SigWren is operated by Mindful Runner PTY LTD (“Mindful Runner”, “we”, “us”), the data controller for the personal data described here. This Privacy Policy explains how we collect, use, store and disclose personal data when you use the SigWren coaching platform and its integrations.
What We Collect
- Account profile data (name, email, phone number, role).
- Training and activity data connected from supported providers (for example workouts, distance, pace, heart rate).
- Precise location (GPS) while you are actively recording a workout in the app — used to capture your route, distance, and pace. Location is not collected when you are not recording.
- Health and recovery metrics where available (for example sleep, HRV, resting heart rate, and additional supported biometrics).
- App usage and operational telemetry needed to secure and improve the service.
How We Use Activity and Health Data
- To provide athlete and coach features, including training logs, readiness context, and coaching workflows.
- To synchronize records from authorized device/platform integrations.
- To communicate with you about your training and account, including by email and, where you provide a number, WhatsApp or SMS.
- To generate analytics and insights for the athlete and authorized coach team.
- To monitor reliability, troubleshoot issues, and protect platform security.
How We Disclose Data
- We share data with your authorized coaches and organization users according to role-based permissions.
- We may share data with infrastructure and service providers that process data on our behalf for hosting, authentication, and operations.
- We do not sell personal activity or health data.
- We may disclose data where required by law, legal process, or to protect rights, safety, and security.
Connected Services — where your training data comes from
SigWren receives training and health data only from services you connect, under the permissions you grant, and only for as long as that connection remains authorised. You can revoke any connection at any time from your Connections settings, and doing so stops all further data flowing to us from that service.
We currently support Garmin, Suunto, Strava, WHOOP, Oura, COROS, Polar and Apple Health. We add support for further devices and platforms over time; any service added later is subject to the same terms set out on this page.
Service Providers, and How We Use AI
We do not sell your data, and we do not share it with any third party for their own purposes. Your training and health data is visible to you, and to the coach you are assigned to. It is never used for advertising or marketing, and it is never provided to data brokers.
Like any online service, SigWren runs on infrastructure operated by others. These are service providers — they process data strictly on our instructions, under contract, with no right to use it for their own purposes. They are not recipients of your data in any other sense. We currently use:
- Supabase — our database, authentication and file storage, hosted in the European Union.
- Google Cloud — the services that analyse your activity files and compute your training metrics.
- Google (Gemini API) — turns the metrics we have already computed into readable coaching language. See the paragraph below.
- Cloudflare — serves the SigWren web application.
- Open-Meteo and OpenTopoData — weather and elevation lookups. These receive route coordinates in order to return the conditions and terrain for a location; they receive no information identifying you.
We may engage further service providers as the product develops. Any such provider is engaged on the same basis — processing on our instructions only, never for their own purposes — and this page is updated to name them.
Artificial intelligence
SigWren uses AI to explain your training back to you in plain language. Two commitments govern this:
- Your data is not used to train AI models — not by us, and not by our AI provider, which is contractually prohibited from using it to train or improve its models.
- Our AI provider receives the training metrics SigWren computes — not raw records from your device. Device manufacturer identifiers and the raw payloads we receive from connected services are removed before anything is sent.
Where an AI-generated insight is derived from data supplied by a connected device, the contributing manufacturer is named alongside it in the app.
Data Retention and Security
- We retain data for as long as needed to provide the service and satisfy legal and operational requirements.
- We apply role-based access controls and production security measures to protect stored data.
Your Choices
- Disconnect provider integrations at any time.
- Request correction or deletion of account data where applicable. See Delete Account for process details.
Contact
Mindful Runner PTY LTD, trading as SigWren. Questions about this policy, or a request relating to your personal data, can be sent to the address below and we will respond.
For privacy questions, contact support@sigwren.com or use in-app support routing.