Privacy Policy
Last updated: 11 November 2026 · Version française (the French version prevails in case of discrepancy)
- Who is responsible for your data?
- Summary
- Data we process
- Data from your watch (Garmin and other manufacturers)
- Why we use it, and on what legal basis
- How we use artificial intelligence
- Who can access your data
- Transfers outside the European Union
- How long we keep it
- Security
- Your rights
- Minimum age
- Cookies
- Changes to this policy
1. Who is responsible for your data?
The data controller is AVEO SOLUTIONS, publisher of Coach Forme.
- French limited liability company (SARL) registered with the Marseille Trade and Companies Register under number 892 691 296
- Registered office: 21 rue Haxo, 13001 Marseille, France
- Privacy contact: privacy@anetetu.fr
AVEO SOLUTIONS is not required to appoint a Data Protection Officer. The Coach Forme team handles all data requests directly.
2. Summary
- We use your data only to coach you: compute your daily readiness, build and adapt your plan, send you your workouts and answer your questions.
- We never sell your data, we show no advertising, and we do not use your data to train AI models.
- Your data is hosted in the European Union (Microsoft Azure).
- Your watch connects through the manufacturer's official access. We never see your password.
- You can disconnect your watch, export or delete your data at any time.
3. Data we process
| Category | Examples | Source |
|---|---|---|
| Account and contact | First name, email address, phone number (if you use messaging), language, time zone | You |
| Athlete profile | Year of birth, sex, height, weight, sports, goals and race dates, availability, training zones, available equipment | You, or derived from your activities |
| Health and wellness (sensitive data) | Sleep, heart rate variability (HRV), resting heart rate, stress, energy level, weight, reported pain and injuries, perceived fatigue | Your watch (with your consent) and you |
| Training | Activities (type, date, duration, distance, pace, heart rate, power, cadence, laps, elevation, GPS track), strength sessions, perceived effort | Your watch and you |
| Conversations | Messages exchanged with the coach | You and Coach Forme |
| Generated content | Daily readiness, plan, workouts, reviews, coach messages | Coach Forme |
| Technical data | Technical identifiers, access tokens (encrypted), error logs, timestamps | Our servers |
We do not collect payment data during the beta. When paid subscriptions open, payments will be processed by a specialised payment provider and we will never see your card number. This policy will be updated beforehand.
4. Data from your watch (Garmin and other manufacturers)
Connection
You connect your watch from Coach Forme. You are redirected to the manufacturer's sign-in page (for example Garmin Connect), where you choose which data to share. We receive an access token, never your password.
Garmin data we receive
- Activities: sport type, date, duration, distance, pace or speed, heart rate, power, cadence, laps, elevation, GPS track and activity file (.FIT).
- Daily health summaries: sleep and sleep stages, HRV, resting heart rate, stress, energy level (Body Battery), steps and calories.
We do not request access to women's health data (cycle, pregnancy).
Data we send to Garmin
With your consent, we send your structured workouts and plan to your Garmin Connect calendar so that they appear on your watch.
Our commitments for this data
- It is used solely to provide the coaching service. It is never sold, rented, used for advertising or used to train AI models.
- It is not shared with any third party, except the technical processors listed in section 7, which act only on our instructions.
- It is never transferred to another training platform or service.
- In the app, data from your watch is attributed to its source.
Disconnection
You can disconnect your watch at any time, from Coach Forme or from the manufacturer's app (in Garmin Connect: connected apps section). We then immediately stop receiving your data, and the data received from that manufacturer is deleted within 30 days.
Garmin, COROS and other manufacturers are responsible for the data kept in their own services, which is governed by their own privacy policies.
5. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, provide the coaching (daily readiness, plan, workouts, reviews, coach answers) | Performance of the contract (Art. 6(1)(b)) |
| Process your health data (sleep, HRV, heart rate, weight, pain) | Your explicit consent (Art. 9(2)(a)), collected at sign-up and when you connect your watch. You can withdraw it at any time, but the coaching can then no longer adapt to your readiness. |
| Send workouts to your watch | Performance of the contract and your consent when connecting your watch |
| Send you coach messages (morning briefing, review, reminders) | Performance of the contract. You can change the times or turn messages off. |
| Ensure security, prevent abuse, fix errors | Legitimate interest (Art. 6(1)(f)) |
| Measure technical usage (number of messages, errors), without health data | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations (invoicing, requests from authorities) | Legal obligation (Art. 6(1)(c)) |
6. How we use artificial intelligence
- You are interacting with an AI. Coach messages are generated automatically by a large language model (Azure OpenAI, hosted in the European Union).
