Privacy Policy — Will Powered

This is the privacy policy for Will Powered (“Will”, “we”, “us”). It explains what personal data we collect when you use the service at willpowered.club, what we do with it, and the rights you have over it. If anything here is unclear, email us at hello@willpowered.club.

Who we are

Will Powered is operated from the United Kingdom. We act as the data controller for the personal data described below.

What data we collect

Account information: the name and email address you provide when you register. Passwords are stored as a one-way hash; we never see or store your password in plain text.
Profile and preferences: any details you add during onboarding (e.g. activity goals, training preferences, unit preferences) and your chosen theme (light/dark).
Connected services: if you choose to link a third-party account (Strava, Google Calendar, Fitbit, Concept2, Wahoo, Peloton, Garmin), we receive activity data, calendar events, and biometric metrics from those services. We store an encrypted access token so we can keep that data in sync. You can disconnect any service at any time from Settings → Connections.
Activity and biomarker data: workouts, distances, durations, paces, heart rate, sleep, and similar metrics, plus anything you log directly in the app.
Conversations with Will: the questions you ask the AI coach and the replies it generates, plus the derived insights and digests.
Operational logs: minimal request and error logs (timestamp, route, status code) used to keep the service running. These are kept for a short period and rotated.

How we use it

To provide the core training-companion features.
To generate personalised coaching, insights, and adapted training plans.
To keep your connected services in sync and respond to webhooks from those services.
To send transactional email (e.g. password reset) where you have explicitly requested it.
To diagnose problems and keep the service secure.

We do not sell your personal data. We do not use it for advertising. We do not share it with third parties except as described below.

Third parties we use

To deliver the service we share the minimum data required with:

Anthropic — powers the AI coach. Your questions and the relevant context (your recent activities, preferences) are sent to Anthropic so it can generate a reply. Anthropic processes this under their terms and does not use the data to train their models.
OAuth login providers (Google, Meta) — only when you choose to sign in via one of them. We receive your name and email from the provider; we do not see your provider password.
Connected fitness services — Strava, Google Calendar, Fitbit, Concept2, Wahoo, Peloton, Garmin. Each connection is initiated by you and limited to the scopes needed for sync.
Email — transactional emails (e.g. password reset) are delivered via our SMTP provider.

Where it’s stored

Your data is stored in our database in the United Kingdom. OAuth access tokens are encrypted at rest with AES-256-GCM before being written to the database.

Your rights

Under UK GDPR you can ask us to:

Confirm what personal data we hold about you.
Provide a copy of that data in a portable format.
Correct anything that’s inaccurate.
Delete your account and the personal data associated with it.
Restrict or object to certain processing.
Withdraw consent at any time (for anything done on the basis of consent).

To exercise any of these, email us at hello@willpowered.club. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

Cookies and similar technologies

We use a small number of cookies and browser-storage values:

A session cookie that keeps you signed in. Without it, the service can’t work.
Short-lived cookies during OAuth flows (state values). These expire within minutes.
Local storage for your theme preference (light, dark, or system).

We do not use advertising or third-party tracking cookies.

Children

Will Powered is not intended for children under 16. If you believe a child has registered, please email us and we will remove the account.

Changes to this policy

We may update this policy as the service evolves. The “Last updated” date at the top reflects the most recent revision. Material changes will be flagged in-app or by email.

Contact

Questions, requests, or concerns: hello@willpowered.club.