Roxya Privacy Policy

This notice explains what Roxya does with your personal data. "Roxya" means the Roxya app for iPhone, the Roxya web app at roxya.app, the server they talk to and, once you pair one, the Roxya app on your Garmin watch or Apple Watch. "We" means the controller named below.

Who is responsible

• Legal name: Aurélien Ferlay
• Postal address: Rue de la Combe 11C, 1196 Gland, Switzerland
• Country: Switzerland
• Privacy contact: contact@roxya.app
• Data protection officer: none designated; Aurélien Ferlay answers data protection requests at contact@roxya.app
• EU representative (GDPR Art. 27): none appointed at this time
• Swiss representative (FADP Art. 14): not applicable, the controller is in Switzerland

The short version

• You need an account: an e-mail address, a password, your name and a handle.
• Wherever you live, your data is stored in the same place: what you record — sessions, splits, notes — is on our server in Amsterdam, in the Netherlands, run by our hosting provider Railway. We do not store it in each user's own country. Photos and videos are kept in Railway's file storage in Amsterdam too; older copies remain with Infomaniak, in Switzerland, until we close that storage, by the end of October 2026.
• Apple Health is optional. If you connect it, one value per day for each kind of health figure is copied to our server.
• Roxya is free. The AI coach, Roxya Coach, is an optional subscription in tiers (Starter, Plus, Pro, Elite and Max, each with a monthly coach budget, monthly or yearly), sold by Apple in the iPhone app and by us on the web, where Stripe processes the payment and a 7-day free trial comes first. Before it first runs, the app asks for your explicit permission; from then on, what you send it and the training data it needs go to Anthropic, which makes Claude, for the answers, and to OpenAI for voice messages and, under the current permission, when Claude is unavailable, both in the United States (under the permission the first version of the app asked for, OpenAI does everything). Without the subscription and your permission, nothing is sent to them.
• Other Roxya users can see your profile and your sessions unless you make them private, and your heart rate only if you choose to show it. You can block anyone, and report what breaks our rules.
• You can delete your whole account in the app.
• If you used the previous Roxya app, your account continues; see If you used the previous Roxya app.
• We do not sell your data, show ads, or use advertising or third-party analytics tools. Our own statistics (your country, your age group, how much you use the coach) stay on our server; see Statistics.

What we collect and why

Your account

• Data: e-mail address, password (we keep only a one-way hash of it), full name, a handle that other users see, an optional age category, your language, the country your phone's region names (see Statistics), and the sign-in tokens that keep you logged in.
• Why: to create your account and keep you signed in on your iPhone, also when it is offline: the app keeps your sign-in tokens and the profile it last received in the iPhone's Keychain.
• Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Required: yes. Without them we cannot give you an account.

Roxya in your browser

• Data: the web app at roxya.app (also www.roxya.ch) is the same Roxya as the iPhone app, with the same account and the same data: your browser sends what you enter straight to our server, not to the web app's host. To keep you signed in, our server sets three cookies for the site you use (roxya.app or roxya.ch): two hold your sign-in tokens and cannot be read by any script, and the third protects your changes against other sites acting in your name. The web app keeps nothing else in your browser except, as the iPhone does, a workout you are still editing and the values the editor remembers, which signing out erases; its addresses never contain your name or anything about you. Your browser's language chooses the app's language and, from the country it names, the minimum age at sign-up and the country of Statistics, never your network address. Vercel, which hosts the web app's files, records the address, browser and page of each request in its logs.
• Why: to let you use Roxya on Android and on a computer, keep you signed in for 30 days of use, and protect the site.
• Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)); the host's logs, our legitimate interest in a secure service (Art. 6(1)(f)). The cookies are strictly necessary, so we do not ask for consent, and there are no analytics or advertising cookies. The only optional one is roxya_src, set only if you accept it (see How you found Roxya).
• Required: the cookies, to use the web app signed in. Signing out deletes them.

Keeping the service secure

• Data: your IP address each time you sign in, register, search for athletes, open your feed, sessions or notifications, report something or connect a device, and your device's user agent in security events; the e-mail address typed at login, including failed attempts; each code entered, requested or e-mailed for your account and each password change, recorded with your account's address; a failed attempt when you type a wrong password to delete your account (never the password itself); security events such as logins, password resets, reports and account deletions. Our security log does not record e-mail addresses: it keeps a coded reference, made with a secret key, instead.
• Why: to stop password guessing and abuse, and to investigate incidents.
• Legal basis: our legitimate interest in keeping the service and your account secure (GDPR Art. 6(1)(f)). You can object; see Your rights.

