Privacy policy
Last updated 15 September 2026. I'm Sam Tidswell, I run Suffer Together Coaching, and I'm responsible for the data this site holds. Email me about any of it — you'll get a reply from me, not a form.
What I hold, and why
One reason only: to coach you.
Your account
Name, email, password. Passwords are hashed by Supabase — I never see them.
What you told me at intake
Goal race, target time, recent volume, days per week, longest run, and your notes. Your plan is built from this.
Your training data
Strava activities (below). From intervals.icu, your athlete ID and completed sessions. From a lactate test, the readings.
Your plan and feedback
The block I built you, and your post-session check-ins.
Strava, specifically
Optional. Nothing is read until you connect it yourself, and you can disconnect at any time.
What is collected
Your running activities: date and start time, distance, moving and elapsed time, average and maximum heart rate, pace, elevation, the activity name and description, lap splits, and time-in-heart-rate-zone. Plus your Strava athlete ID and heart-rate zone settings.
How it is collected
Through Strava's official API, using an access token you grant by approving this app. I never see your Strava password. Your history is read once when you connect, updated daily, and each completed session is read back so I can compare it against what I prescribed.
What it is used for
Coaching you, and nothing else: your starting volume, a fitness estimate (VDOT, from your own paces and heart rates), and the gap between the session I wrote and the one you ran. Seen only by you and me. Never sold, licensed, shared with a third party, or used to train or operate any AI system.
How long it is kept
For as long as I am coaching you. The plan is built from a 12-week volume history and your recent race-equivalent efforts, so it has to persist across blocks.
How to withdraw consent, and what happens
Settings → Strava → Disconnect. That immediately revokes this app's access at Strava, deletes every activity imported from Strava, and deletes the fitness estimate derived from them. You're shown how many activities were deleted, so you have confirmation it actually happened. Your training plan is unaffected — that's my coaching work, not Strava's data. You can also revoke from your Strava settings, with the same effect here.
If you delete an activity on Strava
It is removed here within 48 hours, by the daily sync.
Strava is a trademark of Strava, Inc. This app is not developed, sponsored or endorsed by Strava.
Everything else
What I don't do
No selling, no advertisers, no training machine-learning models, no unasked-for marketing, no trackers. Never shown to other athletes — your block, times and check-ins are between us.
Who else touches it
- Supabase — your account and sign-in.
- Vercel — hosting and the database.
- Strava — only if you connect it, only what you authorise.
- intervals.icu — sends sessions to your watch, returns what you completed. Revocable by you.
- Resend — sends the site's emails.
Where it lives
Servers in the EU (Stockholm). None of the services above is a data broker or gets your data for its own purposes.
How long I keep the rest
While I'm coaching you, plus a reasonable period after in case you come back. Ask me to delete it and I will.
What you can ask for
To see everything I hold, correct it, delete it, or have it in a portable format. Withdrawing a connection doesn't end your coaching. In the EU/UK these are GDPR rights, and you can complain to your data protection authority — I'd rather you told me first.
Cookies
A sign-in session, and small preferences like which section you last had open. No advertising cookies, no third-party trackers.
Under-16s
Not a service for under-16s — please don't sign up without a parent or guardian involved.
Changes
If what I hold changes, so does this page and the date at the top. Anything significant, I'll email you.