Tayro Privacy Policy

Effective: October 1, 2026 · Questions: support@tayro.run

Tayro is an AI training coach for runners. This policy says what we collect, why, who can see what, and the rules we hold ourselves to, in plain language, because that's how we build.

What we collect

• Account basics: your name and email from Google or Apple Sign-In (whichever you use), and your profile photo if you sign in with Google.
• Age: your birth month and year. We use it to apply age-appropriate training safeguards.
• Training data: your plans, workouts, completions, effort ratings (RPE), distances, and runs, including GPS routes when you track a run.
• Your device's time zone, saved when you open the app, so your days, plans and reminders follow your local calendar.
• Body metrics (optional, athlete-entered): height and weight, if you provide them.
• Apple Health (optional, and only if you turn it on): we read four recovery signals (your active energy, sleep, resting heart rate, and heart-rate variability) and we can import workouts you recorded elsewhere, including their GPS routes. It is read-only in the direction that matters: Tayro never changes your Health data, and nothing is read until you grant permission in Apple's own dialog. You can revoke it at any time in iOS Settings → Health → Tayro, and revoking stops the reading immediately.
• Health screening: your answers to the PAR-Q readiness questionnaire.
• Coach conversations: your chats with the AI coaches. We also keep the questions you ask the coaches (up to the first 500 characters of each) to find where their knowledge falls short and improve their answers.
• Team & family connections: who you're linked to (coach, guardian, teammates) and the status of those links.
• Payments (adults only): in the iPhone app, handled by Apple through the App Store; on the web, handled by Stripe. We never see or store card numbers.

How we use it

• To build and adapt your training plan, and to let the AI coach answer with context.
• To enforce safety guardrails: athletes under 16 get binding limits on hard sessions, intensity balance, and long-run share (automatically, in the plan engine itself).
• To power team and family features under the visibility rules below.
• We do not sell your data. We do not run ads. We do not train AI models on your data. What our AI providers receive, and why, is described below.

Who sees what: the visibility contract

This is the core of Tayro, and the server enforces these rules on every read:

• Your coach sees your training pace and adherence, never your body metrics, your health answers, your Apple Health readings, your training location, or your chats with the AI coach.
• Your parent/guardian (if linked) sees light-touch signals (whether your week's on track, when a plan change needs their OK), never your workouts' details, your body data, your health answers, or your messages. Race results are shared only if the athlete allows it.
• Teammates see your name and the kudos you send them, including any short message you write (up to 140 characters). They never see your health or body data.
• Both sides must confirm a guardian link before anything is shared, and either side can end it at any time. Sharing stops immediately.

Kids and teens

• Under 13: Tayro is for athletes 13 and older. We do not create accounts for anyone under 13. If we learn an athlete is under 13, coaching stops and the account is removed: by a parent or guardian where one is linked, and by us where one is not.
• 13 to 15: we recommend and actively offer a guardian link during signup; it's the athlete's choice and never required to train.
• Payments: Tayro never takes payment directly from athletes we know are 15 or under. They upgrade through a parent or guardian.
• Safety concerns: anything involving a minor's safety or wellbeing goes to safety@tayro.run. It reaches our named safeguarding owner and backup directly, and a human acknowledges every report within 48 hours.

The AI

Your training questions and relevant training context (like your mileage, paces, and goals) are sent to our AI providers to generate coaching responses. Today those are Google (Gemini) and Groq. To find relevant coaching knowledge for an answer, your message is also sent to OpenAI to be turned into a numerical representation, which we then match against our coaching library. Your PAR-Q health-screening answers are never included in coach-chat prompts. Their safety function is enforced in the plan engine itself, in code. If you connected Apple Health, a short summary of your recent recovery signals travels with your own coaching prompts (how you have been sleeping, whether your resting heart rate is up) so the coach can ease a hard session when your body says to. It is a summary of your own data, in your own conversation; it never reaches a human coach. Body metrics (weight and height, if you provided them) are used only by your fueling and recovery coach, to set your fueling and hydration targets, and never by any other AI coach. Allergy and dietary notes are used by your fueling and recovery coach and by your race-day coach, for example in race-day fueling advice, and never by any other AI coach. Sleep hours you share are used by your fueling and recovery coach and by your training coaches, to plan your training load, and never by any other AI coach. The rest of your profile, such as your goals, paces, races, shoes and injuries, is shared across the coaching team. The coaches also remember other facts from your chats, and we sort each one by the topic it is saved under: training topics, such as a workout, a race, your gear or an injury, are shared across the coaching team; sleep goes to your fueling and recovery coach and your training coaches; any other topic goes only to your fueling and recovery coach.

Each provider processes this under its paid API terms, and those terms are why we chose them: for Google (Gemini) and Groq (the two that see your coaching conversation), your content is not used to train their models, and is retained only for a short abuse-monitoring window before deletion, not stored as your data on their side. OpenAI sees only the message being turned into a numerical representation, under the same class of paid API terms, and that content is not used to train its models either.

Where your data lives

Hosting and database: Supabase and Vercel (US regions). Sign-in: Google or Apple. Payments: Apple (App Store) and Stripe. Safety report email: Resend.

A few features talk to other services. Weather and city lookups go through our own server, never straight from your phone: when weather is shown it comes from Apple Weather, and looking up a city name (or turning a location into a city name) goes to Apple Maps. In both cases Apple receives the coordinates or the place name being asked about, never who is asking. Course and race maps are different: they are drawn in your device's browser by Apple Maps (MapKit JS), so your device requests the map imagery from Apple directly. Apple sees the map area you are looking at and your device's IP address, never your name, your account, or anyone's position.

Your training location is kept to the nearest kilometre. When you set your training city, we round the coordinates to roughly 1.1 km before storing them or sending them anywhere. Weather and the vitamin D estimate are the only things that use them and neither needs to know your street. The GPS route of a run is different, and precise by necessity (a map of your run is the point of recording it), and it is covered by the visibility rules above.

If you turn notifications on: in the iOS app they are delivered by Apple's push service (APNs), which means Apple holds a device token for your phone and passes along the notification's title and text. On the web they go through your browser's push service instead (Google, Apple, or Mozilla, depending on the browser). Either way the notification carries only what you can see on the banner itself: a short title, a line of text, and a link back into the app.

Your controls

• See what the coach knows about you: Settings → What Airo knows.
• Control result-sharing with your guardian: Settings → Guardians & access.
• Delete your account and data: Settings → Account → Delete account. It cannot be undone. An account under a guardian's care is deleted by the guardian from their Tayro home. If you cannot sign in, email support@tayro.run from your account email. One exception, kept deliberately: a minimal audit record of race-day location sharing (who authorised and who viewed, never locations) is kept up to 24 months after the race. A second exception, kept the same way: a record that a deletion was requested and when it closed is retained for 24 months, then deleted. A third exception, kept the same way: a report you send through Report a concern is delivered to our safeguarding owner by Resend, our email delivery provider, and the report itself is kept for 24 months. If a coach deletes their account, the private notes they wrote about an athlete stay stored, can be seen by no one in the app, and are deleted when the athlete deletes their account or asks us to delete them.

Changes

If this policy changes materially, we will update this page and its effective date before the change takes effect.

Tayro · California, USA