Privacy Policy

We collect account and profile information you provide, connected-service data you authorize, coaching preferences, check-ins, feedback, and technical information needed to operate and secure the service.

When you connect Google Calendar, DAVE: Daily Adaptive Vitality Engine requests account-level, read-only OAuth permission to discover available calendars. We read calendar identifiers and names to present calendar choices. Event titles, start and end times, and all-day status are fetched only from the calendars you save as selections. We use this information to understand schedule availability, interpret a workout plan when you explicitly label a calendar for that purpose, and create personalized coaching.

We persist encrypted OAuth tokens and selected-calendar metadata, including each selected purpose, to operate the connection.

We do not write to Google Calendar. Raw Google Calendar API responses are processed in memory and are not stored as a separate raw-data archive. Normalized dashboard event titles and times may be cached in your browser local storage for up to 14 hours. The cache is treated as expired after 14 hours and removed the next time DAVE reads that cache. Derived references, coaching decisions, briefings, Workout Rx content, and delivery history may be stored so the service can deliver and explain prior coaching.

We use information to provide coaching, operate connected services, maintain account security, troubleshoot reliability, improve user-facing product quality, and comply with law. We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine-learning models.

We use Vercel for application hosting, Supabase for authentication and database services, Anthropic for controlled artificial intelligence processing, and Resend for email delivery. These providers process only the information needed to perform services for DAVE: Daily Adaptive Vitality Engine under their applicable contractual and security obligations.

DAVE: Daily Adaptive Vitality Engine's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Human access to Google user data is limited to cases where a user gives affirmative consent, access is needed for security or abuse investigation, or access is required by law. Access is limited to authorized personnel with a need to know.

To stop future Google Calendar access, you can revoke DAVE's Google access in your Google Account permissions.

Using Disconnect Google Calendar in DAVE always removes the local Google Calendar token and selected-calendar preferences. DAVE also asks Google to revoke the grant. The Google grant is revoked when Google accepts that request. If Google revocation is unavailable, revoke DAVE's access in your Google Account permissions.

Prior derived coaching decisions, briefings, Workout Rx content, and delivery history may remain under the service retention policy unless separately deleted.

You may email dave@meetcoachdave.com to request deletion of stored local connection data and historical artifacts. We may retain limited records when required for security, fraud prevention, legal compliance, or dispute resolution.

We use access controls, encrypted credentials, least-privilege permissions, and operational monitoring designed to protect personal information. No system can guarantee absolute security.

Questions or privacy requests may be sent to dave@meetcoachdave.com.