Legal
Privacy Policy
Effective 1 May 2025
Who we are
Blocksmith (“we”, “us”, “our”) is an AI-powered training platform for performance athletes. We are operated by Arthur Mellors. If you have questions about this policy, email us at arthur@blocksmith.training.
What we collect
We collect only what we need to provide the service:
- Account data — email address and password hash when you sign up.
- Training preferences — the information you enter in the training block form (goals, schedule, fitness levels, equipment). This is used solely to generate your training block.
- Workout logs — session completion data you record while tracking a block.
- Payment data — billing is handled entirely by Stripe. We store only your Stripe customer ID and subscription status; we never see or store your card details.
- Usage data — standard server logs (IP address, browser type, pages visited) for debugging and security.
We do not collect health data, location data, or any information beyond what you explicitly provide.
How we use your data
- To generate and display your personalised training blocks.
- To manage your account and subscription.
- To send transactional emails (account confirmation, password reset). We do not send marketing emails without your consent.
- To improve the service. We may analyse aggregated, anonymised training patterns to improve our AI model. Individual data is never shared.
Third-party processors
We use a small number of trusted processors:
- Supabase — authentication and database storage. Data is stored in the EU.
- Stripe — payment processing. Governed by Stripe's Privacy Policy.
- Vercel — hosting and edge delivery.
- Render — backend API hosting.
We do not sell your data to any third party, ever.
Data retention
We retain your account data and training blocks for as long as your account is active. If you delete your account, all personal data and training blocks are permanently deleted within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.
Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and all associated data via Settings → Delete account.
- Export your training data on request.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email arthur@blocksmith.training.
Cookies
We use only essential cookies required for authentication (a session token set by Supabase). We do not use advertising or tracking cookies.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email. The effective date above reflects the latest revision.