Ativelo brings your wearable and training data into one place and uses it to give you coaching. This policy explains what we collect, why, who processes it, and the choices you have.
What we collect
- Account data: name, email and the profile details you enter.
- Device data you connect: from Oura and Whoop, with your permission, daily sleep, readiness or recovery, HRV, resting heart rate, SpO2, strain, steps, calories and workouts. From Garmin, only the files you choose to upload.
- Data you enter: mood, energy, soreness, workouts, life events, medical exam results and messages to the AI coach.
- Billing: handled by Stripe. We store your plan and subscription status, never your card number.
How we use it
- To show your dashboard, history and trends.
- To generate coaching and training plans. When you message the coach, your recent data is sent to our AI provider to produce the reply.
- To share data with a coach or doctor, only when you invite them and only the categories you allow.
- For community insights, only if you opt in. Shared data is anonymized and aggregated, never tied to your name or account.
We do not sell your data and do not use it for advertising.
Who processes your data
- Supabase (database and authentication)
- Vercel (hosting)
- Anthropic (AI coach responses)
- Stripe (payments)
- Oura and Whoop (only to fetch the data you authorized)
Health data
Health data is sensitive personal data under the LGPD (Brazil) and GDPR (EU). We process it on the basis of your consent, which you give when you connect a device or enter data, and which you can withdraw at any time.
Your rights
- Disconnect any device at any time from the Connect page. We stop syncing immediately.
- Ask us to access, correct, export or delete your data.
- Withdraw consent for community sharing or professional access at any time.
Deleting your account deletes your health data, device connections and coach conversations.
Security
Device access tokens are stored server-side and are never sent to your browser. Access to your data is restricted per account at the database level. We never ask for your wearable account passwords.