Legal

Privacy policy

Last updated: 15 November 2026

Who is responsible

Manel Ortiz, independent endurance coach, Terrassa, Spain (“I”, “me”). Contact: mane_068@hotmail.com. I am the data controller for the Macro Flow app.

What data I collect

• Account: name, email address and password (stored only as a secure hash by the authentication provider).
• Training data you or your coach enter: thresholds (threshold pace, FTP, swim CSS, threshold and maximum heart rate), planned workouts, comments.
• Watch data, only if you connect that account yourself (Garmin, and the same for Polar, COROS, Wahoo and any other service shown in the app): the workouts sent to your Garmin Connect calendar, and your completed activities: summary (time, distance, heart rate, pace, power and similar metrics) and, for detailed analysis, the second-by-second recording, including the GPS route.

Heart rate and training data are health-related data. I process them only with your explicit consent, given when you create your account and again each time you connect a watch service, and you can withdraw it at any time.

Why I use it

• To plan your training and send workouts to your watch.
• To compare what you did with what was planned and give you feedback.

I do not sell your data, use it for advertising, or share it with anyone other than the providers listed below.

Who processes it for me

• Supabase (database and authentication), servers in the European Union (Frankfurt).
• Garmin, only if you connect your account: to deliver workouts to your watch and to receive your activities. Garmin’s own privacy policy applies to your Garmin account.
• Expo (app delivery and, if enabled, push notifications). Expo does not receive Garmin data.

Garmin data in particular

• How it is used: planned workouts are sent to your Garmin Connect calendar so they sync to your watch; your completed activities are received only to compare them with the plan and to show them to you and your coach, labelled with the Garmin device they came from.
• Who receives or processes it: only Supabase, which hosts the database in the EU. No other hosting provider, integration partner, technology vendor or data-processing service receives Garmin data.
• Selling and sharing: Garmin data is never sold, and never shared with any third party other than Supabase as described above.
• Artificial intelligence: Garmin activity files, GPS tracks and heart-rate streams are never sent to any AI system. When you or your coach ask for a proposed training week, a small summary of numbers is sent to Anthropic (Claude) to draft it: training load per week, current fitness and fatigue figures, the length and kind of the sessions already planned, and the name, date, distance and elevation of your next goal. It carries no name, email, address, GPS track or raw activity file, it is used only to answer that request, and it is not used to train any model. If you would rather not use it, don't ask for a proposal: the app also builds the week with its own rules, without any AI.
• Your control: you can disconnect Garmin at any time from the app (Watches → Disconnect) or from your Garmin Connect account; you can ask to access, correct, export or delete your Garmin data, and withdraw your consent, by writing to mane_068@hotmail.com. Deleting your account deletes it all.

Other watch services (Suunto, Polar, COROS, Wahoo)

• How it is used: if you connect one of these accounts, your completed activities are received only to compare them with the plan and to show them to you and your coach, labelled with the service they came from; where the service allows it, planned workouts are sent the other way so they reach your watch.
• Who receives or processes it: only Supabase, which hosts the database in the EU, exactly as with Garmin data. It is never sold and never shared with anyone else.
• Your control: you connect each service yourself and you can disconnect it at any time from the app (Watches → Disconnect) or from that service's account. Deleting your account deletes it all.
• Only the services shown in the app are connected. A service is never read until you have given it permission yourself.

Who can see your data

You, and the coach you joined with an invitation code. Nobody else.

How long I keep it

Until you delete your account. You can delete it from the app (Account → Delete account); this removes your profile, workouts, activities, comments and Garmin connection. Disconnecting Garmin removes the access tokens immediately.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent, by writing to mane_068@hotmail.com. You can also complain to the Spanish Data Protection Agency (aepd.es).

Changes

If this policy changes, I will update the date above and tell athletes in the app.