Privacy Policy

Last Updated: 2 August 2026

1. Who We Are

WattPlan is a cycling training app operated by Manual Focus, based in the United Kingdom. In this policy "we", "our" and "us" mean WattPlan, and "the Services" means the WattPlan mobile app, the WattPlan website and the training features we provide through them.

We are the data controller for the personal information described here. If you have any question about this policy, or you want to exercise any of your rights, email james@manual-focus.co.uk.

2. Information We Collect

Account and profile details. Your name and surname, email address, date of birth, gender, weight and height. You can also upload a profile photo. Your date of birth, gender, weight and height are used to calculate training zones and personalise your plan.

Training and fitness data. Power output, heart rate, cadence, speed, distance, duration, calories and the training metrics we derive from them — Load, Weighted Power, Intensity, Fitness, Fatigue, Form, Functional Threshold Power (FTP) and W' (anaerobic work capacity). Heart rate and body measurements are health-related data, and we treat them with care.

Ride location data (GPS routes). Rides that you import or sync from a connected platform or file may include the GPS route you rode — a series of latitude and longitude points recorded by your bike computer, watch or the platform you synced from. We store these points with the activity so that we can show your route on a map and analyse the ride. Please see section 3, which explains this in full, including what the app does not do.

Connected accounts. If you connect Strava, Garmin or Wahoo, we store the account identifier that platform gives us and the access and refresh tokens needed to sync on your behalf. Tokens are stored on our servers and are never readable by other users.

Connected sensors. If you pair a smart trainer, power meter or heart rate strap over Bluetooth, we record the data those devices broadcast during a workout.

AI coach content. The messages you send to the AI coach, and the short "coach memories" the app keeps so that the coach can remember context between conversations (for example a note that you are recovering from illness, or that you prefer longer weekend rides).

Push notification tokens. If you allow notifications, we store the messaging token your device issues so we can send you reminders and coaching prompts. You can turn notifications off at any time in your device settings.

Subscription information. If you subscribe to WattPlan Premium, we record your subscription status, tier and renewal state. Payment is handled by Google Play — we never see or store your card details.

Diagnostics. When something goes wrong in the app we record a technical error report: the error message and stack trace, the page it happened on, your browser or device user-agent string and your user ID. We use these only to find and fix faults.

3. Location Data and App Permissions

In short: we store the GPS route of rides you import from a device or platform. The app never reads your phone's location. Android asks for location permission only so the app can search for nearby Bluetooth trainers and heart rate straps.

Where ride GPS comes from. Route data reaches us in one of four ways: a ride synced from Strava, a ride or FIT file delivered by Garmin, a ride synced from Wahoo, or a FIT file you upload yourself. In every case the GPS was recorded by your bike computer, watch or the connected platform — not by WattPlan.

The app does not track you. WattPlan does not read your device's location. It contains no code that asks the operating system where you are, either in the foreground or in the background, and it does not build a location history of you from your phone.

Why Android still asks for location permission. The WattPlan Android app declares Bluetooth permissions and, alongside them, Android's location permissions. This is a requirement of the Android platform, not a choice about your data: Android treats scanning for nearby Bluetooth devices as something that could reveal your location, so an app cannot discover a trainer or heart rate strap without holding location permission. We use that permission solely to scan for and connect to fitness sensors. We do not use it to determine, record or share where you are. If you never pair a Bluetooth sensor, you can decline the permission and the rest of the app works normally.

Your route data is yours. Ride GPS is visible only to you in your account. We do not publish it, and we do not send it to our AI provider (see section 5).

4. How We Use Your Information

We use the information we collect to:

Create, run and adapt your personalised training plan
Calculate your fitness, fatigue and form, and show your progress over time
Provide the AI coach and its recommendations
Import and display rides from the platforms you connect
Show your ride routes on a map and analyse individual rides
Send you the notifications and reminders you have opted into
Manage your subscription and confirm your entitlement to Premium features
Answer your support questions
Find and fix faults, and keep the Services secure and working
Meet our legal obligations

Where UK and EU data protection law applies, we rely on the contract between us to provide the Services you have asked for, on your consent for optional things such as push notifications and connecting a third-party account, and on our legitimate interest in keeping the Services secure and reliable. Because heart rate and body metrics can be considered health data, we process them on the basis of your explicit consent, given when you enter them or connect an account that supplies them. You can withdraw that consent by deleting the data or your account.

5. AI Coaching Features

The AI coach is powered by Google's Gemini service. When you send a message, or when the app generates an insight for your dashboard, we send Google a summary of your training context together with your message.

What is sent: your first name, your age band derived from your date of birth, your gender, your weight, your FTP and training zones, your recent activities and training metrics, your current plan and goal, and the text of your messages and coach memories.

