Português

Privacy Policy

Last updated: November 6, 2026

Who we are

Trisco is operated by Felipe Coelho Porto (São Paulo, Brazil), the controller of your data. Contact details are at the end of this page.

What we collect

Account (name, email or Sign in with Apple identifier, profile photo if you add one), athlete profile (thresholds, weight, date of birth, goals), language and units, what you write to the AI coach, approximate location if you turn on weather, subscription status and, when you connect a service, the training and health data it provides: activities (duration, distance, heart rate, power, GPS), sleep, HRV, resting heart rate and derived metrics. We also record when you accepted the terms and consented to the use of health data. Trisco uses no advertising or third-party analytics trackers.

Minimum age

Trisco is for people aged 18 or older and is not directed to children. If we learn that an account belongs to a minor, we delete it. To report one, use the contact below.

US residents

If you live in Washington or Nevada, see also the Consumer Health Data Privacy Policy. We do not sell personal data or share it for targeted advertising.

What we use it for

Only for the app's features: computing load and zones, building the plan, estimating readiness and, if you turn it on, generating analyses and guidance through the AI coach. We do not sell data and do not use it for advertising. Legal basis: performing the service you asked for and, for health data and for the AI, your explicit consent.

AI transparency statement

What the AI does. Three features use a language model: the conversation with the coach, the read of a workout and the weekly review. The training plan, the automatic plan adjustment, the load and the readiness do not use AI: they are computed by Trisco's own rules.

What is sent. When you use one of those features, we send the model provider only what the answer needs: your athlete profile (thresholds, goal, availability), the plan, a summary of your workouts (date, sport, workout name, duration, distance, heart rate, power, load, splits), sleep, HRV, resting HR and the messages you write. We do not send your name, your email or GPS routes. This data may include data from Garmin Connect, Polar Flow, COROS and Apple Health.

Who processes it. OpenAI, through its API, in the United States. Under OpenAI's API data policy, the content sent is not used to train models and may be kept for up to 30 days to detect abuse.

No model training. Neither Trisco nor third parties use your data, including data from Garmin and COROS devices, to train, fine-tune or evaluate AI models. It is used only to generate the answers for you.

Consent. Nothing is sent to the AI before you accept, the first time you open the coach or ask for an analysis. Without accepting, the rest of the app works normally.

How to withdraw. Profile → AI coach → Turn off. From that moment nothing else is sent to the provider. Conversations and analyses already made stay in your account until you delete it.

Limits. Answers are generated automatically and may contain errors. They are informational guidance and do not replace a doctor, a nutritionist or a coach. In case of pain or symptoms, see a professional.

Garmin, Polar and COROS

Access is through OAuth: we never ask for your password to those services. Tokens are stored encrypted. You can disconnect at any time in the app, and also revoke access in the service itself. Garmin Connect data is used under the Garmin Connect Developer Program; Polar Flow data, under the Polar AccessLink terms; COROS data, under the COROS API and Data Sharing Agreement. Trisco does not connect to Strava.

When data from a Garmin device, from Polar Flow or from a COROS device appears in the app, we show the source and the device model next to it; charts and analyses that use that data say so. COROS devices are not medical devices: whatever Trisco derives from their data is for fitness and performance purposes only, never medical advice. Garmin® and Garmin Connect™ are trademarks of Garmin Ltd. or its subsidiaries; Polar and Polar Flow are trademarks of Polar Electro Oy; COROS, PACE, APEX, VERTIX and DURA are trademarks of COROS Wearables Inc.

From COROS we receive: a summary of each workout (type, time, duration, distance, calories, pace and cadence), the workout file with heart rate, power, altitude and route, and daily data (sleep, resting heart rate, HRV and steps). We use it to show your workouts, compute load and readiness and, with your consent, for the AI coach. We keep it while your account exists and COROS stays connected.

Apple Health (HealthKit)

If you turn on Apple Health, the app reads on your iPhone, with the permission you grant on the iOS screen: workouts (swim, bike, run and strength) with heart rate, distance, power and cadence, sleep, heart rate variability (HRV) and resting heart rate. We only read: Trisco does not write anything to Apple Health. This data is sent to our server only for the features described above, never for advertising, marketing or sale, and is not shared with third parties beyond what the AI statement says. You can turn it off in the app (Connections) and revoke the permission in Settings → Health → Data Access & Devices → Trisco.

Calendar and reminders

If you add the plan to your phone's calendar, the app generates a secret link that shows only the plan's workouts (title, date, duration and description), with no name, email or health data. Anyone with the link can see those workouts; to revoke it, delete the account. Workout reminders are local notifications scheduled on the iPhone itself: nothing is sent to notification servers.

Who processes your data

Garmin, Polar and COROS are sources you choose to connect: we receive data from them, we do not send any.

International transfers and retention

Your data is stored in Brazil; only what goes to the AI coach and the approximate weather location, when you turn each one on, are processed outside it. We keep the data for as long as the account exists. When you delete the account, everything is removed immediately.

Security incidents

Tokens are encrypted and access goes through an authenticated connection. If an incident puts your data at risk, we notify you and the competent authorities within the deadlines set by law.

Your rights

Under the GDPR (European Union and United Kingdom), Brazil's LGPD and similar laws, you can ask for access to your data, correction, a copy in an open format (portability), information about who it is shared with, withdraw consent, object to processing and ask for deletion. Profile changes and deletion are in the app; for a copy of your data or any other request, write to the contact below and we answer within 15 days. You can also complain to your country's data protection authority.

Deletion

In Profile → Delete account, we remove all your data immediately, including activities, metrics and conversations with the coach. If you disconnect Garmin or Polar, we stop receiving data from them. If you disconnect COROS, in the app or at COROS, we delete the workouts and daily data that came from it within 24 hours.

Contact

suporte@trisco.app