Privacy Policy
Last updated: 29 July 2026
This policy explains which data WheelPower (“the app”) collects, why, and your rights. By using the app, you accept these practices.
1. Data controller
The app is published by Gillian KOHLER CHATELAIN, 10 Avenue des Romains, 74200 Thonon-les-Bains, France. For any question: contact.wheelpowerapp@gmail.com.
2. Data we process
Account
Email address (and name if you provide it at sign-in). Used to create and secure your account.
Training data
Your activities (power, heart rate, cadence, speed, distance, elevation, duration, location if present), your planned sessions and your athlete and personal profile (FTP, weight, sex, max HR, goal), used among other things to estimate your basal metabolic rate and nutritional needs.
Third-party connections
You can connect WheelPower to third-party services — Strava, Garmin, Wahoo, COROS, Hammerhead, Intervals.icu, Apple Health, Apple Calendar, Google Calendar — to import your activities, health or calendar. The data exchanged is strictly that which matches the permissions you grant at the time of linking: the scope of sharing is defined when you connect each service, and you can revoke it at any time (in WheelPower or directly with the service concerned).
Health data (Apple Health / HealthKit)
With your permission, the app reads from Apple Health your heart rate variability (HRV), sleep, resting heart rate, weight and VO₂ max (maximal oxygen uptake), to compute your fitness and recovery scores and track your cardio progression. This data is stored on our servers (Supabase, in the European Union) to track it over time; HRV, sleep and weight may also be sent to our AI provider (Anthropic) only when you use the Clémence coach, to personalise its advice. WheelPower does not write to Apple Health and never uses this data for advertising. This is health data, a special category of data under Article 9 of the GDPR: it is processed solely on the basis of your explicit consent, which you can withdraw at any time (by disconnecting Apple Health in the app, or via iOS Settings → Privacy → Health).
Conversations with the AI coach (Clémence)
Your messages to the coach and the relevant training/recovery data are sent to our AI provider (Anthropic) to generate personalized answers. A memory summary may be kept for coaching continuity.
Technical data
Information strictly necessary for operation (technical identifiers, error logs), as well as your push notification token (APNs) and the app language, so we can send you notifications in your language. WheelPower uses no advertising tracking and no advertising identifier (IDFA).
Food search, barcode scanning and camera
To help you log a food item, the app queries Open Food Facts, a cooperative and open nutrition database (ODbL licence), in two ways: by scanning a product's barcode, or by searching for a product by name. In the first case only the barcode read is sent; in the second, only the text you type along with the app's language. The product photos shown in the results and in your log are downloaded from Open Food Facts servers. No personal data and no information linked to your account is transmitted: neither a product's barcode nor a search term is personal data. The returned values are indicative and editable.
The camera serves two purposes. For barcode scanning, no image leaves your phone: only the barcode is sent to Open Food Facts. For photo-based nutrition estimation, the photo you take (or pick from your library) is sent to our servers and then to Anthropic, which analyses it to derive indicative nutritional values; it is neither stored nor used to train a model, and is discarded after the analysis. Both features are optional: you can decline camera access and enter the food manually, and manage this permission at any time in iOS Settings → Privacy → Camera.
Location and weather
If you allow it, the app uses your approximate location to show the weather where you ride (temperature, wind) and to adapt your hydration target to the day's temperature. The coordinates — or, failing that, the city name set in your profile — are sent to the third-party service Open-Meteo, which returns the matching weather data. No identifier and no information linked to your account accompanies this request, and your location is neither stored on our servers nor kept in any history. Location is optional: you can decline it (the app then uses your profile city, or shows no weather) and manage this permission at any time in iOS Settings → Privacy → Location Services.
Data stored only on your device
Nutrition: your goal, your activity level, your dietary preference, your height, your age, the detail of your food diary and your personal food library are stored only on your device, are never transmitted, and are deleted when you log out. However, your daily totals (calories, carbs, protein, fat, fibre) are synced to our servers so they are available on your other devices, and the AI coach can consult them to judge whether your nutrition supports your training load. These totals are erased along with your account.
3. Purposes & legal basis
- Provide the service (analysis, coaching, planning) — performance of the contract.
- Read your health data — your consent (revocable in iOS Settings).
- Manage your subscription — performance of the contract.
4. Recipients & processors
- Supabase — hosting and database.
- Anthropic — processing of AI coach conversations, of the training and recovery data submitted to it, and of food photos sent for nutritional estimation (no retention, no model training).
- Connected services (Strava, Garmin, Wahoo, COROS, Hammerhead, Intervals.icu, Apple Health, Apple Calendar, Google Calendar) — only if you connect them, and according to the permissions granted at linking.
- Apple — payments and subscription management, and delivery of push notifications (APNs).
- Open Food Facts — open nutrition database (ODbL), queried when you scan a barcode or search a food by name, and which provides the product photos; no personal data is transmitted to it.
- Open-Meteo — open weather service, queried to show the weather for your ride and adapt your hydration target; receives an approximate location or a city name, with no identifier or account data.
We never sell your data.
5. Transfers outside the EU
Some providers (e.g. Anthropic, Apple) may process data in the United States. These transfers are governed by appropriate safeguards (standard contractual clauses).
6. Retention
Your data is kept as long as your account is active. You can delete your account at any time from the app (Settings → Account → Delete my account): all your data (activities, sessions, health, conversations, profile, account) — including the AI coach's memory (coaching summary) — is then erased.
7. Your rights (GDPR)
You have the rights of access, rectification, erasure, portability, restriction and objection. You can exercise them directly in the app (export and deletion in Settings → Privacy) or by writing to contact.wheelpowerapp@gmail.com. You may also lodge a complaint with your local data protection authority (in France, the CNIL — cnil.fr).
8. Security
Communications are encrypted (HTTPS) and access to data is restricted. No system is infallible, but we implement reasonable measures to protect your information.
9. Minors
The app is intended for people aged 13 and over. For minors, data processing may require the authorization of a parent or guardian, in accordance with applicable law (in France, under 15).
10. Changes
This policy may evolve. The date at the top of the page indicates the latest update.