Privacy policy

Version of October 22, 2026. Vante is a personal project, invite only.

What we store

• Your account: name, username and password. The password is stored only as a hash (PBKDF2 with a random salt), never as text.
• Your workouts, from Intervals.icu once you connect your key: date, distance, time, heart rate, cadence, GPS route and the original files.
• Daily wellness (resting HR, HRV, sleep), when Intervals has this data.
• What you type: profile, reported pain and injuries, check-ins, questions to the coach and the generated plan.
• If you turn on notifications: your device's push address (at most 5 devices).
• Usage events from the app itself: the type of action and the date (for example: opened the app, generated a plan, marked a workout as done). No content.

Heart rate, HRV, sleep and pain are health data, which the LGPD treats as sensitive. We only process them because you consented when you created your account, and only for the purposes below.

What for

Only to make the app work for you: show your numbers, calculate readiness, generate the plan and answer your questions. We don't sell it, don't use it for ads, don't use third-party analytics or tracking tools and don't share it with anyone unless you choose to (see sharing with a coach).

To improve the product, Vante records usage events of its own app: only the type of action, the day and short fixed labels (such as which step of the setup or which card style). Never what you type, health data or location, and nothing goes to third parties. The administrator sees them only added up (active people, retention, how many workouts went to the watch); they are deleted with your account.

Where it lives

• On Cloudflare (Workers, D1 database and R2 file storage).
• Questions and the plan are processed by Workers AI, also on Cloudflare. Cloudflare states it does not use this content to train models.
• Your Intervals key is encrypted (AES-GCM) with a key that is kept outside the database and is tied to your account.
• Notifications go out empty through your browser's push service (Google, Apple, Mozilla or Microsoft); the text is fetched from Vante with your session, so it doesn't pass through them.
• On your device, to open without internet, the app keeps a copy of recent summaries (Today, plan, activity list). GPS routes and your profile are never kept. This copy is erased when you sign out or your session ends.

Security

Login uses a session cookie that page scripts can't read (HttpOnly, Secure, same-site only), limited login attempts, and every query is restricted to your own account. The only cookie is this session one.

Who can see it

Each account sees only its own data, except what you choose to share with a coach (below). The administrator who invited you can see your name, username and how many runs you have, and can remove your account. Because they maintain the infrastructure, they have technical access to the database; they commit to not looking at your data unless you ask (for example, to fix a problem).

Sharing with a coach (optional)

Only if you accept a team invite from a coach. Before accepting, the app shows who the coach is and exactly what they will see: readiness (with the resting HR, HRV and sleep behind it), workouts done and planned, check-ins (effort) and reported pain, plus load and last sync. They do not see your password, access keys, profile notes, activity names, GPS routes or questions to the coach, and they cannot change anything in your account. You can leave the team at any time in Data → Team, and access ends immediately. Deleting your account (or the coach's) removes the link.

How long we keep it

While your account exists. When you delete it, everything is removed from Vante right away: database records, usage events, files and sessions. Cloudflare keeps automatic database backups for up to 30 days to recover from failures; after that, nothing is left. The invite you used stays recorded only as "used", without your name.

Your rights (LGPD)

• Export: Data tab → Export CSV (activities). For a full copy (profile, check-ins, plan), ask the administrator.
• Delete: Data tab → Account → Delete my account. What is in Intervals.icu and Garmin stays there; delete it there if you want.
• Correct, withdraw consent or ask anything: talk to the person who invited you.

Health

Vante is not a medical service and does not replace a professional assessment. Pain or injury: see a physiotherapist or sports physician.