Privacy Policy

1. Introduction

Achilles ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fitness training platform.

By using Achilles, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you sign in with Google OAuth, we collect:

• Email address
• Google account ID
• Profile information (if you choose to share it)

2.2 Workout and Training Data

We collect information you provide when using the platform:

• Workout logs (distance, duration, exercises, sets, reps, weights)
• Training goals and preferences
• Personal records and achievements
• Habit tracking data
• Chat conversations with AI coach
• Uploaded files (spreadsheets, health data exports)

2.3 Usage Information

• Device type and operating system
• Browser type and version
• IP address
• Pages visited and features used
• Timestamps of actions

3. How We Use Your Information

We use your information to:

• Provide and maintain the Achilles.fit™ platform
• Generate personalized training plans and AI coaching
• Track your progress and achievements
• Send motivational messages and notifications (if enabled)
• Improve our services and develop new features
• Respond to your support requests
• Detect and prevent fraud or abuse

4. AI and Data Processing

We use Amazon Bedrock to power our AI coaching features. When you interact with our AI coach:

• Your messages are sent to Amazon Web Services for model inference
• Your workout history and goals are used to provide personalized responses
• Chat conversations are stored in our database for continuity
• We do not use your data to train AI models

5. Data Storage and Security

Your data is stored securely on Amazon Web Services:

• Data is stored in Amazon DynamoDB databases
• All connections use HTTPS/TLS encryption
• Session data is encrypted with AES-256-GCM
• Files are scanned for malware before storage
• We implement rate limiting to prevent abuse
• Access is restricted to authenticated users only

6. Data Sharing and Disclosure

We do NOT sell your personal data. We may share your information only in these limited circumstances:

• Service Providers: Amazon Web Services for hosting, storage, email and AI model inference; Google Analytics for aggregate usage analytics
• Legal Requirements: If required by law or to protect our rights
• Business Transfer: In the event of a merger or acquisition

We do NOT share your data with advertisers, third-party trackers, or social media platforms.

7. Your Rights (GDPR & CCPA)

You have the following rights regarding your data:

• Access: Request a copy of your data via Settings → Data Export
• Deletion: Delete all your data via Settings → Delete Account
• Correction: Update your workout logs and profile information anytime
• Portability: Export your data in CSV or JSON format
• Opt-out: Disable motivational messages and notifications

For additional requests, contact us at admin@noblerworks.com

8. Cookies and Tracking

We use the following cookies:

• Essential Cookies: Session authentication (required for the service to work)
• Preference Cookies: Theme settings, language preferences
• Analytics Cookies (optional): Google Analytics, set only after you accept in the cookie banner. Until you choose, Google Analytics runs in consent mode with all storage denied - it sets no cookies and records anonymous page counts with no identifier for you or your session. Declining stops it entirely.
• First-touch attribution (functional): one entry in your browser's local storage (achilles-first-touch) written on your first visit, recording the page you landed on, the site that referred you, and any campaign tag in the link. It holds no identifier for you, is never sent to a third party, and exists only so we can tell which channels bring people to Achilles.

We do NOT use advertising cookies or third-party advertising trackers, and we do not sell or share your data with advertisers.

9. Children's Privacy

Achilles.fit™ is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.

10. International Data Transfers

Your data may be transferred to and stored in data centers operated by Google Cloud Platform in various regions. We ensure appropriate safeguards are in place for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Email: admin@noblerworks.com