Privacy Policy
Musette holds your bodyweight, your workout metrics, and what you ate. That is health data, and this page states plainly what happens to it.
The short version: Your data is used solely to compute your fueling plan and shopping lists. It is never sold, and never shared for advertising or marketing. Three sub-processors process it on our behalf, named below. You can export or erase your data anytime with one tap.
What Data is Held
| Category | Purpose | Retention Window |
|---|---|---|
| Bodyweight, height, age, sex | Calculates resting metabolic rate (BMR) and carb targets | Until account deletion |
| Workouts: hours, load, power, heart rate | Calculates daily energy expenditure and recovery status | Until account deletion |
| What you ate & checked off | Reconciles planned intake against actual consumption | 90 days (pruned automatically) |
| Passkey credentials (public key) | Enables secure, passwordless authentication | Until account deletion |
| intervals.icu API credentials | Syncs completed workouts | Until you disconnect the integration |
The 90-day retention limit on the food log is enforced by automated code in the sync engine — old items age out automatically.
Legal Basis (GDPR Article 9)
Bodyweight and physiological training load constitute special-category health data under Article 9 of the UK and EU GDPR. We rely on your explicit consent, provided during enrollment and recorded with a timestamp. You may withdraw consent at any time by deleting your account, which erases your stored record.
Sub-Processors & Data Flow
| Processor | Data Exposed | Function |
|---|---|---|
| Cloudflare | Encrypted database rows & edge requests | Serverless hosting, Durable Object storage, and network transport |
| intervals.icu | Activity streams (read-only) | Retrieves completed training activities from head units and devices |
| OpenRouter / OpenAI | Derived daily targets, training load & logged meals (anonymized) | Generates plain-language synthesis and coaching explanations |
Model inference data is processed under zero-data-retention / 30-day abuse monitoring agreements and is never used to train machine learning models.
Your Rights
- Export: Download your full data record as JSON directly from inside the app.
- Deletion: Permanently erases your athlete profile, energy targets, food logs, and credentials.
- Correction: Every figure in your profile is directly editable by you at any time.
- Direct Breach Notification: Because accounts require a verified email address, in the event of any security incident you will be notified directly by email within 72 hours.
Cookies
Zero tracking cookies. The public site sets no cookies. After signing in, a single session token is held in browser memory to authenticate requests.
Contact
For questions or data requests, contact the operator at [email protected].