Privacy Policy

Last Updated: February 27, 2026

This Privacy Policy describes how Toga Performance, Inc. (“Toga,” “we,” “us,” “our”) collects, uses, discloses, and protects information when you use the Toga mobile application and related services (the “Services”).

By accessing or using Toga, you agree to the terms of this Privacy Policy.

Contact: support@togaperformance.com

1. What we collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from connected integrations.

A) Information you provide

  • Account information: name, email, date of birth, gender
  • User content: messages to our support team, messages to the AI coach, notes you enter, feedback
  • Health/fitness and injury-related information (if you provide it): Athletic goals, training history, training preferences, sports health history

B) Information collected automatically

  • Device and app data: device type, operating system, app version, language, time zone (approx.), identifiers
  • Usage data: screens viewed, feature interactions, timestamps, referring information
  • Diagnostics: crash logs and performance data (e.g., via Sentry)
  • Technical information: server side logs, IP address, device identifiers

C) Information from connected integrations & wearables

If you connect third-party services (e.g., Strava, Garmin, Polar, Apple Health, COROS, FinalSurge, TrainingPeaks) through Terra or another provider, we may collect workout and activity data you authorize (which may include precise GPS location, distance, time, pace, cadence, heart rate, and related metrics depending on your permissions).

2. How we use information

We use information to:

  • Provide and operate the Services (accounts, subscriptions, plans, workouts, features)
  • Personalize coaching, training plans, and guidance
  • Provide the AI coach feature (processing your inputs to generate outputs for you)
  • Provide support and respond to requests
  • Monitor, maintain, and improve the Services (analytics, debugging, security)
  • Send service-related communications (e.g., onboarding, security, important updates)
  • Measure the performance of our advertising campaigns (e.g., understanding which ads lead to app installs)
  • Comply with legal obligations and enforce our Terms

3. How we share information

We do not sell your personal information for monetary compensation. We share limited information (such as app install and subscription events) with advertising partners as described in Section 5, solely to measure and improve our advertising campaigns. We do not share health, fitness, or Apple Health data with advertising partners.

We share information in the following situations:

A) Service providers (processors)

We share information with vendors who help us operate the Services, such as:

  • Hosting/Infrastructure: Google Cloud Platform (GCP), Render, Expo Application Services (EAS), Apple
  • AI Partner: Google Cloud Platform - Gemini
  • Customer support / CRM: Intercom
  • Analytics and error monitoring: PostHog, Sentry
  • Subscription management: RevenueCat
  • Advertising measurement: Meta (Facebook/Instagram)
  • Email & notification delivery: Loops, Expo Application Services
  • Integrations: Terra (to connect to Strava/Garmin/Apple Health/COROS/Polar/TrainingPeaks/FinalSurge)

These providers process information on our behalf.

B) Integrations you connect

When you connect third-party services, we exchange data with them as needed to provide the integration and based on your permissions.

C) Legal, safety, and business transfers

We may disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate fraud/security incidents, enforce our Terms, or in connection with a merger/acquisition/asset sale.

4. Apple Health / Health-related data

If you connect Apple Health, we access and use that data only to provide and improve the fitness and coaching features you request. We do not use health data for advertising, marketing, or “data broker” purposes.

5. Advertising and measurement

We run advertising campaigns on third-party platforms (such as Meta) to promote Toga to new users. To measure the effectiveness of these campaigns, we share certain in-app events (such as app installs, account registration, and subscription activity) with our advertising partners. This helps us understand which ads lead to new users and allows us to improve our campaigns.

We do not sell your personal information for advertising purposes. We do not share health, fitness, injury, or Apple Health data with advertising partners. We do not use personal information to retarget you with ads after you install the app.

We do NOT collect your device's advertising identifier (IDFA). Our advertising measurement relies on aggregated, privacy-preserving methods (such as Apple's SKAdNetwork)

6. Data retention

We retain personal information as long as reasonably necessary to:

  • provide the Services,
  • maintain your account,
  • comply with legal obligations,
  • resolve disputes, and
  • enforce agreements.

You may request deletion of your account as described below. Some information may be retained in backups for a limited period.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including but not limited to the following: encryption at rest, encryption in transit, role-based access control.

While Toga follows generally accepted industry standards to protect the personal data submitted to us, both during transmission and once Toga receives it. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

If we become aware of a breach, we will notify affected individuals and regulators as required by applicable law.

8. Your choices and rights

A) Account controls

You can update certain account details in the app (where available). You can also request:

  • Access: a copy of certain information we have about you
  • Deletion: deletion of your account and associated data (subject to legal exceptions)
  • Correction: correction of inaccurate information

To make a request, email support@togaperformance.com. We may need to verify your identity.

B) US state privacy rights

Depending on where you live and whether applicable state law applies to Toga, you may have additional rights (such as opting out of targeted advertising, certain profiling, or certain data sharing). You can submit requests via support@togaperformance.com.

9. Age Restrictions

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last Updated” date and may provide additional notice for material changes.

11. Contact

Questions or requests: support@togaperformance.com