Statistics

• Data: your country, as you choose it on the page the app shows once (from 2026-10-18; until then, as your phone's region names it when you sign up and each time the app opens; it is never worked out from your IP address); your sex (woman, man, or "prefer not to say") and your level from Beginner to Elite, as you answer them on that page; the month you signed up; your age group, worked out from your date of birth when the statistics are produced (the date itself is never shown); whether you subscribe to Roxya Coach; and, if you use the coach, how much you used it each day: messages, voice messages, photos, model requests and their size, and which AI model answered.
• Why: to know in which countries and age groups Roxya is used and how it grows, and what the coach costs for each athlete, so that we can set its price and its monthly limits. Only Roxya's administrators see these statistics: accounts as totals by country, age group, sex, level and month of sign-up, and the coach's use per athlete with their handle, country and subscription, never their e-mail address or date of birth. Administrators also see, per account, your handle and name, when you signed up, and how much you use Roxya: how many workouts you made, sessions you recorded (and from which device), sessions planned, whether a watch is linked, and coach messages, never their content. The topics of the coach's questions are counted only as anonymous monthly totals for all athletes (see The AI coach).
• Legal basis: our legitimate interest in understanding how Roxya is used and in keeping the coach's costs under control (GDPR Art. 6(1)(f)). You can object; see Your rights. To stop us keeping your country, turn off Settings > Privacy > Statistics > Keep my country (from app version 1.0.1): we delete it and ignore your phone's region until you turn it back on.
• Your country on your profile: the country you choose is shown to other users as a flag beside your handle. Your sex and level are never shown to anyone else. You can change all three in Edit Profile.
• How long: your country, sex and level, until you change them or delete your account; your daily use of the coach, 13 months.
• How people sign up (from 2026-10-21): we count, per day, platform and app version, how many sign-ups reach each step (form opened, e-mail checked, password accepted, sent, account created, link sent, opened, confirmed, or not confirmed after 30 days), to see where people give up. The app makes a random number for each attempt so it counts once per step; we never store it, and nothing in these counts identifies you (no e-mail, no IP address). Same legal basis and right to object as above.
• Checking your e-mail address as you type it: we check its form and ask the internet's directory (DNS) whether its domain receives e-mail, and suggest a fix for a common typo. We never contact your mailbox, and the check stores nothing.
• How active Roxya is (from 2026-10-21): we keep the last day your account used Roxya (any app, the website, a watch or a connected assistant), written at most once a day, to count how many accounts are active each day, week and month. We also count, per day and without anything that identifies you, how many accounts were created and deleted and how many subscriptions started and were cancelled; deleting your account removes you and leaves only "one account was deleted that day". Same legal basis and right to object as above.
• Where the coach's plan selector starts (from 2026-10-23): to learn which starting position helps athletes choose the plan that suits them, an account created from that date that has never subscribed is given, once and at random, one of five starting positions (Free or one of the first four plans) the first time it sees the coach's plans. The prices are the same for everyone; only where the selector starts differs. We record, with your account number only (no e-mail, no IP address, no device identifier): when you saw the plans, from which app and version and at which sign-up step; each move of the selector, monthly or yearly, the consent box, the subscribe button, the payment page opened or closed, continuing for free, payment, and plan changes in the 30 days after. Only administrators see totals per starting position, never one account's history. Legal basis: our legitimate interest in improving the subscription screen (GDPR Art. 6(1)(f)). You can object at support@roxya.app: we take your account out of the experiment and delete its records. Deleted with your account; 24 months after your last record, only totals per starting position remain, with nothing linking them to you. Since 2026-10-24 the same records (without a starting position drawn for you: where the selector started on your device, and the close button) are kept for every account that sees the coach's plans, so administrators see totals for all athletes; the same legal basis, objection, deletion and 24-month limit apply.
• Which Roxya app and device you use (from 2026-10-23): each Roxya app (iPhone, Apple Watch, Garmin, web) tells our server its version and, except on the web, the device model and system version (for example "iPhone17,1, iOS 26.1" or a Garmin model number), and what a watch app can play. We keep the latest values for each device, first and last use, and a dated record each time they change, so we show you only the notices that concern your own apps (for example "update Roxya on your watch to play strength") and see how quickly updates spread. No IP address, browser details or device serial are kept. Only administrators see versions per platform and which accounts to tell about an update. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)). You can object at support@roxya.app. A watch's record goes when you unpair it; the dated records after 12 months; everything with your account.

Visits to our web pages

• Data: when you open a page of roxya.app or roxya.ch, with or without an account, your browser tells our server: the page's section (only the first part of its address, e.g. /backyard), the site that sent you (its name only, e.g. google.com), whether you use a phone, a tablet or a computer (from the browser's description), and the region of your browser's language (e.g. CH for fr-CH). To count each visitor once a day, our server mixes your network address and your browser's description with a random value of the day and keeps only the result; the random value is deleted when the day is over, so the next day you are a new visitor and nobody, us included, can tell it was you. Your network address and your browser's description are never stored. The page also says how you arrived: the channel only, such as our Instagram bio or a post, our Garmin store listing, an ad campaign, a poster's QR code, the name of the site that sent you, or "direct". It stays in the page's address and memory during the visit; it is counted per day with the other totals and, if you create an account, kept with your account as the channel you signed up from (never shown to other athletes; our administrators see only totals per channel). No advertising identifier and no click identifier are used (see How you found Roxya).
• Why: to know how many people visit Roxya, which pages they read, where they come from and how many of them create an account (legitimate interest, Art. 6(1)(f); FADP Art. 31). There is no cookie by default, nothing is stored in your browser (the only exceptions are your answer to the cookie banner, roxya_consent, kept 12 months so the banner does not come back, and roxya_src, if you accept it; see How you found Roxya), and no third party is involved. Only Roxya's administrators see the totals.

How you found Roxya (links and an optional cookie)

• Data: our short links (for example roxya.app/g on the Garmin store, roxya.app/ig on Instagram, roxya.app/qr on a flyer) are counted when the page they open tells our server it came from one: the channel (e.g. instagram, bio, a campaign name) and the day only, with no identifier and nothing stored on your device. During your visit, the channel stays in the page's address and in its memory only; if you create an account in the same visit, the channel (source, medium, campaign, e.g. garmin, store_listing) is saved with your account and your first subscription. If you open the page without one of our links, we only note the site that sent you (its name) or "direct".
• In the iPhone app: when one of our links opens the app, the app keeps the same channel in its memory only, until the app is closed, and sends it only if you create your account then. It stores nothing on your phone, uses no advertising identifier and never asks to track you. App Store links may carry a campaign name (ct) that Apple counts on its side, without telling us who installed the app.
• Optional cookie: a small banner offers to remember this channel between visits. Only if you choose Accept, the web app keeps one value named roxya_src in your browser (the channel above, nothing else) for 30 days. Refuse keeps the default: the channel is not stored. Your choice itself (Accept or Refuse, nothing else) is remembered in your browser as roxya_consent for 12 months, so the banner does not come back; you can change it at any time with the "Cookies" link at the bottom of the page.
• Why: to know which channels bring athletes and subscribers, so that we spend our effort on those (legitimate interest, GDPR Art. 6(1)(f), for the click counts and the channel saved at sign-up; your consent, ePrivacy Art. 5(3) and GDPR Art. 6(1)(a), for the roxya_src cookie; FADP Art. 31). No third party receives it, and it is never used for advertising.
• Kept: the click counts as statistics; the channel with your account until you delete it; roxya_src 30 days in your browser, or until you refuse or clear it.

When you sign up, and when you subscribe to Roxya Coach for the first time, Roxya's administrators get a notification on their phone with your handle (or your first name), never your e-mail address, so that they can welcome you; it is deleted with your account.

