Privacy Policy

Last Updated: January 8, 2026

This Privacy Policy describes how Toga Performance, Inc. (“Toga,” “we,” “us,” “our”) collects, uses, discloses, and protects information when you use the Toga mobile application and related services (the “Services”).

By accessing or using Toga, you agree to the terms of this Privacy Policy.

Contact: support@togaperformance.com

1. What we collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from connected integrations.

A) Information you provide

  • Account information: name, email, date of birth, gender
  • User content: messages to our support team, messages to the AI coach, notes you enter, feedback
  • Health/fitness and injury-related information (if you provide it): Athletic goals, training history, training preferences, sports health history

B) Information collected automatically

  • Device and app data: device type, operating system, app version, language, time zone (approx.), identifiers
  • Usage data: screens viewed, feature interactions, timestamps, referring information
  • Diagnostics: crash logs and performance data (e.g., via Sentry)
  • Technical information: server side logs, IP address, device identifiers

C) Information from connected integrations & wearables

If you connect third-party services (e.g., Strava, Garmin, Polar, Apple Health, COROS, FinalSurge, TrainingPeaks) through Terra or another provider, we may collect workout and activity data you authorize (which may include precise GPS location, distance, time, pace, cadence, heart rate, and related metrics depending on your permissions).

2. How we use information

We use information to:

  • Provide and operate the Services (accounts, plans, workouts, features)
  • Personalize coaching, training plans, and guidance
  • Provide the AI coach feature (processing your inputs to generate outputs for you)
  • Provide support and respond to requests
  • Monitor, maintain, and improve the Services (analytics, debugging, security)
  • Send service-related communications (e.g., onboarding, security, important updates)
  • Comply with legal obligations and enforce our Terms

We do not use your data to train general-purpose AI models at this time. See Section 9 for how this would change if we do in the future.

3. How we share information

We do not sell your personal information.

We share information in the following situations:

A) Service providers (processors)

We share information with vendors who help us operate the Services, such as:

  • Hosting/Infrastructure: Google Cloud Platform (GCP), Render, Expo Application Services (EAS), Apple
  • AI Partner: Google Cloud Platform - Gemini
  • Customer support / CRM: Intercom
  • Analytics and error monitoring: PostHog, Sentry
  • Email & notification delivery: Loops, Expo Application Services
  • Integrations: Terra (to connect to Strava/Garmin/Apple Health/COROS/Polar/TrainingPeaks/FinalSurge)

These providers process information on our behalf.

B) Integrations you connect

When you connect third-party services, we exchange data with them as needed to provide the integration and based on your permissions.

C) Legal, safety, and business transfers

We may disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate fraud/security incidents, enforce our Terms, or in connection with a merger/acquisition/asset sale.

4. Apple Health / Health-related data

If you connect Apple Health, we access and use that data only to provide and improve the fitness and coaching features you request. We do not use health data for advertising, marketing, or “data broker” purposes.

5. Targeted advertising

We currently do not run targeted advertising or retargeting based on your personal information.

If we introduce targeted advertising in the future, we will update this Privacy Policy and provide any required choices/opt-outs. We will not use health or medical data (including Apple Health data) for targeted advertising.

6. Data retention

We retain personal information as long as reasonably necessary to:

  • provide the Services,
  • maintain your account,
  • comply with legal obligations,
  • resolve disputes, and
  • enforce agreements.

You may request deletion of your account as described below. Some information may be retained in backups for a limited period.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including but not limited to the following: encryption at rest, encryption in transit, role-based access control.

While Toga follows generally accepted industry standards to protect the personal data submitted to us, both during transmission and once Toga receives it. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

If we become aware of a breach, we will notify affected individuals and regulators as required by applicable law.

8. Your choices and rights

A) Account controls

You can update certain account details in the app (where available). You can also request:

  • Access: a copy of certain information we have about you
  • Deletion: deletion of your account and associated data (subject to legal exceptions)
  • Correction: correction of inaccurate information

To make a request, email support@togaperformance.com. We may need to verify your identity.

B) US state privacy rights

Depending on where you live and whether applicable state law applies to Toga, you may have additional rights (such as opting out of targeted advertising, certain profiling, or certain data sharing). You can submit requests via support@togaperformance.com.

9. If we later use data to train AI models

If we decide to use user data to train or improve AI models beyond providing outputs to the requesting user, we will:

  • update this Privacy Policy to describe what data is used and why,
  • implement appropriate consent controls
  • describe how you can opt out/withdraw consent
  • explain whether data is de-identified and whether third-party AI vendors may use the data to train their models.

Until then, we use your data to provide the Services to you and improve our product in ways that do not involve training general-purpose models on your identifiable data.

10. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last Updated” date and may provide additional notice for material changes.

12. Contact

Questions or requests: support@togaperformance.com