Input Training

Privacy Policy

This covers the Input Training app for iPhone and Android. If you have booked a metabolic test or work with us in person, that is a separate relationship — email privacy@inputperformanceai.com and we will tell you exactly what we hold.

Last updated 27 August 2026

Who we are

We are the data controller for everything described here, which means we decide what is collected and we are answerable for it.

Company:
Input Performance Ltd, registered in England and Wales
ICO registration:
ZC036976
Registered office:
5 Kympton Gardens, GU34 5JL

What the app collects

Only what it needs to give you a training plan and remember what you did with it. Each item below is a field the app actually writes.

Your email address
How you sign in. There is no password — we email you a one-time code, so there is no password for us to store or for anyone to steal.
A display name, if you choose one
Shown next to your score on a session leaderboard. Leave it blank and you are not identifiable to other athletes.
Your answers to the five setup questions
What you are training for, your goal, how many days a week you train, where you train, and whether you have been tested before. Used to recommend a programme.
Your training record
Which programme you are on, when you started it, which sessions you have ticked off, any scores and notes you log, and whether you scaled a session.
Your personal records
Paces, times, weights lifted, power figures and heart rate numbers such as your zones and max heart rate. These are what turn a coach's "@120% threshold" into a number meant for you.
Your subscription status
Apple tells us the transaction identifier, which product you bought, and when it renews or lapses. We never see your card details, and Apple never gives them to us.
Your Garmin connection, only if you make one
An identifier and the time we last synced. The access tokens are held server-side and the app is not permitted to read them, so they never reach your phone.

Some of this — heart rate figures, paces, weights — is health data, and the law treats it as more sensitive than the rest. We ask for it because a plan built without it is guesswork, we use it for nothing else, and you can remove it at any time.

What the app does not collect

This list matters as much as the one above, and it is a statement about what is installed in the app, not a promise about intent:

  • No location. The app never asks for it and cannot read it.
  • No access to your photos, camera, microphone or contacts.
  • No Apple Health or Google Fit data.
  • No advertising identifier, and no advertising of any kind.
  • No third-party analytics. There is no Google Analytics, no Facebook SDK, no crash-reporting or behaviour-tracking service in the app.
  • No tracking of you across other apps or websites, by us or by anyone on our behalf.
  • No selling of your data. Not now, and it is not a business we intend to be in.

Why we are allowed to hold it

To give you what you signed up for
Your account, your plan, your logged sessions and your subscription. Without this data there is no app to deliver.
Because you said so
Health-related measurements, and connecting Garmin, rest on your explicit consent. You can withdraw either — disconnect Garmin in Settings, or delete the records — and we will act on it without asking why.
To keep the thing working
Diagnosing faults and preventing abuse. A narrow interest, and one we balance against your privacy rather than assert over it.
Because we have to
Records of purchases are kept for as long as UK tax law requires, currently six years, even after you delete your account.

Who can see it

By default, only you. Every table is protected at the database level so one athlete's query cannot return another athlete's rows — access is enforced by the database itself, not by the app remembering to ask nicely.

Three deliberate exceptions:

  • Your coach, if you are linked to one, sees your programme, your logged sessions and your personal records. That is the point of being coached, and the link only exists if you accepted an invitation.
  • Other athletes on a session leaderboard see your display name, your score, whether you scaled it, and the date. They never see your notes, your personal records or your email address. You appear on a board only for sessions where you chose to log a score.
  • Our processors, listed below, to the extent each needs to do its job.

Who processes it for us

Supabase
Hosts the database, the sign-in system and the server-side functions. Our data lives in their London region.
Apple
Handles every purchase and subscription. Payment details go to Apple and never touch our systems.
Garmin
Only if you connect your account, and only for what you authorised on Garmin's own consent screen. Disconnecting in Settings revokes it.
Our email provider
Delivers your sign-in codes and coaching invitations. It sees the address it is sending to and nothing about your training.

None of them may use your data for their own purposes. Each is bound by a contract that says so.

Where it is stored

In the United Kingdom. The database and the functions that read it run in London.

Apple and Garmin are international companies and will process some data outside the UK. Where that happens it is covered by the safeguards UK data protection law requires for transfers abroad.

How long we keep it

Until you delete it. We do not run a schedule that quietly removes your training history — a block you did two years ago is still yours to look at.

Deleting your account. Settings, then Delete account. Your profile, plans, logged sessions, scores, personal records, subscription record and any Garmin connection are removed.

One thing worth knowing: Input Training and the Input Performance app share a single sign-in. If you use both, deleting your Input Training account removes all of your Input Training data but leaves the login itself in place, because taking it away would delete an Input Performance account you never asked us to touch. If you want that gone too, email us and we will do it.

Purchase records are kept for six years for tax purposes, as above. They are a record that a transaction happened, not a record of your training.

Your rights

Under UK data protection law you can ask us to:

  • Give you a copy of everything we hold about you.
  • Correct anything that is wrong.
  • Delete it — which you can also do yourself, in Settings.
  • Send it to you, or to someone else, in a portable format.
  • Stop or limit what we do with it.
  • Withdraw a consent you previously gave.

Email privacy@inputperformanceai.com. We will answer within one month, and it costs you nothing. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can fix it.

Children

Input Training is built for adults training seriously and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will remove it.

Changes to this policy

If we change what we collect, this page changes with it and the date at the top moves. Anything that meaningfully affects you we will tell you about in the app rather than leaving you to notice.