Your profile and performance metrics

• Data: bio, profile photo, your privacy settings, chart preferences, a body-weight log, the date of birth you give at sign-up (stored encrypted; only you see it, in Edit Profile), and the performance metrics you enter: maximum, resting and threshold heart rate, VO2max, paces, personal records, weight, height and age (one-repetition maximums entered in an earlier version are kept, though the app no longer asks for them). The AI coach can propose new training figures for your profile; they are saved only if you confirm its card.
• Estimated figures: where you leave a figure empty, we estimate it from the others and mark it as estimated wherever it is shown, the coach included: for example your maximum heart rate from the highest heart rates your sessions recorded or from your age, your resting heart rate as the median of the last 30 days that Apple Health synced, and your race times, paces and VO2max from one another. A figure you type always replaces the estimate. Estimates are worked out each time they are shown and are not stored.
• Why: to show your profile and to compute your training zones, targets and statistics. A station you add starts with the load you last used there, which we work out from your own sessions and saved workouts each time and do not store.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)). Heart-rate figures, VO2max, body measures and injuries are health data. These fields are optional and you fill them in yourself, for the features above; that is how you give your explicit consent (GDPR Art. 9(2)(a)). You can withdraw it at any time by clearing them in your profile.
• Required: no, apart from your handle and name.

Workouts, plans and training history

If you use strength exercises, we keep the exercises you create yourself (only you see them) and, for each exercise, the sets you used last, with an estimate of your one-repetition maximum (1RM) from your best set; they are in your data export and deleted with your account.

• Data: the workouts and plans you build or save; the sessions you record — times, distance, pace, loads, repetitions, notes, and the text of voice notes; the sessions your paired Garmin watch or Apple Watch sends us; heart rate and calories when a watch supplies them; photos and short videos you add (we remove the hidden metadata, such as location, from session photos and videos); the training partners you tag.
• Why: to record your training and show you statistics and progress.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)); for heart rate, which reaches us from a watch you link, the explicit consent you give when you link it (GDPR Art. 9(2)(a); see Your Garmin watch).
• A workout you finish without a connection stays on your iPhone until our server has it, and is then deleted from the phone. It is only ever sent for the account that recorded it.

Your location during runs

• Data: your precise location while a run step is tracked in the workout player, including while the app is in the background during the workout (iOS shows its location indicator).
• Why: to measure distance and pace and draw your route during the run.
• What leaves your phone: the route of each tracked run, accurate to about one metre, is uploaded with the session. Other users never see it, and it is not sent to the AI coach's provider: when the coach looks at that session, it gets the distance, not the route.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)).
• Optional: you can refuse location access; distance is then not measured by GPS.

Apple Health (optional)

• What we read on your iPhone, only after you connect Apple Health in Settings, Integrations: workouts, heart rate, resting heart rate, heart-rate variability, active and resting energy, walking and running distance, steps, VO2max, body weight, body-fat percentage and sleep.
• What we copy to our server: one value per kind per day — for example your average heart rate, your latest resting heart rate, how long you slept — with an identifier that your iPhone assigns to our app.
• Why: to show recovery, sleep and training load, to adapt your plan and, if you subscribe, to let the AI coach take them into account.
• Legal basis: your explicit consent (GDPR Art. 9(2)(a) and Art. 6(1)(a)), which you give by connecting Apple Health in the app and allowing it in Apple's permission sheet.
• Stopping: Delete Data on the Apple Health screen deletes everything we copied and stops the sync. You can also remove Roxya's access in the Health app at any time.
• Your choice belongs to your account: when you sign out, nothing is read or sent, and someone else signing in on the same iPhone starts with Apple Health off.
• We never write to Apple Health and never use Health data for advertising or marketing.

The coach waitlist

• Data: if you joined the waitlist before the coach arrived: that you asked to be told when it arrives, when, and the most you would pay per month if you set it on the dial, with your phone's currency.
• Why: to tell you that the coach is available, and to set its price; we only ever look at totals per amount, never at who answered what. The waitlist is closed now that the coach is available.
• Legal basis: your consent (GDPR Art. 6(1)(a)). Write to us to have your entry deleted; it is also deleted with your account.

The AI coach (Roxya Coach subscription)

