Last updated: 22 October 2026
The short version
You can use Mode’s core iPhone and Apple Watch workout features without a Mode Coach account. Training records, settings and cached health trends are stored on your devices, with optional private iCloud synchronization handled by Apple.
Mode Coach at modetraining.app uses accounts and server storage for coaching. Linking your phone does not automatically share your workout history or recovery data. You choose the supported information and history to share with your coach. Messages, appointments, programmes, shared results and saved coaching reviews are stored by the coaching service.
AI features are optional and use Anthropic. The iOS AI-sharing permission, sharing with a human coach, and permission to include shared recovery information in the coach’s AI reviews are separate choices. Section 5 explains the different flows.
Direct Garmin Connect integration is under development. The proposed data flows are explained in section 8; describing them here does not mean Garmin has approved access or that automatic two-way synchronization is available.
Other information leaves your device when needed for features you choose, including connected wearables, weather, purchases, sharing and support. Mode does not sell personal information, use it for advertising or track you across other companies’ apps and websites.
1. Who is responsible for your information
This policy covers Mode for iPhone and Apple Watch, Mode Coach’s browser workspace and linked-phone features, and the supporting services described below. Some coaching features are currently available through a private pilot or test build; availability depends on your account and app version. Dataloup publishes and operates Mode and is responsible for its handling of personal information. For privacy questions or requests, contact [email protected] or [email protected].
Your coach may also collect information directly from you and keep records outside Mode. Ask your coach about their handling of those records. This policy explains Dataloup’s service and cannot control copies a recipient has exported or recorded elsewhere.
2. Information stored on your devices
Mode stores workouts, programmes, schedules, completed sessions, strength sets, training history, goals, profile details, preferences and generated plans or reviews. Session records may include heart rate, zones, duration, distance, calories, splits, recovery readings, perceived effort and notes about how you felt.
Mode also stores permitted health readings and derived trends locally, together with settings and consent records. Temporary session snapshots and pending recovery files help restore interrupted sessions and finish saving completed workouts. Some completed-session recovery files remain until the record has been saved successfully. New eligible phone-recorded sessions keep a pending Apple Health export with the saved receipt until Health accepts it; retries use stable identifiers to avoid duplicate workouts. Export status remains with the receipt.
These records are used to provide your training history, planning, progress and recovery features. They remain on your devices unless you enable synchronization, request a feature that sends information, or share it yourself as described below.
3. iCloud and device backups
Mode’s optional iCloud synchronization is off by default. If enabled, records Mode creates are synchronized through your private iCloud database under your Apple account. The Mode operator cannot access that private database. Apple provides this service under its own terms.
Mode does not synchronize its general cache of Apple Health readings through this feature. However, health figures incorporated into a Mode session record, such as average or peak heart rate, calories or heart-rate recovery, synchronize with that record. Heart-rate series recorded during Mode sessions may also be part of synchronized records.
Turning synchronization off stops future synchronization; it does not erase existing iCloud copies. Device backups and Apple Health’s own synchronization are separate Apple services and may retain information independently. Manage those copies through Apple’s settings.
4. Apple Health and sensitive health information
With the permissions you grant, Mode can read workouts, activity totals, heart rate, resting heart rate, heart-rate variability, sleep, VO₂max, respiratory rate, blood oxygen, body mass and composition, blood pressure and glucose. When women’s health features are enabled, it can also use relevant cycle and symptom information.
Mode uses this information for training, recovery and progress features, and caches readings and derived trends on your device. With the relevant permissions, it can write completed workouts and supported cycle or symptom entries to Apple Health.
Health access, AI sharing and sharing with a human coach are separate choices. Granting Apple Health access does not itself authorize AI or coach sharing. Mode does not sell Health information or use it for advertising or marketing.
You can change Health permissions in Apple Health or iOS Settings. Revoking access stops further access to the affected categories; it does not automatically erase information already imported into Mode, existing Health records or information previously sent with your permission.
