Ballust

Legal

Privacy policy

Last updated: August 13, 2026 · Applies to the Ballust athlete app (iOS), Ballust Coach (web), and ballust.com.

1. The short version

Your training data belongs to you. In v1, raw health data — heart rate, GPS, sleep — never leaves your device. Only what you choose to share with a coach (completion summaries by default, more on request) crosses the wire. We do not sell data. We do not run advertising. You can disconnect anyone and delete your account at any time.

2. What we collect

The athlete app (on-device)

  • Health data. Ballust reads Apple HealthKit with your permission to compute completion, load, sleep, and readiness. In v1 this data is processed on your device and is not sent to us — raw HR, GPS, and sleep never leave your device.
  • Calendar. Ballust reads your calendar events (read-only) to plan training around commitments. Ballust never writes to your calendars.
  • Identity. Sign in with Apple gives us a stable identifier, and your name and email if you allow it.

When you are coached (Ballust Coach)

  • Training. The plan your coach assigns, the sessions you complete, miss, or skip (with your notes), and summary completion reports.
  • Feedback. Messages between you and your coach on assigned sessions.
  • Coach accounts. Coaches sign in by email link; we store the email address.

Garmin Connect connection (planned)

  • When you connect Garmin Connect, the authorization is handled by our backend using OAuth; tokens are stored server-side only and are never included in the app. We store export metadata — workout name, publish and schedule status, and device-sync state — so you and your coach can see that a session was sent. We do not receive or store raw workout-stream or health data from Garmin.
  • Ballust only claims "sent to Garmin Connect" after our backend confirms it, and "on your watch" only after Garmin’s device-sync notification confirms it.
  • You can disconnect Garmin at any time; disconnecting revokes access and removes stored export records. [PLACEHOLDER — reveal this paragraph once the Garmin connection ships]

3. How your data is used

To run the service: showing your plan, sharing what you choose with the coach who invited you, and keeping both sides honest about what happened. Nothing else. No advertising, no data brokering, no selling.

4. What your coach sees

Your coach sees the assigned plan, session states (done, missed, skipped, moved), and per-session feedback. Load and duration detail are shared only if you choose the richer sharing scope; otherwise they see completion counts. Sharing scope is chosen when you connect, changeable anytime, and disconnect purges future access.

5. Data retention and deletion

  • Deletion. Delete your account in the app (or by request); we remove relationships, plans, sessions, feedback, and connected-provider records tied to you. Deletion is permanent, and pending purges complete within 30 days.
  • Export. You can request a machine-readable copy of everything your account holds.
  • Access. Contact us about any question or correction at the address below.

6. Third parties

We use standard infrastructure providers (hosting, email) under their own data-processing terms. We never embed third-party credentials in the iOS binary — OAuth runs against Ballust’s own backend, including for Garmin Connect.

7. Contact

Questions about this policy or your data: info@ballust.com.
Operations: [PLACEHOLDER — Ballust legal entity name and registered address].