私隱政策

生效日期：2026 年 10 月 7 日

本譯本僅為方便閱讀而提供。如與英文版本有任何歧異，概以英文版本為準。

1. 引言

OmniCoach（「本公司」、「我們」或「我們的」）由 Dichotomy.ai 營運。本私隱政策說明閣下使用本公司的流動應用程式及網站（統稱「服務」）時，本公司如何收集、使用、披露及保護閣下的資料。閣下使用服務，即表示同意本政策所述的做法。

2. 本公司收集的資料

本公司收集以下類別的資料：

a. 帳戶資料

電郵地址
姓名（如有提供）
身分驗證憑證
出生日期，僅用於推算閣下的年齡以作訓練計算

b. 健康及健體資料

健康及健體資料經由 Garmin Connect、Apple Health 或閣下自行輸入的內容傳送至 OmniCoach。第 3 節完整說明 Garmin Connect 資料。

c. 使用資料

應用程式互動及功能使用情況
裝置類型及作業系統
記錄對本公司 API 所作請求的伺服器日誌，為確保可靠性及保安而短期保留

d. 閣下輸入的懷孕資料

如閣下開啟懷孕模式，我們只會儲存閣下的預產期，不會儲存任何其他有關懷孕的資料。我們只會用它來調整閣下的訓練計劃：較輕鬆的訓練、不安排比賽，以及可選的懷孕後期訓練。它絕不會傳送給 AI 服務供應商，亦不會與任何其他第三方分享，只會儲存在我們自己的伺服器上（第 6 節）。閣下關閉懷孕模式時，它會被刪除；閣下刪除帳戶時，它會連同閣下的其他資料一併刪除（第 7 節）。

第 3 節以英文顯示，並為本公司處理 Garmin 資料方式的具權威性說明。

3. Garmin Connect Data

This section describes specifically how data from Garmin Connect is collected, used, processed, stored, and shared. It applies whenever you have connected a Garmin account to OmniCoach.

a. What we collect, and how

We receive Garmin data only after you authorize it through Garmin Connect's OAuth consent flow, and only the categories you grant there. Garmin sends this data to our servers by webhook notification; we do not poll Garmin for it. Depending on your device, watch settings, and the permissions you grant, this can include:

Daily activity summaries — steps, calories, active minutes, resting heart rate, stress
Sleep — duration, sleep stages, and sleep score
Body Battery energy monitoring
Heart rate variability, pulse oximetry, and respiration
VO2 max and fitness age
Body composition, if you use a connected Garmin scale
Activities and activity details — type, duration, distance, pace, heart rate, power, and GPS track
Activity files (FIT) containing the per-second sensor record of an activity

b. How we use it

We use Garmin data to produce your training plan and daily coaching: to estimate readiness and accumulated load, to schedule and adapt sessions, to learn your thresholds and training zones, and to compare what you actually did against what was planned. These training decisions are computed deterministically on our own servers. Where we send workouts back to Garmin Connect so they appear on your watch, we do so only while you grant the workout import permission.

c. How it is processed and stored

Garmin data is stored in encrypted databases hosted on Amazon Web Services in the United States, encrypted in transit (TLS) and at rest, under access controls described in Section 6.

d. Third parties that process Garmin data

We do not sell Garmin data, and we do not share it for advertising. We use no analytics, attribution, or crash-reporting service that receives it. Garmin data is processed by the following third parties, and no others:

Anthropic (AI processing). OmniCoach uses Anthropic's Claude models to write coaching text and conversation replies. To do that, we send a summary of your recent training and physiology — which includes values originating from your Garmin device. Specifically, these requests may contain: your age; recent daily metrics such as steps, resting heart rate, stress, and Body Battery; sleep scores and sleep-stage durations; heart rate variability readings; the type, date, duration, and training effect of recent activities; and any text you have written to the coach yourself. These requests do not contain your name, email address, account identifier, date of birth, sex, weight, GPS or location data, or the per-second sensor samples from your activity files. Under Anthropic's commercial terms, data submitted through its API is not used to train its models.
Amazon Web Services (hosting and email). AWS hosts our servers and databases in the United States, and delivers our email through Amazon SES.
Apple (notifications and dictation). If you enable push notifications, the notification text we send through Apple's Push Notification service may quote your metrics — for example, a coaching note referring to last night's sleep score. If you dictate a voice note, iOS speech recognition may process that audio on Apple's servers rather than on your device.

Separately, if you choose to connect a third-party client to OmniCoach using an API key you generate, that client can retrieve your health data through our API. That is under your control, and you can revoke it at any time.

e. Disconnecting Garmin, and deletion

You can disconnect Garmin at any time, either in OmniCoach's settings or from Garmin Connect's connected-apps screen. Either way, Garmin notifies us through its deregistration endpoint and we delete the stored authorization for your account, stop receiving new Garmin data, and stop sending workouts to your watch. You can also change which categories of data you share at any time in Garmin Connect; Garmin notifies us of that change and we honor it. Garmin data we already received is retained while your account is active, and you may request its deletion at any time under Section 9.

4. 本公司如何使用閣下的資料

個人化教練指導：根據閣下的整體身體負荷生成訓練建議
服務運作：驗證閣下的帳戶、同步資料及提供核心功能
改進：分析使用模式以改進服務（以匯總及無法識別個人身分的形式）
通訊：發送與服務相關的通知及回覆支援請求

6. 資料儲存及保安

閣下的資料儲存於由 Amazon Web Services (AWS) 在美國託管的加密資料庫內。本公司採用業界標準的保安措施，包括傳輸中加密（TLS）及靜態加密、存取控制，以及定期保安審查。雖然沒有任何系統能做到 100% 安全，但本公司會採取合理措施保護閣下的資料。

7. 資料保留

只要閣下的帳戶仍然有效，本公司便會保留閣下的資料。閣下可隨時聯絡本公司，要求刪除閣下的帳戶及相關資料。刪除後，閣下的資料將於 30 天內從本公司的系統中永久移除，惟法律規定須保留者除外。

8. 第三方服務

服務透過 Garmin Health、Activity 及 Training API 與 Garmin Connect 整合。閣下對 Garmin Connect 的使用受 Garmin 私隱政策規管。本公司只會存取閣下透過 OAuth 連接流程明確授權的 Garmin 資料。服務亦與 Apple Health 整合，後者受 Apple 的私隱政策規管。

9. 閣下的權利

閣下有權：

查閱本公司持有關於閣下的個人資料
要求更正不準確的資料
要求刪除閣下的資料
隨時中斷連接閣下的 Garmin 帳戶
撤回對資料處理的同意

如欲行使上述任何權利，請透過 martin@dichotomy.ai 聯絡本公司。

10. 兒童私隱

服務並非供 13 歲以下用戶使用。本公司不會在知情的情況下收集 13 歲以下兒童的個人資料。如本公司得悉曾收集此類資料，將採取步驟從速刪除。

11. 本政策的修改

本公司可不時更新本私隱政策。如有重大修改，本公司將於本頁發佈更新後的政策並更新生效日期，以通知閣下。修改後閣下繼續使用服務，即表示閣下接受更新後的政策。

12. 聯絡我們

如閣下對本私隱政策或本公司的資料處理方式有任何疑問，請透過以下方式聯絡本公司：

Dichotomy.ai
電郵：martin@dichotomy.ai