5. Optional AI features
Mode uses Anthropic’s commercial API for AI coaching, daily briefs, PT reviews, planning, AI workout imports and certain movement explanations. In the iOS app, Mode asks for separate AI-sharing permission before sending these requests. Accepting Mode’s terms does not grant that permission. You can withdraw it in Settings under AI privacy.
Depending on the feature, a request may include your message, selected import content, age, goals, recent workouts, training volume, zone time, strength estimates, sleep, HRV, resting heart rate, readiness, recovery, VO₂max, fitness age, blood pressure, glucose and body composition, where relevant and available.
Information you enter about illness, injury, travel, stress or family circumstances may also be included. When women’s health features are enabled, relevant cycle, pregnancy, life-stage, contraception and symptom fields may be included. Turning those features off excludes their dedicated fields from future AI summaries; it does not erase previously stored information or requests already sent. Information you type into a message may still contain these details.
The iOS AI summary does not automatically add your name, email address or raw heart-rate series. Messages, workout names, documents, coach notes and images you select may themselves identify you or someone else. Only include information you intend to share.
In Mode Coach, a coach can request an AI review or programme draft using the information currently available to that coaching connection. A request can include shared session results and feedback, goals, coach-entered notes, previous training, selected plans and follow-up questions. The coach confirms the request before the displayed context is sent to Anthropic. Shared recovery summaries and “Why this suggestion” context are included only when you have also enabled their use in coach AI reviews. Turning off the iOS AI-sharing setting does not change the separate permissions for your coach’s workspace; manage those through your coaching and recovery-sharing controls.
Mode Coach stores athlete coaching profiles, written programme drafts, AI review conversations and saved coaching decisions so the coach can continue the work. The iOS relay’s handling of a request is different from this saved workspace content. AI outputs are suggestions for review; requesting an AI review does not itself send or schedule a new workout.
Mode does not use your records to train or fine-tune its own AI models. Anthropic states that commercial API inputs and outputs are not used for model training by default; separate opt-in programmes and feedback arrangements can have different terms.
Anthropic’s standard API policy normally removes inputs and outputs from its backend within 30 days. Safety investigations, legal requirements and service-specific exceptions can result in longer retention. Mode does not promise zero provider retention. Current details are available in Anthropic’s API retention policy and model-training policy.
Switching off iOS AI sharing cancels pending app requests and blocks further app AI requests until you allow it again. Changing coach sharing or recovery AI permission limits subsequent browser reviews using that information. Withdrawal cannot recall a request already transmitted or automatically erase previously saved outputs and external copies. Non-AI features remain available.
6. Workout imports
In the iOS app, AI imports require the same AI-sharing permission. Mode first reads text from photos, screenshots and supported documents on your device. Extracted text is then sent through Mode’s relay to Anthropic to structure the workout; local text recognition does not make the entire import local.
For photo imports, if too little text can be read, Mode may send the selected image itself for AI interpretation. PDF imports send extracted text from the pages being processed. An unreadable PDF may fail and require another input, such as a screenshot imported as a photo.
CSV, Excel and supported Numbers content is parsed or read on your device, but the extracted text is then sent for AI structuring. Pasted text is also sent. Supported direct FIT and ZWO imports are processed locally without AI.
The browser also supports selected workout, programme and previous-training imports. AI import sends the selected content and relevant review context to Anthropic; saved drafts and imported coaching context are kept in the workspace. Direct structured-file imports that do not use AI are processed without an AI request, but saving them to the workspace still sends their contents to Mode’s server.
Only the content needed for the import should be selected. Remove unrelated personal information before importing. Text and images sent to Anthropic are subject to the processing and retention terms above.
7. Mode’s relay and service security
Mode uses Cloudflare-hosted services for its iOS relay and browser coaching platform. The iOS relay forwards AI requests and handles supported wearable authorization and token refreshes. It keeps service credentials out of the app and does not persist AI prompts, replies or uploaded images, or keep copies of wearable tokens it exchanges. This relay-specific statement does not apply to content intentionally saved in the coaching workspace.