• Your permission first: before the coach first runs, the app tells you what it sends, to whom and why, and asks whether you allow it. Nothing is sent to Anthropic or OpenAI before you do, and our server checks your permission and your subscription before every request (Roxya's administrators use the coach without a subscription, never without their permission). You can withdraw your permission at any time in Settings, Privacy: from then on nothing more is sent and the coach stops answering, while the rest of Roxya keeps working. We keep a record of each permission — when you gave it, for which version of the text, and when you withdrew it — until you delete your account.
• Who answers: it depends on the permission you gave, which the app shows before the coach first runs. The current permission (text of 22 October 2026, which also lists what is not sent) names Anthropic, which makes Claude, for the answers, and OpenAI for voice messages and when Claude is unavailable; the earlier text of 15 October 2026 names the same two and stays valid: Claude (Claude Haiku 5.5) answers you, and if Claude cannot answer a message because it is overloaded, has reached a usage limit, is out of service or cannot be reached, before any of its reply has reached you, OpenAI's model answers that message instead, with the same information, and the rest of that answer stays with OpenAI; a message Claude declines to answer is never sent to OpenAI. An earlier permission of version 1.0.1 names Anthropic for the answers and OpenAI for voice messages only: Claude answers, and nothing goes to OpenAI when it is unavailable. The permission version 1.0 asked for names OpenAI only: OpenAI's models answer you. Only one permission is open at a time: accepting a new text ends the earlier one. Roxya's administrators can choose, for their own messages only, which of these providers' models answers, to test them.
• Terms you accept: when you start using the coach, we record which versions of the terms of use, of this notice and of the AI warning you accepted, and when, for as long as your account exists.
• What is sent with each message to the provider that answers you: the coach's rules; a summary of your training (your age in years, heart-rate zones and paces worked out by our server, race date, the last load you used at each station, this week, your last five sessions, the next fourteen days of your plan and the size of your library); the earlier messages of the conversation (the most recent ones, up to about 24,000 characters); your new message — its text, the transcript of a voice message, or a photo with its caption; the workouts and sessions you attach; and what the coach looks up to answer you: sessions with their splits and heart rate, metrics, training load, records, Apple Health figures, your plan and your workouts. Never your name, e-mail address, handle, date of birth, weight or body fat, the injury notes in your profile or the route of a run, unless you write them in a message yourself.
• Profile values you give the coach: when you tell the coach a value about yourself (your maximum or resting heart rate, a record, a fitness test such as a half-Cooper, your weight or height), it prepares a card, and the value is saved to your profile only when you confirm it. Weight and height are health data; the coach writes them only from what you tell it, and never reads your weight or body fat from Apple Health.
• Safety: a message that mentions chest pain, fainting, numbness, dizziness or unusual breathlessness is answered with a fixed message telling you to get medical help; it is not sent to Anthropic or OpenAI.
• Web searches: when you ask the coach to search the web, your question is sent to Anthropic or OpenAI and their search provider, restricted to the HYROX sites listed: hyrox.com (with its results pages), hyresult.com, roxfit.app and hyroxinsider.com. At most three searches per request; the coach reads no other website and opens no page itself. It is told never to put your figures (age, heart rate, paces, times) into a search; your name goes into one only when you write it to ask for your own results.
• Charts: the coach can show your own figures as a chart in the conversation (build 73 and later); the app draws it, and the chart is kept with the conversation.
• Voice messages and photos: a voice message is sent to OpenAI to be turned into text, and a photo is sent with your message to the provider that answers you. We do not keep the recording or the photo: we keep only the transcript, as your message, and the caption you wrote. With your permission, the coach's « Add context » sheet shows your latest photos; they are read on your phone only, and a photo leaves it only when you tap it to add it to a message.
• Files: a file you add to a message (a PDF, a text or CSV file, a GPX or FIT activity) is read on our server in memory: a PDF or text is sent with your message to the provider that answers you; for an activity file we send only a summary (distance, duration, pace and heart rate per kilometre, elevation), never the GPS track. We do not keep the file, only the message you wrote.
• Where: Anthropic and OpenAI process these requests on servers in the United States.
• How long they keep them: Anthropic deletes our requests and its answers within 30 days, unless its automated safety systems flag one, which it may then keep for up to 2 years (and the safety scores for up to 7 years); it may not train its models on them. We ask OpenAI not to store our requests; according to OpenAI's documentation, it then keeps them for up to 30 days, for abuse monitoring only, and does not use data sent through its API to train its models by default.
• Contract: Anthropic and OpenAI process these requests for us under their data processing addenda, with Anthropic Ireland, Limited and OpenAI Ireland Ltd. as our contracting parties; see Transfers outside Switzerland and the EEA.
• Changes need your tap: the coach proposes each change — a workout, your plan, your race date, training figures in your profile — on a card, and nothing is saved until you confirm it. A card you have not confirmed expires after 24 hours. What you confirm stays in your workouts, plan and profile.
• What we keep: your conversations, with their messages (encrypted on our server), the cards the coach proposed and the charts it showed, until you delete the conversation or all of them, delete your coach history or delete your account, and in any case 365 days after the conversation's last message. Archiving a conversation hides it from the list and from the coach but keeps it. To keep the subscription within its tier's monthly budget (or the trial's; a subscription bought before 21 October 2026 keeps its 600 messages a month instead), we record for each answer the model that gave it, the amount of text it read and wrote (tokens), its web searches and what it cost, without any text of the conversation; these records stay in our cost totals after you delete your account, without your account number. We also count, for each month of your subscription (starting on the day it started), the messages the coach answered and the web searches it ran for them; and to keep it within its limits, we count your use each calendar month (messages, voice messages, photos, model requests and their size), and each day with the model that answered (see Statistics). We keep these counts for 13 months. We also keep daily totals of how the coach is used, without your identity or any text, for 400 days.
• Topics of your questions: for each answer, the coach also notes one topic from a fixed list: training plan, single workout, race strategy, pacing and heart rate, injury and recovery, nutrition, using the app, strength, other. We keep only the number of answers per topic and per month, for all athletes together: never the text, who asked or which conversation. Administrators see a month only if at least 5 athletes used the coach in it. We keep these totals for 400 days. Legal basis: our legitimate interest in knowing what to improve in the coach (GDPR Art. 6(1)(f)); the totals are anonymous. You can object; we then stop counting your topics.
• Conversations with the previous coach: messages exchanged with the coach of earlier versions of Roxya, and what it remembered about you, are no longer used; they stay with your account until you delete your coach history or your account, or ask us to delete them.
• Legal basis: our contract with you for the subscription (GDPR Art. 6(1)(b)); for health data, your explicit consent, which is the permission above (GDPR Art. 9(2)(a)); for the daily totals, our legitimate interest in running and improving the coach (GDPR Art. 6(1)(f)).
• Profiling: the coach evaluates your training and recovery in order to suggest sessions and plans for HYROX, the eight stations and running. It never sets a station load itself (Roxya fills each one with the load you last used at that station, or leaves it for you). Its suggestions are not decisions about you, and it changes nothing until you confirm.
• Not medical advice: Roxya is an AI and can make mistakes. The coach gives training guidance, not medical advice, and does not replace a doctor, a physiotherapist or a qualified coach. Consult a professional if in doubt.

Dictation

With Roxya Coach, you can dictate instead of typing: the recording is sent to OpenAI to be turned into text, with a list of the sport's words (HYROX, the stations) so that they are spelt right; the text comes back for you to edit and send. We keep neither the recording nor the text you do not send. It needs the same subscription and permission as the coach. Legal basis: our contract with you (GDPR Art. 6(1)(b)); if you speak about your health, your explicit consent (GDPR Art. 9(2)(a)).

Analysis on our server

Insight cards, recovery and readiness scores, training-load figures and suggested plan changes are computed on our server with fixed rules, without any outside provider. This analysis changes your plan only when you ask it to.

Community features

• Data: whom you follow and who follows you, follow requests, likes, comments and replies, training partners, and the session summaries shown in the feed.
• Who sees it: other signed-in Roxya users, except athletes you have blocked or who have blocked you. A new profile is public and its session details are shown, except your heart rate: others see it only if you choose to show it in Privacy, Shared sessions. You can make your profile private, so that only people you accept can see it, and choose in Privacy which session details others see. Nothing is published on the open web.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)); for heart rate shown to others, your explicit consent, which you give by choosing to show it (GDPR Art. 9(2)(a)).

Workouts done together

• Data: when you link a workout with another athlete (only someone you follow and who follows you back): the invitation and its answer, the link and when it ended; which of your sessions of that workout were done together with theirs (started less than an hour apart); that they were told you finished it; and your choice Show my workouts done together in the feed.
• Who sees it: the other athlete sees the linked workout, the link, when you finish a session of it and which sessions you did together. Others who can see your session see « with @x » only while you both keep that choice on (it is on by default) and neither session is private; never an athlete blocked by either of you.
• Your choices: turn it off in Settings, Privacy; end the link at any time (the other athlete keeps their own copy of the workout). It is in your data export and deleted with your account.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)).

