Privacy and data
AI Aero Coach handles information only to the extent needed to support your own training decisions. This policy takes effect when the service is provided.
Information we handle
We handle the identifier supplied by ChatGPT sign-in; your profile and weight history; activity metrics extracted from FIT files; morning self-reported condition; strength training; race plans; AI Coach conversations; aero-analysis photos and results; news choices; friend requests; and sharing settings. Sweat-rate trial weights, fluid, urine and calculated results stay in the current browser and are not sent to or stored by Iris. We also do not store the original FIT file, card number, or card security code in Iris.
Why we use it and AI data minimization
We use this information for aero analysis, training logs, conditioning views, AI Coach suggestions, and protection from abuse. Each time you send an AI Coach question, Iris sends the current question and only the needed non-heart-rate FIT, race, strength, aero, and other training context. Exact activity and aero-analysis times are reduced to calendar dates; profile time zone, event names and course notes, strength-session titles, and duplicate confirmation-card copy are not sent. Saved recovery, HRV, resting heart rate, body measurements and weight, record-map health coverage, and prior question trends are excluded by default. They are included only when you explicitly select the per-answer checkbox. Per-answer answer-only mode keeps that ordinary question, response, and response-context summary out of Iris chat history, so they disappear from the screen after reload. It still sends the current question and minimized context to external AI and counts against plan and abuse-prevention limits. Both choices reset to off after sending. Even when health context is selected, Iris excludes database and owner IDs, FIT filenames and hashes, private-storage keys, pose landmarks, free-text recovery, weight, and strength notes, and the original text of earlier questions. A question matching urgent-warning phrases such as chest pain, fainting, or severe breathing difficulty is handled by a language-specific safety rule before plan and request limits. It does not use external AI or saved athlete records, and the question and response are not stored in chat history. A response escalated by the external AI structured-safety contract is also not stored. AI-answer ratings are linked to a saved response identifier and score; rating an answer does not create a separate copy of its text, and answer-only responses cannot be rated. Question patterns are not used to diagnose personality, psychology, or health. We do not use your photos or health-related entries to train models without separate consent.
Private by default
Records are separated by authenticated user. Friend connections require a request and mutual approval. Aero analyses and training logs are private by default and are shown to approved friends only if you choose to share them. Weight, recovery, photos, and conversations with Iris are never shared with friends.
Retention, export, and deletion
We keep records for the period needed to provide the service, or until you delete them. Aero photos are stored privately. Your portable JSON export excludes internal user IDs, FIT fingerprints, private-storage keys, processing tokens, Stripe identifiers, and image binaries. Records and photos previously saved through the retired nutrition feature are no longer used for new analysis or suggestions. Meal records and photo metadata are included in your export; image binaries are removed during full deletion. You can export or delete Iris records, conversations, photos, and friend connections from settings. If you have a paid subscription, cancellation through Stripe must be completed before deletion.
Minimal retention of payment-processing metadata
Stripe webhook event IDs, types, modes, event times, and processing times used to prevent duplicate processing are deleted after 90 days. Short-lived reconciliation leases are deleted after expiry. Iris does not store card numbers, security codes, or webhook bodies.
Estimates and external services
Aero posture is an estimate and does not establish information that is not visible or directly measured. Its score is alignment with product-configured comparison bands plus capture quality; the bands are not validated elite norms, a personal optimum, measured CdA, or a bike-fit prescription. The record map only counts whether existing records are present; it does not estimate ability, talent, recovery state, aero performance, injury, or adaptation. Weekly-time comparison is arithmetic calendar time, not a prediction of training load or performance. Iris uses external services for authentication, hosting, AI responses, image analysis, and news. Their infrastructure may be outside Japan. Stripe hosts payment screens; Iris stores only customer or subscription identifiers, subscription status, and scheduled cancellation information.
Health and security
Displayed information is not medical diagnosis. Stop exercising and contact a qualified professional or local emergency services if pain, abnormal symptoms, or an emergency occurs. We combine encrypted transport, authentication, private storage, same-site request checks, signed webhook verification, rate limits, and input validation, but no Internet service can be absolutely secure.