The coaching service uses Cloudflare Workers and D1 storage for accounts, workspace content, shared records and service state. It stores authentication-session records, phone-link details and consent history. The browser uses a necessary session cookie and local browser storage for sign-in and interface state. These are not advertising trackers. Dataloup may access service-held information where needed to operate the service, investigate a support request or incident, or meet legal obligations.
The relay receives your network IP address and an installation identifier for security and usage limits. For AI access, it also verifies Apple-signed purchase or test-build information, or an operator-issued development access token. It may contact Apple to confirm current purchase status. It uses pseudonymous daily identifiers derived from verified access information for AI limits, and stores those identifiers and usage counters, including for supported connection requests. Signed access proofs are processed for verification and are not retained by the relay application or forwarded to Anthropic. These records normally expire after about two days; infrastructure backups may last longer. The client IP address and installation identifier are not included in the AI request forwarded to Anthropic.
Hosting and service providers may process connection metadata or retain security logs under their own terms. Requests use encrypted network connections. These safeguards reduce risk but cannot guarantee absolute security.
8. Connected wearables
WHOOP, Oura and Polar connections are optional. When you use their sign-in flow, authentication takes place with the provider and Mode does not receive your password. Authorization exchanges and refreshes may pass through Mode’s relay.
Mode keeps connection credentials on your device and uses them to retrieve permitted training, sleep, recovery and physiology information. OAuth credentials and any migrated legacy Oura personal access token use Apple’s Keychain. A legacy token is removed from app settings when migrated; if secure storage fails, it is not used and you must reconnect. Polar may also require registration with its AccessLink service using a generated identifier.
You can disconnect integrations in Mode’s settings and revoke access with the provider. Disconnect blocks further use of the connection and removes its stored OAuth and legacy manual credentials; if secure deletion is temporarily unavailable, the connection remains blocked. Disconnecting does not automatically erase previously imported history or records held by the wearable provider. That provider’s own privacy policy applies to its service.
Garmin — development testing and proposed integration
Direct Garmin Connect integration, including structured-workout publishing, is under development and is not generally available. Commercial access depends on Garmin approval and the permissions Garmin makes available. Limited development testing may use Garmin’s Personal API for the tester’s own account; that access does not enable a multi-user commercial integration.
The proposed integration has three purposes:
- Activity API: receive authorized completed workouts and available recording files, such as time, distance, heart rate, pace, power, laps and other metrics present in the recording. Recording files may contain location information; available fields depend on the device, activity and Garmin permissions.
- Health API: receive authorized daily wellness summaries, such as sleep, HRV, resting heart rate, stress or recovery-related values where Garmin supplies them. These are used for personal history, progress and recovery context.
- Training API: send workouts and training schedules you or your coach choose to publish to Garmin Connect and compatible devices. This can include exercise steps, targets, intervals, recovery periods and scheduled dates.
The proposed business integration would process Garmin authorization and account identifiers through Mode’s Cloudflare-hosted service and store the records needed for the features you enable. In current Personal API development testing, credentials are held in the iPhone Keychain and requests go directly to Garmin; imported records are stored in Mode on the device. Optional iCloud synchronization, coach sharing and AI requests can create additional copies as described elsewhere in this policy.
Connecting Garmin does not itself authorize sharing with a coach or an AI provider. Any Garmin-derived information used in optional AI reviews must follow the relevant sharing choices and Garmin’s permitted-use terms. It is intended for generating individual training guidance, not training or fine-tuning AI models. Availability of particular metrics or historical data is not guaranteed. Production authorization, storage and retention details will be confirmed here before general release.
You can remove a test connection in Mode and revoke applicable account access through Garmin’s controls. Removing access stops future retrieval through that connection; it does not automatically erase imported records, previously shared copies, or workouts already sent to Garmin. Garmin’s own privacy policy also applies to its services.