Reports, blocks and moderation

• Blocking: you can block an athlete from their profile, a session, a comment or a conversation. Neither of you then sees the other's profile, sessions, comments or messages, and neither can follow or message the other; follows between you end, and their comments and likes on your sessions are deleted. They are not told. Your conversation is hidden from both of you, not deleted, and comes back if you unblock them in Settings, Privacy, Safety. We keep a block until you lift it or one of you deletes their account.
• Reporting: you can report a profile, a session, a comment or a message, with a reason and an optional note. We keep your report, your note, who and what you reported, and a copy of the reported text as it was when you reported it: a profile's name, handle, bio and coach specialty; a session's description and the addresses of its photos; a comment; or the one message you reported, never the rest of the conversation. The copy is encrypted on our server like direct messages. The person you report is not told who reported them.
• Who looks at reports: our moderators, who are Roxya's administrators. They see the report, your note, the reported content and both accounts, and can dismiss the report, remove the content or suspend the account. For a reported message, they also see its pictures and PDFs, and only that message's, while the report is open, through links that stop working after a few minutes; we record which moderator opened which file. Removing content deletes a comment or a message; takes the description and photos off a session, which becomes private; or clears a profile's bio, photo and coach specialty and replaces a name or handle that breaks our rules.
• Suspension: a suspended account can no longer sign in, and its profile, sessions, comments and likes are hidden from everyone; nothing is deleted. If your account is suspended, write to contact@roxya.app: that is also how you can get a copy of your data or have it deleted, since you can no longer do it in the app.
• Text we refuse: names, handles, bios, comments, session descriptions and messages that contain slurs or sexual abuse are refused when you try to publish them; we keep nothing of the refused text.
• How long: a report, with your note and the copy of the reported content, is kept until your account or the reported account is deleted; we have not set a shorter period yet. A suspended account is kept until it is reinstated or deleted at the athlete's request.
• Legal basis: our legitimate interest in keeping Roxya free of abuse and in meeting the App Store's rules for apps where users publish content (GDPR Art. 6(1)(f)); blocking is part of our contract with you (GDPR Art. 6(1)(b)). You can object; see Your rights.

Messages

Direct messages are stored encrypted on our server and shown only to you and the person you write to. If you delete your account, your messages are deleted; the other person keeps the conversation, without your name, and their own messages. If only you wrote in it, it is deleted. If you report a message, a copy of that one message is kept with your report (see Reports, blocks and moderation). Legal basis: our contract with you (GDPR Art. 6(1)(b)).

Notifications

We keep a list of your in-app notifications. Once push notifications are switched on, they go through Apple's push notification service and can include the sender's handle and the first words of a message or of a coach reply. You can turn notifications off in iOS settings. Legal basis: our contract with you (GDPR Art. 6(1)(b)).

Your Garmin watch

You link the watch by typing the Device ID it shows (or the pairing code a newer watch app shows) into Devices in the iPhone app; linking starts the sync. The watch then receives your handle, so that it shows which account it is linked to, your upcoming sessions with their dates, each station with the load the session sets or else the one you last used there, and this week's planning, with whether each session is done, skipped or missed. You can take a workout off the watch from the watch, which turns off Send to watch for it. The watch sends us the sessions you complete: times, splits, distances, heart rate (average and maximum, for the session and for each part), the calories it counted and whether the watch saved its own recording. Its requests travel through the Garmin Connect app on your phone. The watch's access expires 90 days after it was last used, and you can pause or remove it at any time in Devices; it loses access at once. Legal basis: our contract with you (GDPR Art. 6(1)(b)); for heart rate, your explicit consent (GDPR Art. 9(2)(a)), which you give when you link the watch after the app tells you that it will send us your sessions with their heart rate; we record when you gave it.

Your Apple Watch

The Roxya app on Apple Watch is linked from Devices in the iPhone app, which passes the watch its access over the connection between your iPhone and your watch. It then receives the same upcoming sessions and week as the Garmin app, and sends us the sessions you save with the same details (times, splits, distances, loads, strength exercises and sets, heart rate as averages and extremes, calories, and, on runs when the watch measures them, cadence and running power), plus which Roxya app version and watch model you use. During a session you start in Roxya it reads your heart rate, distance and calories from Apple Health on the watch, with the permission watchOS asks you for, and saves the workout to Apple Health. On an outdoor run it uses your location to measure the distance; your position stays on the watch, in memory, and is neither saved nor sent to us. The watch keeps its access in its own secure storage (the Keychain), the last seven days of your sessions, this week's figures for its widget and anything waiting for the network. Pausing or removing the watch in Devices ends its access at once and clears it from the watch. Legal basis: as for the Garmin watch: our contract with you (GDPR Art. 6(1)(b)); for heart rate, your explicit consent (GDPR Art. 9(2)(a)), given when you link the watch.

Your subscription

If Roxya gives you the coach, we keep which plan, from when and until when, and which of our administrators gave or ended it; you get a notice in the app, and it is deleted with your account.

Apple sells the subscription and handles the payment; we never see your card or billing details. When you subscribe, renew or restore, and each time the app starts or you sign in while subscribed, the app passes us the record Apple signs, and Apple also notifies our server of renewals, expiry, refunds and revocations. We check Apple's signature and keep, linked to your account: the original transaction number, the product (which gives your tier and whether it is monthly or yearly), whether it was a test or a real purchase, when the paid period started and when it and any billing grace period end, a change of tier Apple will apply at renewal, and whether it was refunded or revoked. If you restore the subscription while signed in to another Roxya account, it moves to that account. We check this record before each coach request. Deleting your Roxya account does not cancel an Apple subscription, and we cannot cancel it for you: cancel it in Settings › your Apple ID › Subscriptions (https://apps.apple.com/account/subscriptions); the app offers Manage Subscription before you delete. Legal basis: our contract with you (GDPR Art. 6(1)(b)).

