Privacy Policy

Blocksmith (“we”, “us”, “our”) is an AI-powered training platform for performance athletes. We are operated by Arthur Mellors. If you have questions about this policy, email us at arthur@blocksmith.training.

We collect only what we need to provide the service:

• Account data — email address, password hash and the name you give at checkout.
• Training preferences — what you tell us when building a block (goals, race date, schedule, equipment, age, maximum heart rate, threshold paces, injuries or niggles). This is used to generate and adjust your training blocks and to inform your coach.
• Workout logs — session completion data, effort scores, notes and any niggles you record while tracking a block.
• Coach notes — short notes the coach keeps about you (injuries, preferences, goals, how training went), written from what you log and what you tell the coach. You can see and correct them in your account.
• Payment data — billing is handled entirely by Stripe. We store your Stripe customer and subscription IDs, your plan, its status, when the current period ends and when your free trial started; we never see or store your card details.
• Usage data — standard server logs (IP address, browser type, pages visited) for debugging and security.

We do not collect location data or any information beyond what you provide. Some of what you provide (age, maximum heart rate, injuries you mention) is health-related; it is used only to build and adjust your training.

• To generate and display your personalised training blocks.
• To manage your account and subscription.
• To send service emails: your block being ready, race reports you ask for, a reminder near the end of a block, password resets. We do not send marketing emails without your consent.
• To improve the service. We may analyse aggregated, anonymised training patterns to improve our AI model. Individual data is never shared.

We use a small number of trusted processors:

• Supabase — authentication and database storage. Data is stored in Supabase's Mumbai (ap-south-1) region.
• Stripe — payment processing. Governed by Stripe's Privacy Policy.
• Vercel — hosting and edge delivery.
• Fly.io — hosting for the worker that builds training blocks.
• Anthropic, OpenAI and Google — the AI models that write your blocks, coach notes and race reports process the training details and messages you give us.
• Resend — sends our emails.
• PostHog and Langfuse — product analytics and AI tracing, used to debug and improve the service.

We do not sell your data to any third party, ever.

We retain your account data and training blocks for as long as your account is active. If you delete your account, your account, training blocks, logs and coach notes are deleted at once, and any subscription ends at the close of the billing period. Stripe keeps its own billing records under its policy. Server logs and analytics events are kept for a limited period. An email address given for a plan link or race report before an account was created is removed on request. Anonymised, aggregated analytics data may be retained indefinitely.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and the data we hold on it via Settings → Delete account.
• Export your training data by emailing us.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email arthur@blocksmith.training.

We use only essential cookies required for authentication (a session token set by Supabase). We do not use advertising or tracking cookies.

We may update this policy from time to time. Material changes will be communicated by email. The effective date above reflects the latest revision.