Privacy Policy
Last updated 22 May 2026
Who we are
Timbrum is a coaching platform that helps endurance athletes follow training plans designed by their coach. The service is operated from Spain and made available at tri.timbrum.com.
What we collect
Account information you give us (name, email, role, training stats such as FTP, LTHR, weight); training data you create or import (prescribed sessions, completed workouts, time-series samples like heart rate, pace and power, personal records, wellness logs); third-party tokens or credentials you connect (Strava OAuth, intervals.icu, and where applicable Garmin, Apple Watch, Wahoo, Coros, Polar, Suunto); and basic device information from your browser when you use the web app.
How we use it
We use this data to provide the coaching service: showing your training, computing fitness/fatigue and adherence, generating AI workout reviews and plan suggestions, syncing prescribed workouts to your devices when you authorise it, and letting your coach review your work. We do not sell your data and we do not use it for advertising.
Who we share it with
Your training data is visible to the coach you are linked to inside Timbrum, and to nobody else. When you connect a third-party service (Strava, intervals.icu, Garmin, Apple, Wahoo, Coros, Polar, Suunto …) we exchange data with that provider only as needed to fulfil the integration. We use intervals.icu as a relay to push prescribed workouts to your watch — only the workout structure (intervals, targets) and its scheduled date leave Timbrum on your behalf, and only when you have authorised the integration. Our AI coaching features send the relevant training data — recent workouts, training load, goals and races — to OpenAI, which generates the review or plan as our sub-processor; OpenAI does not use data submitted through its API to train its models. We use Supabase as our hosting provider and Vercel for the web frontend; all of these providers are subject to their own privacy terms.
Where it is stored
Data is stored in the United States (AWS Oregon) by our hosting provider Supabase, under the European Commission's Standard Contractual Clauses for international data transfers. We retain it for as long as your account is active. Backups follow the standard retention of our hosting provider.
Your rights
You can access, correct, export or delete your data at any time. Edit basic profile fields from your profile page; for export or deletion requests, contact us at the email below and we will respond within 30 days.
Cookies
We use cookies that are strictly necessary to keep you logged in and to remember your language preference. We do not use advertising or analytics cookies.
Changes to this policy
We may update this policy as the product evolves. The 'last updated' date at the top reflects the most recent revision.
Questions? Reach us at hello@timbrum.com.