Privacy Policy

What this service is

tonal.coach is an independent project built by an individual developer. It is not affiliated with, endorsed by, or connected to Tonal in any way. Tonal is a trademark of Tonal Systems, Inc. This service uses Tonal's APIs to read your training data and push custom workouts to your machine, but Tonal does not provide a public API or officially support third-party integrations.

Tonal account credentials

When you connect your Tonal account, your email and password are sent to Tonal's authentication system (Auth0) to obtain an access token. Your password is used once for this request and is not stored, logged, or retained in any form. The resulting authentication token and refresh token are encrypted using AES-256-GCM before being stored in our database. These tokens allow the service to read your data and push workouts on your behalf.

Data we access

Through your Tonal token, the service reads:

• Your Tonal profile (name, training level, workout preferences)
• Strength scores and muscle readiness
• Workout history and activity details
• Exercise catalog (global, not user-specific)

The service writes:

• Custom workouts to your Tonal account

We do not access your payment information, personal contacts, or any data unrelated to your training.

Data we store

• Your tonal.coach account (email, hashed password)
• Encrypted Tonal auth tokens
• Training preferences and goals you set in the app
• Chat conversations with the AI coach
• Workout feedback ratings (RPE, session ratings)
• Injury records you report
• Cached Tonal data (strength scores, workout history) with automatic expiration

AI and third parties

Chat conversations are processed by Google's Gemini AI model to generate coaching responses. Your training data is included in the AI context so the coach can give personalized advice. Google's AI usage policies apply to this processing. No data is used to train AI models.

The service is hosted on Convex (database and backend) and Vercel (frontend). Error monitoring is provided by Sentry. No other third parties receive your data.

Data deletion

You can disconnect your Tonal account and delete your tonal.coach account at any time. All associated data (conversations, feedback, goals, injuries, and cached data) is permanently deleted with no retention period.

Risk acknowledgment

This service accesses Tonal through unofficial APIs that may change or become unavailable without notice. Using this service could theoretically affect your Tonal account, though no such issues have been reported. By using tonal.coach, you acknowledge this risk and agree that the developer is not liable for any impact to your Tonal account or subscription.

Contact

For questions, data deletion requests, or concerns, email jeff.tonalcoach@gmail.com.