Your data, plainly.
Tuin is a tool shared between friends, not a company harvesting data. Here is exactly what it keeps and what it never does.
What Tuin stores
Your name and photo from Strava, your OAuth tokens (server-only, never sent to the browser), your training plan and chat history, and derived training numbers per run — distance, time, elevation, average heart rate, and computed training stress (TSS/NGP).
What Tuin never stores
Raw GPS tracks, per-second streams, or your location history. Streams are read once, in memory, to compute a run's training stress — then discarded. This is also what Strava's API agreement requires.
Health data, in the app
If you connect Apple Health or Health Connect in the Tuin app, Tuin imports your workouts — distance, time, elevation, heart rate — to compute the same training numbers it computes for Strava runs. It never reads your location or routes: Tuin doesn't even request that permission. Sync can be switched off in Settings any time, and deleting your account erases these workouts like everything else.
Signing in, and your email
You can sign in with Strava, Google, or Apple. Tuin keeps only what it needs to recognise you — the provider's anonymous ID and, from Google or Apple, the email they share (Apple's Hide My Email works fine). Your passwords never touch Tuin; they stay with the provider. Your email is for reaching you about your own training, never for selling.
Who sees it
Only you see your data — every table is keyed to your athlete ID and locked behind server-only access. Run summaries, your plan, and chat are sent to Anthropic's Claude API to generate coaching, and nowhere else.
Delete everything, any time
One click on the dashboard ("Delete my data") erases your account, tokens, plan, chat, and every derived number — immediately and irreversibly, honoring the GDPR right to erasure. The one thing kept is the anonymous service-cost ledger (call counts and their cost — no name, no runs, no words), retained as billing records under GDPR Art. 17(3). You can also just ask Jordi, the data custodian for this group.
If you only left your email
An address on the beta list is just that — an address, plus whatever you typed in the note. It's used once, to tell you Tuin is open, and you can ask for it to be deleted at any time.