Privacy Policy

1. Who we are

MORPHY is an autonomous training decision platform for endurance athletes, developed and operated by Luis Andres Cabezas Velez ("we", "us", "our"). You can contact us at luis.cabezas@morphytraining.com.

2. What data we collect

We collect only the data necessary to provide the MORPHY service:

• Activity data — duration, distance, heart rate, elevation, pace, and activity type for each training session, retrieved from connected platforms (Strava, Garmin Connect).
• Athlete profile data — name, maximum heart rate (FCmax), resting heart rate (FCrep), and sport preferences, provided by you during onboarding.
• Authentication tokens — OAuth tokens from Strava and/or Garmin, stored securely and used solely to retrieve your activity data.
• Usage data — basic server logs (IP address, request timestamps) retained for up to 30 days for security and debugging purposes.

We do not collect location data beyond what is embedded in activity files you have already recorded on third-party platforms. We do not access your contacts, calendar, or any data unrelated to athletic training.

3. How we use your data

Your data is used exclusively to:

• Calculate your daily training state (ATL, CTL, TSB, ACWR) using the Banister TRIMP model.
• Generate personalized training decisions and session guidance.
• Power the MORPHY PACE real-time race director during race events.
• Provide conversational explanations of your physiological state via the MORPHY assistant.

We do not use your data to train machine learning models, build advertising profiles, or for any purpose other than providing the MORPHY service to you directly.

4. Garmin Connect integration

MORPHY integrates with the Garmin Connect Developer API to retrieve athletic activity data. This integration is subject to Garmin's Developer Program terms. MORPHY only requests the following Garmin data scopes:

• Activity summaries (type, duration, distance, heart rate, elevation)
• Daily health snapshots (where available)

MORPHY does not request access to Garmin health data beyond what is necessary for training load calculation. You may revoke MORPHY's access to your Garmin account at any time via your Garmin Connect account settings.

5. Strava integration

MORPHY integrates with the Strava API to retrieve activity data. This integration is subject to Strava's API Agreement. You may revoke access at any time via your Strava account settings under "My Apps".

6. Data storage and security

Your data is stored in a PostgreSQL database hosted on secure infrastructure. We apply standard security practices including encrypted connections (TLS), hashed credentials, and access controls. Authentication tokens are stored encrypted at rest.

We retain your activity data for as long as your account is active. You may request deletion of your data at any time by contacting us at luis@morphytraining.com.

7. Data sharing

We do not sell, rent, or trade your personal data. We do not share your data with third parties except:

• Service providers — infrastructure providers necessary to operate the platform (hosting, database). These providers are contractually bound to protect your data.
• Legal requirements — if required by law or to protect the rights and safety of users.

8. Your rights

You have the right to:

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Revoke access to your Strava or Garmin account at any time.
• Withdraw consent at any time by deleting your account.

To exercise any of these rights, contact us at luis.cabezas@morphytraining.com.

9. Cookies

MORPHY uses a single session cookie (morphy_user_id) to authenticate your session. This cookie is strictly necessary for the service to function. We do not use tracking cookies, advertising cookies, or third-party analytics.

10. Changes to this policy

We may update this Privacy Policy as the service evolves. We will notify users of material changes via email. The date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests:
Luis Andres Cabezas Velez
luis.cabezas@morphytraining.com
morphytraining.com