Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how Boulie collects, uses, discloses, and protects personal information when you use the Boulie mobile application, website, and coaching connector services.

What Boulie Does

Boulie is the athlete-facing record and planning system used by a coach you choose. It stores your athlete profile, goals, agreed training plan, workout details, and coaching record.

Boulie does not currently operate an in-app large language model or host your coaching conversation. If you connect an external AI client, such as ChatGPT or Claude, that client can use Boulie's connector to read or update your Boulie record within the permissions you approve. Your conversation remains with that provider. Boulie receives the tool requests the client sends and the information it submits for storage in your Boulie record; it does not retrieve your full conversation history.

Information We Collect

Depending on how you use Boulie, we may collect and hold:

• Account information: your email address, name, authentication records, timezone, and account timestamps.
• Optional profile information: your date of birth and selected profile photo.
• Training preferences: your selected sports, daily availability, weekly training hours, and recurring workouts. Existing records may also include training background, experience, and available equipment.
• Training reference values: cycling functional threshold power (FTP), running threshold pace, and maximum heart rate, used to calculate workout targets. A connected coaching client can also submit an optional sport-specific lactate-threshold heart rate (LTHR) reference.
• Goals, plans, and workouts: event or training goals, dates, performance targets, planned sessions, workout previews, workout targets and structure, planned training load, notes, completion status, and changes made to your plan.
• Coaching record and performance evidence: coach notes, rationales, athlete feedback, training judgments, and optional compact evidence saved to explain a review. Evidence can include an activity reference, duration, distance, elevation, power, pace, average or maximum heart rate, and perceived effort. Performance benchmarks can include peak cycling power and running performance results, with their dates and relevant training conditions.
• Connection information: the coaching client you authorise, its approved read or write permissions, authorisation status, and when the connection was last used.
• Support information: information you include when you contact us for support or make a privacy request.
• Technical and diagnostic information: IP address, device and operating-system information, app version, request metadata, crash details, and diagnostic logs used to investigate errors and protect the service. Mobile-app error reporting may include your account identifier and email address to associate a fault with the affected account. Diagnostic session replay is disabled in the current app.

Fitness information, including heart-rate references and training evidence, can be sensitive personal information. Boulie uses these values for sport-specific workout targets, training reviews, and performance comparisons. You can choose which reference values to supply; not every value is needed for every workout, and perceived-effort targets can be used without heart-rate references.

The current app has no dedicated fields for body weight, gender, diagnoses, medications, or medical records. Boulie is designed for fitness training, not diagnosis or treatment. Please keep free-text notes and information submitted through a coaching client relevant to your training; do not submit medical records, payment-card details, government identifiers, or authentication secrets through coaching tools. Free-text fields can contain additional personal information if you or your coaching client include it.

If you choose a profile photo, Boulie receives only the image you select through your device's photo picker, not your entire photo library.

How We Collect Information

We collect information directly from you when you create an account, complete or edit your Brief, add notes, choose a photo, or contact us. We also receive information when an external coaching client uses Boulie's connector after you authorise it.

Boulie does not currently connect directly to Strava or copy your raw Strava activity history, GPS routes, streams, or laps into Boulie. If you separately connect Strava to your AI client, that provider may read your Strava information under the permissions you grant. Your coach may then save a compact coaching judgment or limited supporting figures to Boulie. Those saved items become part of your Boulie coaching record.

ChatGPT, Claude, and Coaching Connectors

Connecting an AI client to Boulie through the Model Context Protocol (MCP) is optional. You sign in through Boulie's authorisation page, which identifies the client and the requested read or write permissions. Boulie does not ask you to give your sign-in code, password, or connector credentials to the assistant in chat or through a coaching tool.

Depending on the tool used, read access lets the connected client receive:

• Your name, timezone, relevant training preferences and background, availability, training reference values, and performance benchmarks.
• Your active goals, week-level training structure, planned sessions, workout targets, and plan changes.
• Your coaching notes, saved athlete context, training reviews, athlete feedback, and supporting summary evidence relevant to the tool request.

The current coaching-context tool does not return your account email, date of birth, or profile photo. Training and coaching notes are free text, so other personal information may be shared if it was included in those notes.

Write access lets the client prepare workout previews and submit goals, plan changes, training reviews, reference-value updates, benchmarks, and coaching notes for storage in Boulie. Saved information may be returned to an authorised client in a later coaching interaction. This is how your training record continues across conversations; it does not give Boulie access to the client's full chat history.

