Privacy Policy

What we collect

• Account details: your name and email, and a securely hashed password if you sign up with email rather than Google, Apple, or Strava.
• Workout data you submit: screenshots you upload and any metrics you enter yourself (heart rate, distance, calories, steps, exercises and weights). We never pull this automatically from any connected account.
• AI generated analysis: the ratings, summaries, and advice produced from the data above, plus your badges, challenges, and dashboard history.
• Payment records: your credit balance and purchase history. Stripe handles your card details directly; we never see or store them.
• Basic technical data: IP address and browser information, used only for security, abuse prevention, and rate limiting.

How we use it

We process your data to run the service you've signed up for: generating your workout analysis, tracking challenges and badges, showing your dashboard, and taking payment when you buy more credits. We also use it for account emails (you can turn off summaries you don't need from your profile page), and for basic fraud and abuse prevention on sign in and analysis requests.

We do not sell your personal data, and we do not use it for advertising.

Who we share it with

We use a small number of service providers to run Rate My Training. Each only receives what it needs to do its job:

• Anthropic: receives your submitted screenshots and metrics to generate your workout analysis.
• Stripe: processes credit pack payments.
• Microsoft Azure: stores uploaded screenshots and hosts our infrastructure and monitoring.
• Resend: delivers account and summary emails on our behalf.
• Google: provides reCAPTCHA bot protection on sign in, and Google Sign In if you choose to use it.
• Apple: provides Sign in with Apple if you choose to use it.
• Strava: provides Strava sign in if you choose to use it.

See our sign in & data FAQ for exactly what each of these three sign in options shares with us.

Some of these providers process data outside the UK/EEA (for example, in the United States). Where that happens, they do so under appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

We keep your account and workout data for as long as your account is active. You can delete individual workout entries at any time from your dashboard. To close your account entirely, see Your rights below.

Cookies

We use one essential cookie to keep you signed in, which is required for the service to work and isn't optional. With your consent, asked for via the cookie banner on your first visit, we also use analytics cookies (Microsoft Application Insights) to understand how the app is used. You can decline these, and change your choice at any time; declining removes those cookies immediately.

Your rights

Under UK GDPR, you have the right to access, correct, export, or delete your personal data, and to object to certain uses of it. To do any of these, including requesting a copy of your data or deleting your account entirely, email support@ratemytraining.co.uk from your account email address. We'll respond within one month.

If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Age requirement

Rate My Training is intended for users aged 16 and over. We don't knowingly collect data from anyone younger.

Changes to this policy

If we make material changes to how we handle your data, we'll update this page and, where appropriate, notify you directly.

Contact

Questions about this policy or your data? Email support@ratemytraining.co.uk.