Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Boulie collects, uses, discloses, and protects personal information when you use the Boulie mobile application, website, and coaching connector services.

What Boulie Does

Boulie is the athlete-facing record and planning system used by a coach you choose. It stores your athlete profile, goals, agreed training plan, workout details, and coaching record.

Boulie does not currently operate an in-app large language model or host your coaching conversation. If you connect an external AI client, such as Claude, that client can use Boulie's connector to read or update your Boulie record within the permissions you approve. Your conversation remains with that provider. Boulie receives only the connector requests needed to provide its tools and the information your coach chooses to save to your Boulie record.

Information We Collect

Depending on how you use Boulie, we may collect and hold:

• Account information: your email address, name, authentication records, timezone, and account timestamps.
• Optional profile information: your date of birth, gender, profile photo, experience, available equipment, and preferred sports.
• Training information: your goals, availability, training preferences, cycling FTP, running threshold pace, maximum heart rate, and other athlete-supplied reference values.
• Plans and workouts: planned sessions, workout targets and structure, planned training load, notes, completion status, and changes made to your plan.
• Coaching record: coach notes, rationales, athlete feedback, training judgments, and limited evidence saved by your coach to explain those judgments.
• Connection information: the coaching client you authorise, its approved read or write permissions, authorisation status, and when the connection was last used.
• Support information: information you include when you contact us for support or make a privacy request.
• Technical and diagnostic information: IP address, device and operating-system information, app version, request metadata, crash details, performance information, and sampled diagnostic session replays used to investigate errors.

Training, health, and fitness information can be sensitive. We collect it only when you provide it, when an authorised coach saves it at your direction, or when it is needed to deliver a feature you request.

If you choose a profile photo, Boulie receives only the image you select through your device's photo picker, not your entire photo library.

How We Collect Information

We collect information directly from you when you create an account, complete or edit your Brief, add notes, choose a photo, or contact us. We also receive information when an external coaching client uses Boulie's connector after you authorise it.

Boulie does not currently connect directly to Strava or copy your raw Strava activity history, GPS routes, streams, or laps into Boulie. If you separately connect Strava to your AI client, that provider may read your Strava information under the permissions you grant. Your coach may then save a compact coaching judgment or limited supporting figures to Boulie. Those saved items become part of your Boulie coaching record.

How We Use Your Information

We use personal information to:

• Create and authenticate your account using passwordless email codes.
• Store and display your athlete Brief, goals, training plan, workouts, and coaching record.
• Calculate workout targets, validate plan structure, and apply training safety checks.
• Allow an external coaching client to use the read or write permissions you approve.
• Keep a record of plan changes and their source so you can understand what changed.
• Provide support, maintain service reliability, diagnose faults, prevent misuse, and protect accounts.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, use it for targeted advertising, or use your Boulie record to train a Boulie-owned AI model.

External AI Clients and Strava

Connecting an AI client to Boulie is optional and requires your authorisation. The authorisation screen identifies the requested permissions. Read access allows the client to retrieve relevant Boulie coaching context. Write access allows it to save agreed changes and coaching records.

Information sent to or entered in an external AI client is handled under that provider's terms and privacy policy. For the currently supported client, see Anthropic's Privacy Policy. You should review the provider's settings and policies before sharing sensitive information.

Strava is also an independent service. If you choose to connect it to your AI client, that connection is governed by Strava's Privacy Policy and the AI provider's policy. Boulie does not receive your Strava password or manage that Strava connection.

Service Providers and Disclosure

We disclose information only where needed to operate Boulie, at your direction, or where required by law. Our main service providers are:

• Supabase: account authentication, email sign-in, database, and file storage. See Supabase's Privacy Policy.
• Cloudflare: website delivery, connector authentication and routing, rate limiting, and operational logging. See Cloudflare's Privacy Policy.
• Sentry: crash reporting, performance diagnostics, and sampled diagnostic session replay. See Sentry's Privacy Policy.
• Your authorised coaching client: Boulie record data returned in response to connector tools you approve.

We require service providers acting on our behalf to protect personal information consistently with this Policy and applicable law. Independently connected services, including an AI provider or Strava, control their own processing under the permissions you give them and their published privacy terms.

We may also disclose information if reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, investigate misuse, or complete a business reorganisation subject to appropriate confidentiality protections.

Overseas Processing

Boulie is operated from Australia. Our service providers operate global infrastructure, and personal information may be processed in Australia, the United States, and other countries where those providers operate. Privacy protections may differ between countries. We take reasonable steps to use reputable providers and protect information in accordance with this Policy and applicable Australian privacy law.

Storage and Security

We use safeguards including encrypted network connections, account authentication, scoped connector permissions, database access controls, and service monitoring. No online service can guarantee absolute security, so you should also protect access to your email account and connected services.

Retention and Deletion

We retain your account and coaching record while your account is active so Boulie can provide a continuous training record. We retain connection, diagnostic, security, and support records only for as long as reasonably needed for those purposes.

You can request account deletion by emailing hello@boulie.ai from the address associated with your account. After verifying the request, we will delete or de-identify your active account data within 30 days, unless we must retain specific information for legal, fraud-prevention, security, or dispute-resolution purposes. Limited copies may remain temporarily in protected backups and provider logs until they expire under normal retention schedules.

Deleting Boulie does not delete information held independently by an AI provider or Strava. You must manage that information with the relevant provider.

Your Choices and Rights

You can:

• Review and edit much of your profile and training information in the app.
• Disconnect Boulie from your AI client's connector settings to stop that client using Boulie, and contact us if you want the Boulie connection record revoked.
• Ask for access to or correction of your personal information.
• Request a copy of your Boulie record in a reasonable, usable format.
• Request deletion of your account and associated Boulie data.
• Raise a privacy question or complaint.

Send requests to hello@boulie.ai. We may need to verify your identity before completing a request. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Legacy Beta Data

Some early beta accounts may contain information imported through device integrations that are no longer offered in the current Boulie experience. We do not use those retired integrations to collect new data. You may ask us to delete any legacy integration data associated with your account.

Children's Privacy

Boulie is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy as Boulie changes. We will post the revised Policy here, update the date above, and provide additional notice where a change materially affects how we handle personal information.

Contact

For privacy questions, requests, or complaints, email hello@boulie.ai.