You can disconnect Boulie in the AI client's settings to stop that client using the connector. Contact us if you also want the Boulie connection record revoked. Disconnection does not delete information already saved in Boulie or held by the AI provider. You can delete your Boulie account in the app or contact us about access, correction, export, or deletion of your record.

How We Use Your Information

We use personal information to:

• Create and authenticate your account using passwordless email codes.
• Store and display your athlete Brief, goals, training plan, workouts, and coaching record.
• Calculate workout targets, validate plan structure, and apply training safety checks.
• Allow an external coaching client to use the read or write permissions you approve.
• Keep a record of plan changes and their source so you can understand what changed.
• Provide support, maintain service reliability, diagnose faults, prevent misuse, and protect accounts.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, use it for targeted advertising, or use your Boulie record to train a Boulie-owned AI model.

External Providers and Strava

Information sent to or entered in an external AI client is handled under that provider's terms, privacy policy, and applicable account settings. See OpenAI's Privacy Policy for ChatGPT and Anthropic's Privacy Policy for Claude. Review your chosen provider's policies and settings before connecting or sharing fitness information. Boulie does not control that provider's independent data retention or model-training practices.

Strava is also an independent service. If you choose to connect it to your AI client, that connection is governed by Strava's Privacy Policy and the AI provider's policy. Boulie does not receive your Strava password or manage that Strava connection.

Service Providers and Disclosure

We disclose information only where needed to operate Boulie, at your direction, or where required by law. Our main service providers are:

• Supabase: account authentication, email sign-in, database, and file storage. See Supabase's Privacy Policy.
• Cloudflare: website delivery, connector authentication and routing, rate limiting, and operational logging. See Cloudflare's Privacy Policy.
• Sentry: mobile-app crash reporting, diagnostic logs, and account-linked error investigation. Diagnostic session replay is disabled. See Sentry's Privacy Policy.
• Your authorised coaching client: Boulie record data returned in response to connector tools you approve.

We require service providers acting on our behalf to protect personal information consistently with this Policy and applicable law. Independently connected services, including an AI provider or Strava, control their own processing under the permissions you give them and their published privacy terms.

We may also disclose information if reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, investigate misuse, or complete a business reorganisation subject to appropriate confidentiality protections.

Overseas Processing

Boulie is operated from Australia. Our service providers operate global infrastructure, and personal information may be processed in Australia, the United States, and other countries where those providers operate. Privacy protections may differ between countries. We take reasonable steps to use reputable providers and protect information in accordance with this Policy and applicable Australian privacy law.

Storage and Security

We use safeguards including encrypted network connections, account authentication, scoped connector permissions, database access controls, and service monitoring. No online service can guarantee absolute security, so you should also protect access to your email account and connected services.

Retention and Deletion

We retain your profile, goals, plans, workout previews, training reference history, benchmarks, and coaching record while your account remains active, until you delete the account or we action a deletion request. Replaced coaching judgments and earlier plan changes remain in that record so you can understand and correct past decisions.

A prepared workout draft expires for use after 24 hours. Expiry prevents it being used to commit a workout; it does not itself delete the stored draft. We retain connection, diagnostic, security, and support records only for as long as reasonably needed for those purposes.

You can permanently delete your account from Profile in the Boulie app. Choosing Delete account removes your active account and associated Boulie data, including your profile, coaching record, plans, imported activity data, profile photos, and connected-service credentials. Limited copies may remain temporarily in protected backups and provider logs until they expire under normal retention schedules, and we may retain specific information where required for legal, fraud-prevention, security, or dispute-resolution purposes.

Deleting your Boulie account does not delete information held independently by an AI or activity provider. You must manage that information with the relevant provider.

Your Choices and Rights

You can:

• Review and edit much of your profile and training information in the app.
• Disconnect Boulie from your AI client's connector settings to stop that client using Boulie, and contact us if you want the Boulie connection record revoked.
• Ask for access to or correction of your personal information.
• Request a copy of your Boulie record in a reasonable, usable format.
• Request deletion of your account and associated Boulie data.
• Raise a privacy question or complaint.

Send requests to [email protected]. We may need to verify your identity before completing a request. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Legacy Beta Data

Some early beta accounts may contain information imported through device integrations that are no longer offered in the current Boulie experience. We do not use those retired integrations to collect new data. You may ask us to delete any legacy integration data associated with your account.

Children's Privacy

Boulie is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy as Boulie changes. We will post the revised Policy here, update the date above, and provide additional notice where a change materially affects how we handle personal information.

Contact

For privacy questions, requests, or complaints, email [email protected].