Privacy Policy

Last updated: February 2026

1. Information We Collect

FlowStates collects the following information to provide training habit analytics:

  • Account information: your email address and password (hashed)
  • Intervals.icu activity data: workout activities, training metrics (TSS, IF, NP, FTP, ATL, CTL), and activity metadata synced from your Intervals.icu account
  • Wellness data: wellness entries from Intervals.icu including subjective readiness, fatigue, and recovery metrics

2. How We Use Your Data

Your data is used exclusively for:

  • Behavioral analytics to help you understand your training habits
  • Pattern detection to identify when your training reaches a flow state
  • Generating personalized insights about workout consistency and habituation

We do not sell, share, or monetize your personal data or training information with third parties.

3. Data Storage and Security

Your data is stored in encrypted PostgreSQL databases. Sensitive credentials (such as your Intervals.icu API key) are encrypted at rest using AES-256-GCM encryption. All data is transmitted over HTTPS.

4. Third-Party Services

FlowStates integrates with the Intervals.icu API to sync your training data. When you connect your Intervals.icu account, we access your activity and wellness data through their API using the credentials you provide. Please review the Intervals.icu privacy policy for their data practices.

5. Your Rights

You have the right to:

  • Access: Request a copy of all data we hold about you
  • Delete: Request deletion of your account and all associated data
  • Export: Download your data in a portable format
  • Disconnect: Remove your Intervals.icu credentials at any time, stopping further data syncing

6. Contact

For questions about this privacy policy or to exercise your data rights, contact us at privacy@flowstates.app.