recent training and physiology — which includes values originating from your Garmin device. Specifically, these requests may contain: your age; recent daily metrics such as steps, resting heart rate, stress, and Body Battery; sleep scores and sleep-stage durations; heart rate variability readings; the type, date, duration, and training effect of recent activities; and any text you have written to the coach yourself. These requests do not contain your name, email address, account identifier, date of birth, sex, weight, GPS or location data, or the per-second sensor samples from your activity files. Under Anthropic's commercial terms, data submitted through its API is not used to train its models.
Amazon Web Services (hosting and email). AWS hosts our servers and databases in the United States, and delivers our email through Amazon SES.
Apple (notifications and dictation). If you enable push notifications, the notification text we send through Apple's Push Notification service may quote your metrics — for example, a coaching note referring to last night's sleep score. If you dictate a voice note, iOS speech recognition may process that audio on Apple's servers rather than on your device.

Separately, if you choose to connect a third-party client to OmniCoach using an API key you generate, that client can retrieve your health data through our API. That is under your control, and you can revoke it at any time.

e. Disconnecting Garmin, and deletion

You can disconnect Garmin at any time, either in OmniCoach's settings or from Garmin Connect's connected-apps screen. Either way, Garmin notifies us through its deregistration endpoint and we delete the stored authorization for your account, stop receiving new Garmin data, and stop sending workouts to your watch. You can also change which categories of data you share at any time in Garmin Connect; Garmin notifies us of that change and we honor it. Garmin data we already received is retained while your account is active, and you may request its deletion at any time under Section 9.

4. How We Use Your Information

Personalized coaching: Generate training recommendations based on your total physical load
Service operation: Authenticate your account, sync data, and deliver core functionality
Improvement: Analyze usage patterns to improve the Service (in aggregate, non-identifiable form)
Communication: Send service-related notifications and respond to support requests

6. Data Storage & Security

Your data is stored in encrypted databases hosted on Amazon Web Services (AWS) in the United States. We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. While no system is 100% secure, we take reasonable measures to protect your information.

7. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Upon deletion, your data will be permanently removed from our systems within 30 days, except where retention is required by law.

8. Third-Party Services

The Service integrates with Garmin Connect via the Garmin Health, Activity, and Training APIs. Your use of Garmin Connect is governed by Garmin's Privacy Policy. We only access Garmin data that you explicitly authorize through the OAuth connection flow. The Service also integrates with Apple Health, governed by Apple's privacy policy.

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Disconnect your Garmin account at any time
Withdraw consent for data processing

To exercise any of these rights, contact us at martin@dichotomy.ai.

10. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Dichotomy.ai
Email: martin@dichotomy.ai