Rx Prime is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use the Rx Prime mobile application. Please read this policy carefully. If you do not agree with its terms, discontinue use of the app.

User-Provided Information

• Account details such as name and email, provided during registration or Strava OAuth connection
• Coach-provided athlete roster information, if applicable
• Support communications and feedback

Strava Activity Data

Via explicit OAuth authorization, the app accesses the following from Strava:

• Running activity records including dates, distances, and durations
• Pace and split metrics
• Heart rate data, where available from your device
• Activity names and descriptions

You may revoke Strava access at any time through your account settings.

Usage & Device Data

• Device type, operating system version, and app version
• Aggregated, anonymized app analytics
• Crash reports and error logs

• Authenticate your identity and connect your Strava account
• Retrieve and display your activity data
• Transmit activity data to the Anthropic Claude API for personalized coaching insights
• Generate training summaries and performance metrics
• Provide injury risk assessments based on training load
• Respond to support inquiries
• Improve functionality through anonymized analytics

Rx Prime uses Anthropic's Claude API to generate AI-powered coaching insights. Here is exactly how your data is handled in this process:

• Strava data is never used to train or fine-tune AI models
• Anthropic's API Terms explicitly prohibit using API inputs for model training
• Anthropic is the sole third party that receives Strava activity data, and only via API payloads
• Anthropic's enterprise policies govern all processing — review them at anthropic.com

We do not sell or share your personal information for marketing purposes. Sharing occurs only in the following circumstances:

• Anthropic — activity data transmitted for AI coaching as described above
• Strava — data retrieval via API; no data is transmitted back to Strava beyond OAuth maintenance
• Service Providers — trusted providers for hosting and analytics, under confidentiality obligations
• Legal Requirements — when required by court order or governmental authority
• Business Transfers — in the event of a merger or acquisition, with user notification

• Account data — retained until you delete your account
• Strava activity data — retrieved on demand with minimal caching
• AI coaching responses — temporarily stored for history display; you may request deletion
• Anonymized analytics — retained indefinitely

Upon account deletion, personal data will be deleted or anonymized within 30 days, except where retention is required by law.

• TLS/HTTPS encryption for all API communications
• Secure OAuth 2.0 for Strava access
• Access controls limiting internal data access
• Regular security reviews

Depending on your location, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data ("right to be forgotten")
• Obtain a portable, machine-readable copy of your data
• Object to certain processing
• Withdraw Strava consent via your account settings at any time

To exercise any of these rights, contact support@prietotechnologies.com. We will respond within 30 days.

Rx Prime is not directed toward children under 13. We do not knowingly collect information from minors. If you believe a child has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries with different data protection laws, including the United States. By using Rx Prime, you consent to such transfers.

California residents have the right to know what personal information is collected, used, and disclosed; to request deletion; and to non-discrimination when exercising privacy rights. We do not sell personal information. To submit a CCPA request, contact support@prietotechnologies.com.

If you are located in the European Economic Area or the United Kingdom, GDPR or UK GDPR may apply. Our legal bases for processing include:

• Performance of Contract — processing necessary to provide the services you've requested
• Legitimate Interests — security, fraud prevention, and service improvement
• Consent — Strava data processing via explicit OAuth authorization

You may lodge a complaint with your local data protection authority.

Rx Prime may contain links to third-party services including Strava and Anthropic. We are not responsible for their privacy practices. We encourage you to review their policies independently.

We may update this Privacy Policy periodically. Material changes will be communicated via in-app notification or email. The "Effective Date" at the top of this page reflects the most recent revision. Continued use of Rx Prime following an update constitutes acceptance.