What is not sent: your email address, your surname, your password, your payment details and your ride GPS routes are not included in what we send to the AI provider.

How Google handles it. Google processes this content in order to generate the response and returns it to us. Google's own terms for the Gemini service govern what it does with that content; depending on the service tier that applies to our account, Google may retain it for a limited period for abuse monitoring and may use it to improve its services. If you would prefer particular details not to be processed this way, please do not enter them into the chat.

We do not train models on your data. WattPlan does not build or train any AI model using your personal information, and we do not share your data with anyone for advertising.

AI coaching responses are generated automatically and can be wrong. They are general training information, not medical advice, and you should use your own judgement. There is no automated decision-making that produces legal effects for you.

6. Who We Share Information With

We do not sell your personal information. We share it only with the service providers below, and only so far as each needs it to do its job:

Google Firebase and Google Cloud — hosting, sign-in, database, file storage and push notifications. This is where your account and training data are stored.
Google Gemini — generates AI coaching responses, receiving the training context described in section 5. It does not receive your email address or your ride GPS.
OpenWeatherMap — if you set a target event with a location, we send that location text (for example "Kielder, UK") to look up the forecast. We do not send your name, your account details or your position.
Google Analytics — on our public website (not inside the app) we use Google Analytics 4 to count visits and see which pages are read. It receives a pseudonymous identifier, the pages you view and coarse device and location information. Google truncates IP addresses and we do not send it your name, email address or any training data. See section 12 for the cookies involved and how to opt out.
Strava, Garmin and Wahoo — only if you connect them, and only within the permissions you granted. We exchange activity and workout data so your rides and plan stay in sync. You can disconnect at any time in Settings.
RevenueCat and Google Play — handle Premium subscriptions and confirm your entitlement. They identify your subscription by your WattPlan user ID. Google Play processes the payment; we do not receive your card details.

We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a merger or sale of the business — in which case we would tell you first.

7. Where Your Data Is Held

WattPlan is operated from the United Kingdom, and our infrastructure providers store and process data in the United Kingdom, the European Union and the United States. Where personal data leaves the UK or EEA, we rely on the safeguards our providers have in place, such as the UK International Data Transfer Addendum and the European Commission's standard contractual clauses.

8. How Long We Keep It

We keep your account and training data for as long as your account exists, because your training history is what makes the plan work. If you delete your account we delete your profile, activities, plans, chat history and coach memories, and we revoke the tokens for any connected platform. Diagnostic error logs are automatically deleted after 30 days. We may keep a limited record where the law requires it, for example basic transaction records for tax purposes.

9. Security

Your data is held in Google Cloud infrastructure and is protected in transit by TLS encryption and at rest by our providers' encryption. Access rules mean each account can read only its own data, and credentials for connected platforms can only be written by our server, never by another user's browser. Administrative access is limited. No system is perfectly secure, and we cannot guarantee absolute security, but we will tell you and the relevant regulator without undue delay if a breach affects your personal data in a way that presents a risk to you.

10. Your Rights and Choices

You can view and change most of your information directly in the app under Settings and Profile. You also have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form.

Deleting your account. You can delete your WattPlan account and its data from inside the app — open Settings and choose the account deletion option — or from our account deletion page at wattplan.cc/delete-account. If you have any difficulty, email james@manual-focus.co.uk and we will delete your account for you.

Please note: deleting your WattPlan account does not cancel a Premium subscription bought through Google Play. Cancel that separately in your Google Play account settings, otherwise it will continue to renew.

You can withdraw consent at any time by turning off notifications in your device settings or disconnecting a platform in Settings. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

11. Children

WattPlan is intended for adults. You must be at least 18 years old to create an account. We do not knowingly collect information from anyone under 18, and if we discover that we have, we will delete it promptly. If you believe a child has given us their information, please contact us.

12. Cookies and Similar Technologies

The app uses only the storage it needs to work — keeping you signed in, remembering your preferences and caching data so pages load quickly. You can clear this storage through your browser or device settings, though you will then need to sign in again.

Our public website (wattplan.cc, the blog and support pages) also sets Google Analytics cookies (_ga and _ga_*, kept for up to two years) so we can count visits and see which pages are useful. These are analytics cookies, not advertising cookies, and we do not use them to track you across other websites. To opt out, block cookies for wattplan.cc in your browser or install Google's Analytics opt-out add-on. The app itself does not load Google Analytics.

13. Changes to This Policy

We may update this policy as the Services change. When we do, we will revise the "Last Updated" date at the top of this page. If a change materially affects how we use your personal information, we will tell you in the app or by email before it takes effect, so that you have a chance to review it.

14. Contact Us

For any privacy question, a copy of your data, or help deleting your account:

Email: james@manual-focus.co.uk
WattPlan, operated by Manual Focus, United Kingdom