9. Location and calendar
When you use weather features, approximate coordinates are sent to Apple Weather, or to Open-Meteo if the fallback service is used. The weather card identifies the source. As with other network services, the provider may also receive connection information such as your IP address.
Outdoor workout recording on Apple Watch can use GPS for route and distance. Routes are stored with the workout and in Apple Health, subject to your permissions and Apple’s synchronization settings. Mode does not automatically include GPS routes in AI summaries.
With permission, Mode reads calendar information to help plan around your availability and can add scheduled sessions at your request. AI planning may include aggregate availability information, such as counts of upcoming events or busy days; event descriptions are not automatically sent. Your calendar provider may separately synchronize calendar entries.
You can manage location and calendar permissions in iOS Settings.
10. Purchases, sharing and support
Apple handles App Store purchases. Mode Pro is offered as a one-time purchase. Mode checks purchase status to enable the appropriate features and does not receive your payment-card details. Use Restore purchases in Mode to restore eligible purchases associated with your Apple account.
Where browser billing is enabled, Stripe processes checkout and payment details. Mode can store the related customer, order, subscription, invoice and payment-status identifiers needed to manage access and support. Test billing does not constitute a live charge. Payment-provider records and any coach’s separate billing arrangements are subject to their own terms and retention requirements.
When you choose to share a workout, image or other record, the selected content is provided to the recipient or service you choose. Anyone with a full workout-sharing link may be able to read its contents and pass it on. Mode cannot remove copies saved or shared by recipients.
If you contact support, the information you send is used to respond and investigate the issue. Mode’s feedback email includes app version, device model, operating-system version and locale, along with your message. It does not automatically attach your workout or Health records. Any screenshots, attachments or health details you add are your choice. Support correspondence is kept as needed to handle the request, resolve issues and meet applicable legal obligations.
11. Advertising, analytics and international processing
Mode does not sell personal information or share it for advertising or marketing. The app contains no third-party advertising, analytics or crash-reporting SDKs and does not track you across other companies’ apps or websites.
Services you choose to use, including Anthropic, Cloudflare, Apple, Stripe where billing is enabled, and connected wearable or weather providers, may process information in countries other than your own. This also applies to Garmin development testing and any future approved integration. Their processing is subject to their applicable terms, privacy policies and legal requirements. Mode does not promise that all information will remain in one country.
12. Your choices, retention and privacy rights
Where applicable law requires a legal basis, Mode relies on your consent for optional health and AI processing, processing necessary to provide the features you request, legitimate interests in operating and securing the service and responding to support requests, or applicable legal obligations. Sensitive health information is not used for advertising or marketing.
Local records remain until you remove them or the app’s local data. Deleting Mode removes the app’s local database, caches and recovery files from that device. It does not necessarily remove Keychain credentials, copies on other devices, Apple Health records, iCloud data, device backups, provider-held requests or support correspondence. Disconnect wearables before uninstalling; credentials in Keychain can survive app deletion.
Use the relevant controls in Apple Health, iCloud, your device backup settings and connected services to manage their copies. Withdrawing a permission or deleting local data does not erase information already sent to a provider. Relay usage records and AI requests follow the retention arrangements described above.
Coaching accounts and workspace records are stored on Mode’s server to provide the ongoing service. Disconnecting a coach, unlinking a phone or deleting the iPhone app is not the same as deleting the browser account. Shared-record access is checked against current permissions. Removing recovery categories also removes the corresponding stored recovery observations from the active service; backups and previously saved or exported material may persist separately. Recovery views use the permitted history, up to 90 days, and recovery uploads remove older observations. This does not guarantee automatic expiry when uploads stop, or an expiry date for other coaching records and saved reviews.
The browser account includes data export and account-deletion controls. A coach who owns a workspace must arrange its closure with Dataloup before deleting the account; the service-owner account also requires an ownership/configuration change. Contact us if a control is unavailable or you need help deleting a workspace. Deletion affects the service records covered by the request, but cannot remove copies already saved by your coach, another recipient, a wearable provider, Apple or an AI provider. Some records or backups may need to remain for security, dispute handling or legal obligations; we will explain any applicable limits when handling your request.