In the web app (roxya.app), we sell the same subscription and Stripe, our payment provider, processes the payment. Subscribe opens Stripe's payment page; we pass Stripe your Roxya account number, your e-mail address and your language, and the price of the tier you chose (in Swiss francs, which Stripe can show and charge in your own currency; for the first web price, the currency of the country in your profile), with the 7-day free trial when your account has never had a coach subscription, and the launch offer for a subscription started by 31 December 2026. You enter your card on Stripe's pages, even for the trial: we never see your card number or billing details; Stripe holds them. Stripe notifies our server of payments, renewals, the trial's end and cancellations; we check the notification's signature, read the subscription back from Stripe and keep, linked to your account: the Stripe subscription number, its tier and period, whether it was a test or a real payment, its status (in trial, active, payment late or ended), when the trial ends, when the paid period started and ends, the discount it carries (the launch offer's percent and the months it lasts), and a change to a lower tier scheduled for the period's end. From the subscription number we read, when we need it, the Stripe customer it belongs to, to open Stripe's page for you; we do not keep it. For a receipt, we read the invoice back from Stripe (amount, currency, number, date, Stripe's link to it) to put it in the e-mail. During the trial the coach runs on a reduced trial budget; the tier's budget starts with the first payment. Changing tier in Settings › Subscription asks Stripe to apply it (a higher tier at once, with the difference charged; a lower tier at the period's end). Manage Subscription opens Stripe's page to change the card or cancel in one click. Deleting your Roxya account cancels a subscription bought on the web, or through Google Play, automatically, before your data is erased. Stripe's record of you as a customer and its invoices and payments stay after your account is deleted, because they are our accounting records, which Swiss law requires us to keep for 10 years (Swiss Code of Obligations Art. 958f). When we erase your account we detach your saved cards from that record, remove the notes we had put on it and the Roxya account number on the subscription, and keep nothing else of you there: only what an invoice needs (your billing name, e-mail, address and country, the invoices and payments). We no longer read it afterwards. Stripe does not let anyone edit a completed payment page, so the Roxya account number stays on that page's record at Stripe: it is an internal number that leads to no one once your account is erased, and we never give it to another account. Legal basis: our contract with you (GDPR Art. 6(1)(b)); for the invoices kept after the deletion, our legal obligation to keep accounting records (GDPR Art. 6(1)(c)).

Subscription e-mails. When a subscription starts (or starts again after it ended) and when its plan changes or a change is scheduled, wherever it was bought, we e-mail you a confirmation: the plan (its name, such as Roxya Coach Pro, and billing period), the price when the store gives it to us, when it renews or when the change takes effect, and where to change or cancel it. For a web subscription we also e-mail you when its free trial starts (the date and amount of the first charge, the launch offer if it applies), 2 days before the trial ends, a receipt after each payment (amount, date, invoice number and Stripe's link to the invoice, next charge), a notice when a payment fails, and a notice when the subscription ends. Each of these billing e-mails carries a link that opens Stripe's page for your subscription without signing in: the link holds an encrypted code naming your account, valid for 30 days, so anyone who has the e-mail can use it to change the card or cancel; do not forward it. To send each e-mail once, we keep on the subscription a short key of the last one sent (the event and its date, nothing else); it is deleted with the subscription. Legal basis: our contract with you (GDPR Art. 6(1)(b)).

Cancelling. When you cancel (in Settings › Subscription, signed in to your account, in Apple's or Stripe's settings, or by deleting your account), we keep a record of it: a reference, the store, the product, the price, how and when you asked, when access ends, and the reason if you gave one. It holds your account number (removed when you delete your account) but not your e-mail address or name. We e-mail you the confirmation (what was cancelled, when we received it, when it ends, the reference) and e-mail Roxya the same record. The record is kept for 3 years after the cancellation, including after your account is deleted, as proof of the cancellation, then erased. Legal basis: our legal obligation to confirm a cancellation (GDPR Art. 6(1)(c); in Germany § 312k BGB) and our legitimate interest in proving it (Art. 6(1)(f)).

E-mails

• Signing up: we e-mail you a six-digit code, and your account is created only when you enter it. Until then we keep what you entered (e-mail address, a one-way hash of your password, name, handle, age category, date of birth, encrypted) with a coded form of the code; the code expires after 30 minutes, and if you do not enter it, these details are deleted the next time someone signs up. If the address already has an account, we e-mail its owner a notice instead of a code, so that nobody can find out which addresses have an account.
• Your password: a six-digit code to reset it if you forget it, and a notice whenever it is changed or reset. A change or reset signs you out on every device.
• Codes: each is valid for 30 minutes and stops working after five wrong entries; at most five are sent per hour. We keep only a coded form of each (a keyed hash) until it is used, and delete an expired one a day later.
• Roxya news: we e-mail you news about Roxya (new features, important changes, training content) from news@roxya.app, through Resend. It is on from sign-up, and we tell the accounts that existed before 20 October 2026 once in the app. Stop it at any time in Settings › Notifications › E-mails or with the link at the bottom of each of these e-mails; the link needs no sign-in and stops only the news. We use only your e-mail address and the app's language, and keep whether you get it on your account until you delete it. Legal basis: our legitimate interest in telling our users about our own service (GDPR Art. 6(1)(f)), for your address as an existing user (Swiss UWG Art. 3(1)(o); EU ePrivacy Directive Art. 13(2)), with your right to object at any time (GDPR Art. 21(2)).
• Offers and promotions (marketing e-mails): only if you agree, we e-mail you Roxya's offers (for example a launch offer or a discount on a paid plan). The box at sign-up is unchecked, and you can turn it on or off at any time in Settings; each of these e-mails has a link that stops them in one click, without signing in. We keep your answer and the time you last changed it on your account, until you delete it, and a record of each change (where it came from, which version of the text you saw, and when) for as long as the account exists. A spam complaint about one of our e-mails also stops them. Legal basis: your consent (GDPR Art. 6(1)(a); EU ePrivacy Directive Art. 13(1); Swiss UWG Art. 3(1)(o)), which you can withdraw at any time without affecting what was sent before.
• Account e-mails contain only the links they are for (confirming your address, keeping or deleting an account); the news e-mails contain only the link that stops them. Account e-mails go through Resend (sent from Ireland, its account data in the United States), or through Infomaniak in Switzerland when Resend cannot send them; the news through Resend only, from news@roxya.app. Replies to account e-mails go to support@roxya.app, replies to the news to contact@roxya.app.
• Legal basis: our contract with you (GDPR Art. 6(1)(b)); for the notices, also our legitimate interest in keeping your account safe (GDPR Art. 6(1)(f)).

Apps you connect (Claude, ChatGPT, Codex, Perplexity)

You can connect an AI assistant to your Roxya account, today Claude by Anthropic, ChatGPT or Codex by OpenAI, or Perplexity by Perplexity AI, so it can coach you with your own data. You sign in on Roxya's own page, which names the assistant and what it may do, and you choose whether it may change anything:

• Reading: your profile (age, height, weight, heart-rate figures, records, goals, availability, equipment, and the pain and injuries you entered), your race date, the last load you used at each station, your workouts and plan, your sessions with every split (time, distance, reps, load, heart rate, pace), your metrics, training load and records, and what you synced from Apple Health. Never your name, e-mail address, handle, run routes, photos or messages, nor anyone else's data.
• Changing, only if you leave it ticked: creating, changing, duplicating, archiving and restoring workouts, managing your plan (planning, moving, skipping and removing sessions, recurring sessions, recovery weeks, cancelling the plan), setting your race date and filling in your profile. It cannot delete a session you recorded.

