Privacy Policy

FitMarks ("we", "our", "us") provides a service that reads workout data from your intervals.icu account and delivers it as markdown notes to your Obsidian vault. We are committed to handling your data with care and transparency.

When you use FitMarks, we collect and store:

• Account information: your email address and name, provided by your sign-in provider (Google, GitHub, or email magic link) via Supabase Auth.
• intervals.icu credentials: your Athlete ID and API key, stored encrypted (AES-256-GCM) in our database. These are used solely to fetch your workout data on your behalf.
• Rendered note content: the markdown text of your workout notes and weekly summaries, stored so the Obsidian plugin can sync them to your local vault.
• Sync metadata: file paths, activity IDs, and timestamps used to keep your vault up to date.
• Billing information: subscription status and Stripe customer ID. Payment card details are handled entirely by Stripe and are never stored by FitMarks.
• Usage logs: sync and import events, for troubleshooting purposes.

We deliberately do not store:

• Raw GPS tracks or location series
• Heart rate time series or sensor streams
• Any health data beyond what appears in the rendered note text

Notes contain summary statistics (average HR, distance, TSS) but not second-by-second sensor data.

Your data is used only to provide the FitMarks service:

• Fetching your workouts from intervals.icu and rendering them as markdown notes
• Delivering those notes to your Obsidian plugin when it requests a sync
• Managing your account, subscription, and trial eligibility

We do not sell, share, or use your data for advertising or analytics purposes.

FitMarks integrates with the following third-party services:

• intervals.icu — your workout data source. We access it using your API key.
• Open-Meteo — weather data fetched by latitude/longitude and date. No personal identifiers are sent.
• Supabase — database and authentication hosting (EU region).
• Vercel — application hosting.
• Stripe — payment processing. Stripe's privacy policy applies to billing data.

You can delete your account at any time from the dashboard. Deletion removes your profile, encrypted API key, activity notes, and sync logs immediately.

One record is retained after deletion: a hashed version of your intervals.icu Athlete ID, used solely to prevent abuse of the free trial (signing up, deleting, and signing up again for another trial). This record contains no personal identifiers and cannot be used to identify you.

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, delete your account from the dashboard or contact us at the address below.

For privacy questions or requests, contact us at: [email protected]