Privacy policy
In short
The club doesn't keep a database of members' training. Your plan, workouts, log, check-ins and chat are stored in your own browser and, if you choose, in a hidden folder in your own Google Drive. Some features send data to other services only when you use them: the AI coach (Anthropic), device sync (Google) and Concept2. This page explains exactly what goes where.
Who we are
Cotswold Sporting Club ("the club", "we") provides the free training app at cotswoldsportingclub.com. For anything about your data, email hello@csc.uk.com.
What is stored, and where
| Data | Where it's kept |
|---|---|
| Your profile, plan, workouts, training log, check-ins, badges, chat history, specialist-module records and safety-check results | In your browser on your device. The club doesn't receive or keep it. |
| A copy of the above, if you turn on device sync | A hidden app folder in your own Google Drive (see below). |
| Concept2 Logbook sign-in, if you connect it | An encrypted cookie in your browser. Our server passes your erg results straight to your device and keeps nothing. |
| Rate-limit and cost counters for the AI coach | On our web server: a scrambled code derived from your network address and the times of your messages, deleted within a day, and a running monthly cost total. No message content. |
| The club training library | On our web server: researched training plans for goals the app doesn't have built in (for example "Bodybuilding competition"), with their published references. It holds the goal's name and the research only, never anything about who asked for it. |
| Standard web server logs | Kept by our web host (names.co.uk), as for any website: network address, pages requested and browser type. |
Google Drive sync and Google user data
What we access: only if you choose Sync with Google Drive, the app asks Google for the drive.appdata permission. This lets the app create, read, update and delete its own single file (csc-training.json) in a hidden application-data folder in your Google Drive. It cannot see, open or change any of your other Drive files, and it doesn't access your name, email or contacts.
How we use it: solely to keep your training data the same across your devices. The file is read and written directly between your browser and Google. It is not sent to or stored on the club's server.
Sharing: we don't sell this data, use it for advertising, or let anyone at the club read it. The only onward transfer is the one you trigger: if you use the AI coach, the training summary it needs for that reply (which may include data that arrived via sync) is sent to Anthropic to write the reply, as described below.
Limited Use: Cotswold Sporting Club's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Automatic sync: so you don't have to sign in to Google every hour, Google gives the app a long-lived permission key for this one hidden file when you turn sync on. That key is sealed (encrypted) into a cookie on your own device; only our server can unlock it, and it uses it solely to get a fresh one-hour key from Google when your app asks. The server doesn't keep the key or any of your data, and your training file still travels directly between your device and Google.
Your control: Stop syncing cancels the permission key with Google and removes the cookie; or Delete my Google Drive copy (Progress → Your devices) removes the app's access or its file. You can also revoke access at any time at myaccount.google.com/permissions.
The AI coach
When you send a message to the AI coach, your message and the context needed for that reply are sent through our server to Anthropic, whose Claude model writes the reply. That context can include your training details (never your name), a summary of your plan and recent sessions, check-ins, and the status (not the answers) of any safety checks. Anthropic processes this under its privacy policy and commercial terms; API data isn't used to train its models unless an organisation opts in. Our server passes the reply back and doesn't keep the conversation.
If you turn on Let the coach search published research, the coach may run web searches on medical and sports-science sites. Search terms are written by the coach and must not include your personal details.
The club training library
If your goal isn't one of the app's built-in plans, the coach can offer to research one. If you tap Research it now, only the name of the goal is sent through our server to Anthropic's Claude, which searches medical and sports-science journals and official bodies. Each reference is then checked against PubMed or Crossref (the official register of journal articles); only the reference details are sent for that check. The resulting plan outline is saved in the club library so other members with the same goal can use it. Nothing about you is sent or stored as part of this, and the club doesn't record who asked.
Voice
If you tap the microphone to talk to the coach, your browser's own speech service turns your voice into text: in Chrome that's Google, and in Safari it's Apple, under their privacy terms. Only the resulting text is sent to the coach, as if you'd typed it. Reading replies aloud uses your device's built-in voice and doesn't send anything. The app doesn't record or keep audio.
Health information
Training data such as heart rate, weight, sleep and symptoms is personal. It stays on your device or in your Google Drive. Answers to the safety questions for specialist modules stay on your device; only "passed" or "check with your doctor" is ever shared with the AI coach. The app gives general coaching, not medical advice.
Cookies and other services
- The app uses your browser's local storage to save your data on your device. It doesn't use advertising or analytics cookies.
- Concept2 connection uses one essential, encrypted cookie.
- Fonts load from Google Fonts, and "Watch on YouTube" opens YouTube; their own privacy terms apply.
Your rights
Because the club doesn't hold your training data, you control it directly: Download all my data and Delete everything on this device are on the app's Privacy page, and Drive copies can be deleted as above. Under UK data protection law you can ask us about any data we do hold (such as server logs) at hello@csc.uk.com, and you can complain to the Information Commissioner's Office (ico.org.uk).
Age
The app is intended for people aged 13 and over. Specialist modules such as heat and altitude are for adults only.
Changes
We'll update this page if anything changes and show the date at the top.