What the assistant reads, it sends to its operator, which keeps it under its own terms and privacy policy, on servers in the United States and other countries: for Claude, Anthropic (Anthropic Ireland, Limited in the EEA, the UK and Switzerland; Anthropic PBC elsewhere); for ChatGPT and Codex, OpenAI; for Perplexity, Perplexity AI, Inc. We have no control over what they do with it. When you connect ChatGPT or Codex, OpenAI receives your data from your assistant, at your request, under your own agreement with OpenAI; that is separate from Roxya Coach, for which Anthropic and OpenAI work for us.

We keep a record of what a connected assistant does on your account: which tool it used, when, whether it worked, and which workout, session or plan day it read or changed. We never see or keep your conversation with the assistant.

Remove a connection at any time in the app (Settings > Integrations), or from the assistant's own settings; it stops working at once. Legal basis: your explicit consent (GDPR Art. 6(1)(a) and, for heart rate, Art. 9(2)(a)); for the record of what it does, our legitimate interest in running and securing the connection (GDPR Art. 6(1)(f)).

When you write to us

We use your e-mail address and what you write to answer you. Legal basis: our legal duty to answer privacy requests (GDPR Art. 6(1)(c)) and our legitimate interest in answering other questions (GDPR Art. 6(1)(f)).

If you used the previous Roxya app

Roxya 2 replaces the previous Roxya app on the same servers, and your account continues with what you recorded in it. Roxya 2 has no nutrition features and does not use the nutrition data you may have logged in the previous app (meals, foods, calories and nutrients).

• On our servers: on 2 October 2026 we deleted the database that held your meal logs, and on 23 October 2026 the last nutrition data from the previous app still on our servers (the foods it remembered for you). Nothing nutrition-related is stored with your account any more.
• The copy we keep: before deleting that database we exported it, and we keep that copy ourselves, on our own computer rather than with a provider, in case the data is needed again. Where: on that computer and on a backup disk, both offline. How long: until we decide the old nutrition data will not come back; no end date is set yet. Deleting your account in the app does not reach this copy: write to us, and we delete your meal logs from it or send you a copy of them.
• You can ask us at any time for a copy of this data or for its deletion.

Who receives your data

Your profile (name, @tag, photo, bio) and the sessions you save or sync are visible to other Roxya members by default, as on Instagram or Strava, as our terms of use say (section 9); heart rate is hidden by default and your GPS route is never shown to others. You can make your profile private at any time in Settings › Privacy › Private profile, make one session private from its menu, and choose which details others see in Settings › Privacy › Shared sessions.

We do not sell personal data and we do not share it for advertising.

Transfers outside Switzerland and the EEA

For every athlete, in the EU, in Switzerland or elsewhere, our server, database and file storage are in the Netherlands; older copies of photos and videos remain in Switzerland until we close that storage, and our e-mail provider is there too. Switzerland and the EEA recognise each other's protection as adequate. Some providers process data in the United States: Anthropic for the coach, OpenAI for voice input and for the coach under the permission version 1.0 asked for or when Claude is unavailable, Railway and its storage provider Tigris for their own operations, Vercel for the web app's request logs, Stripe for web subscription payments, and Resend for account e-mails (from 2026-10-21) and Roxya news (from 2026-10-28). Each of these transfers needs a safeguard: either the provider's certification under the EU-U.S. and Swiss-U.S. Data Privacy Framework, which the European Union and Switzerland recognise as adequate, or the standard contractual clauses approved by the European Commission, with the adjustments Swiss law requires. For the coach, Anthropic Ireland, Limited and OpenAI Ireland Ltd. transfer requests to Anthropic and OpenAI in the United States under those standard contractual clauses, as their data processing addenda provide. You can ask us for a copy of the safeguards that apply. When you connect Claude, ChatGPT, Codex or Perplexity, what it reads goes to Anthropic, OpenAI or Perplexity AI because you asked for it: that is their transfer, under the safeguards their own privacy policies name, not ours.

How long we keep your data

• Your account and what you record: until you delete it, or delete your account. A suspended account is kept until it is reinstated or deleted at your request.
• An account nobody uses: when an account has shown no activity at all for 24 months — no sign-in or use from any app, the website, a watch or a connected assistant, no session recorded or synced, no workout, plan, coach message, social action or settings change — we e-mail it a warning. If nothing happens in the 30 days that follow (signing in, or the Keep my account button in the e-mail, is enough), we delete the account and everything in it as if you had deleted it yourself. An account with a subscription that is active or in its grace period is never deleted this way. If your e-mail address no longer works, the account is deleted 30 days after we tried to warn you. No account is warned before October 2028 (24 months after we started recording activity). We switch this on once we have checked a first run by hand.
• Visits to our web pages: daily totals without any identifier, kept as statistics; the value that counts a visitor once a day is deleted when the day is over.
• Photos and videos: removed from our file storage shortly after you remove them, replace your profile photo, delete the session they belong to or delete your account. The older copies Infomaniak holds are removed at the same time or, at the latest, when we close that storage by the end of October 2026.
• Apple Health figures: until you tap Delete Data, or delete your account.
• On your iPhone: when you sign out, the app erases your account's data from the phone — your sign-in, the cached profile, feed, messages, coach conversation, drafts and the widget. It keeps only your Apple Health choice and any finished workout still waiting to reach our server, used again only if you sign back in. Deleting your account erases those too.
• Coach conversations and their cards: until you delete them, your coach history or your account, and at most 365 days after a conversation's last message; a card you have not confirmed expires after 24 hours. Anthropic deletes its copies within 30 days, or keeps one its safety systems flag for up to 2 years; OpenAI keeps its copies for up to 30 days, for abuse monitoring only.
• Coach usage: your monthly and daily counts, 13 months; daily totals without your identity, 400 days; monthly totals of the coach's question topics, for all athletes, 400 days.
• Your country: until you turn off Keep my country or delete your account; until you choose it yourself, the app updates it when your phone's region changes.
• Your sex and level: until you change them or delete your account.
• Terms you accepted for the coach: until you delete your account.
• Your permission for the coach: the record of each permission and withdrawal, until you delete your account.
• Voice recordings, dictations and coach photos: not kept by us.
• Your subscription record: until you delete your account; deleting it first cancels a web (Stripe) or Google Play subscription, never an Apple one, which you cancel in your Apple ID settings. Apple keeps its own purchase records. For a web subscription, Stripe's customer record and its invoices and payments are our accounting records: we keep them 10 years from the end of the financial year (Swiss CO Art. 958f; GDPR Art. 6(1)(c)), without your saved cards or anything an invoice does not need once your account is deleted.
• Your watch's access: until 90 days after its last use, or until you remove it.
• Apps you connect: their access lasts an hour at a time and renews for up to 30 days of disuse, until you remove the connection; the record of your permission and its withdrawal, 12 months after you withdraw it; the record of what the assistant did, 90 days, after which only anonymous daily counts remain.
• Messages: your messages until you delete your account; those of the person you wrote to until they delete theirs.
• Blocks: until you lift them, or one of you deletes their account.
• Reports: until your account or the reported account is deleted.
• E-mail codes: a coded form, until the code is used, or a day after it expires; the details of a sign-up whose code was not entered, until the next sign-up after the code expired.
• E-mail confirmation links (from 2026-10-21): a coded form of each link, until it is used or 30 days after it was sent; the date by which a new account must confirm its address, until it does. Past that date the account stays, with everything in it, until the address is confirmed or changed, or the account deleted. Until the address is confirmed, other athletes see the account like any other, but it cannot write to them. Each e-mail carries a Not you? link that deletes an account its address never confirmed.
• Security records (IP addresses, e-mail addresses typed at login): currently without a fixed time limit; when you delete your account, your e-mail address is removed from them.
• Server logs and backups: kept by Railway for the periods its service applies.
• Nutrition data from the previous Roxya app: none on our servers since 23 October 2026; our copy of the deleted nutrition database, until you ask us to delete your part of it or we delete the copy (no end date is set yet).