- Clear rules. Your daily readiness is set by explicit rules (for example: HRV below your normal range and low recovery, so the session is made easier). The AI explains these rules and writes the workout.
- Minimal data. We only send the model what it needs to answer: your first name, athlete profile, recent data and your message. Never your email address or phone number.
- No model training. Neither Coach Forme nor Microsoft uses your data to train AI models. Microsoft may retain requests for up to 30 days solely for abuse monitoring.
- You stay in control. The coach's proposals are training suggestions. You can decline them, change them or ask for an explanation. No decision producing legal effects or similarly significantly affecting you is made automatically.
- Not medical advice. The AI can make mistakes. Coach Forme is not a medical device. If you have sharp, persistent or unusual pain, consult a healthcare professional.
7. Who can access your data
Only the Coach Forme team at AVEO SOLUTIONS accesses your data, and only when necessary (support, fixing an error). We use the following processors, bound by a data processing agreement under Article 28 GDPR:
| Processor | Role | Data location |
|---|---|---|
| Microsoft Ireland Operations Ltd (Microsoft Azure) | Application hosting (Azure Functions), data storage (Azure Storage / Azure Cosmos DB), secrets vault (Azure Key Vault), AI model (Azure OpenAI) | European Union (France / West Europe / Sweden regions) |
| Meta Platforms Ireland Ltd (WhatsApp Business Platform) | Sending and receiving coach messages, if you choose WhatsApp. These messages may contain training and recovery data. | European Union and United States |
| GitHub, Inc. | Hosting of this informational website only (no app user data) | United States |
| OVH SAS (MX Plan) | Receiving and sending contact and support emails | France |
If we add another messaging channel or processor, this list will be updated before it goes live. We may also disclose data to authorities where required by law.
8. Transfers outside the European Union
Application data is hosted in the European Union. If you use WhatsApp, Meta may process some data in the United States. These transfers are covered by the EU–US Data Privacy Framework and by the European Commission's Standard Contractual Clauses.
9. How long we keep it
| Data | Retention |
|---|---|
| Account, profile, training history and check-ins | While your account is active. Deleted within 30 days of account deletion. After 24 months of inactivity, your account is deleted after an email notice. |
| Data received from a watch manufacturer | While the watch is connected. Deleted within 30 days of disconnection or account deletion. |
| Conversations with the coach | Rolling 12 months |
| Technical logs | 90 days |
| Backups | Automatically erased no later than 30 days after the original data is deleted |
| Billing data (once the service is paid) | 10 years (accounting obligation) |
10. Security
- Encryption of data in transit (HTTPS/TLS) and at rest.
- Secrets and access tokens kept in an encrypted vault (Azure Key Vault). Resources accessed with managed identities, with no passwords stored in code.
- Access restricted to the Coach Forme team, with multi-factor authentication.
- No watch password is ever requested or stored.
- In the event of a personal data breach that poses a risk, we notify the French data protection authority (CNIL) within 72 hours and, where the risk is high, the people concerned.
11. Your rights
You have the following rights over your data: access, rectification, erasure, restriction of processing, portability (export of your data in a machine-readable format), objection, and withdrawal of consent at any time. Under French law, you can also give instructions on what happens to your data after your death.
To exercise your rights, email privacy@anetetu.fr. We reply within one month. You can also delete your account directly by writing "delete my account" to the coach.
If you believe your rights are not respected, you can lodge a complaint with the CNIL: www.cnil.fr/fr/plaintes · 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
12. Minimum age
Coach Forme is for people aged 18 and over.
13. Cookies
This website uses no cookies and no audience measurement tools. Like any website, our host (GitHub) records visitors' IP addresses in its technical logs for security purposes.
14. Changes to this policy
We may change this policy, for example when we add a watch brand or a feature. For significant changes, we will notify you before they take effect. The last-updated date is shown at the top of this page.