Last updated: October 2026
Upon registration: email address, password (stored encrypted), name. Optional: date of birth, weight, height, gender for training calculations.
If you connect integrations, we process the following data — exclusively for your personal coaching:
Training plans, nutrition recommendations, shopping lists, recovery analyses, supplement recommendations. These are calculated from your data and stored.
Your data is processed for your personal coaching — and, only with your explicit consent, for the optional peer comparison (section 7.4):
Processing is based on your explicit consent (Art. 6(1)(a) of the Datenschutz-Grundverordnung (GDPR — the EU General Data Protection Regulation)). For health data, Art. 9(2)(a) GDPR applies. You may withdraw your consent at any time.
We do not sell data. There is no advertising.
We do not share your data with third parties for advertising or sales purposes. Data is shared exclusively with carefully selected service providers that we require to operate the platform: our hosting provider (see section 6), the providers of the AI models used for coaching (see section 7.1 — only with your explicit consent), and the error-diagnostics service (see section 7.2).
In addition, when you dictate with the microphone, your device or browser may send your recording to the maker of its speech recognition (see section 7.5) — we do not choose that one, it belongs to your device or browser.
In addition, data is exchanged between you, the ATHRON platform, and the integrations you have connected (Garmin, TrainingPeaks, etc.). You control the connection to each integration yourself via the settings.
ATHRON is hosted on Hetzner Online GmbH servers in Germany. Your data is stored on German/European servers. For AI-powered coaching, certain data is transferred to providers in the USA (see section 7.1) — this third-country transfer (USA) is based on your explicit consent (Art. 49(1)(a) GDPR). Beyond that, no transfer to third countries takes place.
ATHRON uses AI models from external providers for personal coaching: Anthropic PBC (USA) and OpenAI LLC (USA). Data is sent to them only if you have switched on “My AI coach” (or earlier agreed to the coach consent of the old privacy settings and not withdrawn it):
Purposes: conversations and replies, daily recommendations, analysis of blood results/documents/photos, taking medications and supplements into account, diary analysis. Legal basis: your explicit consent (Art. 6(1)(a); for health data Art. 9(2)(a) GDPR).
Transfer to the USA: based on your consent (Art. 49(1)(a) GDPR). The USA does not offer a level of data protection equivalent to the EU: US authorities may be able to access the data without you having equivalent remedies, and the providers may keep data for a limited time under their own terms (including briefly between requests).
Without consent no data is sent to the AI providers; your data stays stored and visible. Withdraw at any time in the app under Settings → Privacy & Legal, effective for the future.
Searching the web (planned, not active yet): We are preparing a feature that lets the coach look things up online — for questions our own training knowledge does not answer, such as the date or the rules of a race. It is switched off today; nothing leaves the app for it. Once we switch it on: the AI provider will pass on only the search query to a search service, not your conversation and not your values. The coach is instructed not to use personal details in it — no name, no measurements, no diagnoses; it does not know your name anyway. It will search for the topic and apply the answer to you itself, and the sources it relied on will appear below its reply. We will update this section before the feature becomes active for you.
To diagnose app crashes and errors, ATHRON uses the service Sentry (Functional Software Inc., cloud region Frankfurt). In the event of an error, the following is transmitted: technical stack traces, device and operating system version, app version, and a pseudonymous athlete ID. Not transmitted: email address, plaintext passwords, coach conversations, recovery values (HRV, sleep, battery), and integration tokens — these are replaced by a filter before transmission ([redacted]).
Legal basis: legitimate interest in a stable app (Art. 6(1)(f) GDPR). Retention period in Sentry: 90 days, followed by automatic deletion. You may object to crash reporting by contacting office@digitalgurus.de.
If you are connected to a coach and switch on “Share with my coach”, your coach sees: training and daily-life data, daily signals, health values, blood results, your DNA profile (training-relevant markers only; never your raw genome file), gut results and medications (product, dose, time of intake). Your diary is not included — your coach only sees it if you share it separately. If your coach uses their AI assistant, that applies only together with “My AI coach”. Legal basis: Art. 9(2)(a) GDPR. Withdraw at any time; withdrawal ends sharing for all listed areas at once.
Only if you agree does ATHRON build a coarse group key from your training-relevant DNA markers, the overall picture of your blood values and your main goal, and uses it to look up how often athletes with the same key reached their goal — only for groups of 20 or more; the comparison itself runs without AI. Legal basis: Art. 9(2)(a) GDPR. If you also join the data network, your key counts toward the group without your name or individual values.
When you dictate in ATHRON with the microphone — for example to the coach, for meals, recipes, in your diary, in feedback or while planning — your device or your browser turns your voice into text. That is not done by ATHRON but by the speech recognition that belongs to your device or browser. Depending on the device and browser, your recording goes to the maker of that speech recognition for this — usually Google (USA) with Chrome and on Android, Apple (USA) with Safari and on iPhone and iPad, with other browsers their own maker (with Edge, for example, Microsoft) — and comes back as text. Some devices also recognise speech right on the device; whether your recording leaves your device is decided by your device. This comes in addition to the transfers in section 6.
A recording holds more than the text: your voice, background noise and other people who happen to be speaking. What you dictate is up to you — it may include information about your health. With this kind of dictation ATHRON receives only the recognised text, not the recording. The maker's own privacy terms apply to the processing on their side. If you do not want your recording to go to the maker, do not use the microphone and type instead.
Your data is stored as long as your account is active. After account deletion, all personal data is irrevocably deleted within 30 days.
Contact for all requests: office@digitalgurus.de
ATHRON uses technically necessary cookies for authentication (session cookie). They are required for operation and do not need consent. We do not use advertising cookies and we do not share data with third parties for advertising purposes.
Product analytics — only with your consent. If you opt in, we collect anonymous usage data (e.g. which areas and features are used) to improve ATHRON. For this we use PostHog, operated on an EU instance (data centre in Frankfurt am Main, Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. No transfer to third countries outside the EU takes place.
Legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Product analytics is off by default: without your consent, no analytics script is loaded and no analytics cookies are set.
No health data. No health, recovery, lab or DNA values and no direct identifiers (e.g. email) are included in product analytics. A technical safeguard blocks the transmission of such data.
Withdrawal. You can withdraw your consent at any time with effect for the future — in the app under Settings → Privacy & Legal → Consents → Analytics (desktop: Settings → Privacy). After withdrawal, no further analytics data is collected.
Retention. Analytics data is stored only for as long as necessary for product improvement and is deleted afterwards.
This privacy policy may be updated when the platform changes. The current version is always available at athron.app/legal/privacy/en.