Your rights

Under the GDPR and the Swiss FADP you can:

• see the data we hold about you and get a copy in a machine-readable format;
• correct it — most of it directly in the app;
• delete it, or your whole account;
• restrict how we use it, or object to uses based on our legitimate interests, including profiling;
• withdraw your consent at any time, without affecting what happened before;
• complain to a data protection authority.

How: write to contact@roxya.app from the e-mail address of your account. We answer within one month, and requests to see your data under Swiss law within 30 days; if a request is complex we tell you within that time how long it will take. In the app you can edit your profile, change your privacy settings, delete your Apple Health data, pause or remove your watch, delete sessions, block athletes, and, in Settings, Privacy, withdraw your permission for the coach, delete your coach history and delete your account. For a copy of your data, write to us; it does not tell you who blocked or reported you, to protect them. If your account is suspended, write to us for any of these. How to delete your account, also without the app, and what is deleted and kept: https://roxya.app/delete-account.

Checking it is you: we ask you to write from your account's e-mail address or to confirm the request in the app. We do not ask for identity documents unless there is no other way.

Complaints: in the EU, to the supervisory authority of the country where you live or work or where you think the problem occurred; in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch.

Automated decisions and profiling

The coach and the scores in the app evaluate your training and recovery to suggest what to do next. That is profiling. No decision with legal or similarly significant effects is made about you by automated means: the analysis changes your plan only when you ask it to, and the coach changes nothing until you confirm its card. You can ask us how a suggestion was made, and object to this processing. The filter that refuses slurs looks only at the text you are publishing and decides nothing about you; suspensions are decided by a person.

To keep other athletes' profiles and sessions from being copied in bulk, we count, per account and per hour, how many athletes you do not follow you open, how often you interact, how regular your requests are and how many hours of the day you are active (totals only, no list of what you opened; kept 30 days), and on the iPhone which installation of the app a session comes from. An account that behaves like an automated tool can lose access to other athletes' pages for 24 hours (7 days the second time); its own data stays available, and you can write to support@roxya.app to have it reviewed. Our legitimate interest is protecting our athletes and the service (GDPR Art. 6(1)(f)); you can object.

Children

Roxya is for people aged 13 and over, or older where the law of your country sets a higher age of digital consent (for example 15 in France, 16 in Germany), as set by your phone's region, which we also keep as your account's country (see Statistics). Sign-up asks for your date of birth; we keep it encrypted, and the coach only ever gets your age in years.

Security

Connections to our server are encrypted (HTTPS). Passwords are stored as one-way hashes and sign-in tokens as digests. Direct messages and the copies kept with reports are encrypted on the server, with the key kept apart from the database. Our security log keeps a coded reference instead of your e-mail address. Session photos and videos are re-encoded without their hidden metadata. If a breach is likely to put you at high risk, we will tell you without undue delay.

What we do not do

No advertising, no sale of data, no tracking or third-party analytics tools (our own statistics stay on our server), no advertising identifier, no use of Health data for marketing. We do not train AI models on your data; Anthropic may not train its models on what we send it, and OpenAI does not train its models on data sent through its API by default.

Changes to this notice

• Effective date: 28 October 2026
• Version: 28 October 2026: the coach counts the topics of the questions it answers as anonymous monthly totals (The AI coach, Statistics); Roxya Coach's tiers by name, each with a monthly coach budget instead of a number of messages, and what we record to keep within it (The AI coach); web subscriptions through Stripe with a 7-day free trial (card required), the launch offer, one-click cancellation and the billing e-mails (Your subscription, Who receives your data); Roxya news is sent through Resend from news@roxya.app instead of Infomaniak (E-mails, Who receives your data)
• Earlier version: 26 October 2026: we say plainly, as our terms of use now do, that your profile and sessions are visible to other members by default and how to hide them (Who receives your data)
• Earlier version: 22 October 2026: Perplexity can be connected as an AI assistant, like Claude, ChatGPT and Codex
• Earlier version: 21 October 2026: Roxya Coach in tiers (messages a month, monthly or yearly); we count the coach's messages and web searches for each month of your subscription
• Earlier version: 14 October 2026: Roxya Coach answers through Anthropic's Claude for athletes who accept the permission app 1.0.1 asks for, can search the web through Anthropic and shows charts; we keep your country and the coach's use per day for our statistics; under the permission build 75 asks for, OpenAI answers when Claude is unavailable
• Previous version: 8 October 2026, for Roxya 1.0 with the Roxya Coach subscription
• How we tell you about a material change: we publish the new version here, with its date, before it applies