Depending on the law that applies to you, you may have rights to access, correct, erase or obtain a copy of personal information, restrict or object to processing, withdraw consent, or complain to a data-protection authority. Withdrawing consent does not change the lawfulness of processing already carried out.
Contact [email protected] or [email protected] to ask a question or exercise a right. Dataloup can help with information held by the coaching service, but may not hold records kept only on your device or in your private Apple services. We will explain the available controls and help with requests concerning information we do hold. We may need enough information to verify and locate a request without collecting unnecessary health details.
13. Adults and family information
Mode is intended for people aged 18 and over. It is not designed for children to use. Adult users may choose to enter family context, such as children’s ages, to help plan training around their responsibilities. This can form part of an AI request when AI sharing is allowed. Do not enter unnecessary identifying information about children or other people.
14. Mode Coach accounts, sharing and notifications
Accounts and coaching records
Mode Coach uses email-based sign-in, account identifiers and authenticated browser sessions. We store your email, display name, optional profile photo, workspace membership and coaching connections. A linked phone has a device label and revocable authorization record. A coach can add a business name, logo, profile and programme information; content they explicitly publish to a directory or marketplace can be visible to other users or visitors.
The service stores the content needed for the coaching relationship: messages and conversation cards, appointment details and responses, programmes and their versions, assigned sessions, calendar changes, shared results, feedback, goals, onboarding answers, availability, coach notes and imported previous training. Coaches can also record information you give them during a call or in another conversation. Ask your coach to correct inaccurate information.
What your coach can see
You choose the supported sharing categories and history start date for a coaching connection. Sending a workout result can include recorded duration, distance, energy, sets, intervals, splits, tests, personal records and relevant recording details. Heart-rate sharing follows the options presented when sending. Workout feedback, such as effort, feel and comments, has its own sharing choice. Your coach can see the programmes they created or assigned, independently of whether you share completed results.
Recovery sharing has separate controls for recorded categories such as sleep, HRV, resting heart rate, provider scores and Mode guidance. “Why this suggestion” can include the underlying recovery and training context shown in that explanation; enabling it shares that context, not only a score. You also choose the permitted history and whether these recovery summaries may be used in coach AI reviews. When automatic recovery sharing is enabled, the app sends available permitted summaries as it refreshes; background timing and source availability can vary.
Linking a phone, granting Apple Health access, connecting a wearable or buying Mode Pro does not by itself share those records with a human coach. You can change sharing choices, pause sharing or disconnect. These controls restrict access through Mode and future sharing; they cannot recall information already read, downloaded, messaged or saved outside the controlled view. Accepted workouts saved on your phone can remain there after coaching ends.
Messages, email and phone notifications
Coaching messages and appointment or training responses are stored on the server and made available to the connected participants. They are not end-to-end encrypted. Access controls limit ordinary workspace access, while Dataloup’s service processes the content to provide the feature.
Sign-in, invitation and appointment emails are processed through the configured email service, currently Cloudflare’s email service. This involves recipient addresses and the relevant link or appointment information. If you open an external video-call link, that provider handles the call under its own privacy terms; Mode does not host or record the call.
If you enable phone notifications, Mode stores the Apple push device token, app/notification registration details and delivery state. Apple’s Push Notification service receives the token and notification payload, including a general alert, badge count and identifiers used to open the relevant item. The current coaching push alert does not include the full conversation or workout recording. Mode records notification read/open state to manage badges and delivery diagnostics. You can disable notifications in Mode or iOS Settings. Notification permission does not grant access to workout or recovery data.
Android and other future services will be described here before they introduce additional processing. This policy does not announce their availability.
15. Changes to this policy
The date at the top identifies the latest revision. Updated wording will be made available in the app and at dataloup.io/mode/privacy. If a change requires fresh permission under applicable law, that permission will be requested before the new processing begins.