Privacy Policy

1. Who we are

CoachDrop is operated by Moinak Mukherjee, an individual based in India. CoachDrop is a web application that reads training plans from Google Sheets and syncs structured workouts to Garmin Connect on behalf of users.

Contact: moinak@coachdrop.site

2. What data we collect

We collect only the data necessary to provide the service:

• Email address — collected when you sign in with Google. Used to identify your account.
• Google OAuth token — an access token issued by Google when you sign in. Used to read your Google Sheets training data on your behalf. We store the token to avoid requiring you to sign in on every visit.
• Garmin authentication token — a session token issued by Garmin Connect. Used to push workout data to your Garmin account. Stored encrypted in our database.
• Google Sheets data — training plan rows (dates, workout descriptions) read from sheets you explicitly connect. We cache this temporarily to reduce API calls.
• Sync history — a log of workouts successfully pushed to Garmin, including workout name, date, and Garmin workout ID. Used to display your sync history in the dashboard.

We do not collect payment information, location data, health metrics, or any data beyond what is listed above.

3. How we use your data

Your data is used exclusively to operate the CoachDrop service:

• To authenticate you and maintain your session
• To read your training plan from Google Sheets
• To create and schedule workouts in your Garmin Connect account
• To display your sync history in your dashboard

We do not sell, share, rent, or trade your personal data with any third parties for their own purposes. We do not use your data for advertising or marketing.

4. Third-party services

CoachDrop integrates with the following third-party services to function:

• Google (Google Sign-In, Google Sheets API) — we use Google OAuth 2.0 to authenticate users and access Google Sheets. Your use of Google services is governed by Google's Privacy Policy.
• Garmin Connect — we send workout data to Garmin Connect on your behalf. Your use of Garmin is governed by Garmin's Privacy Policy.
• Railway — our application and database are hosted on Railway's infrastructure in the United States. Data at rest is encrypted.

5. Data retention

We retain your data for as long as your account is active. You may delete your account and all associated data at any time by contacting moinak@coachdrop.site. Upon request, we will permanently delete all personal data within 30 days.

Disconnecting Garmin or Google from within the app immediately removes the respective stored tokens.

6. Data security

All data is transmitted over HTTPS. Authentication tokens are stored in an encrypted PostgreSQL database. We follow industry-standard practices to protect your data, but no system is completely immune to risk. We will notify affected users promptly in the event of a data breach.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time by disconnecting your accounts or contacting us

To exercise any of these rights, email moinak@coachdrop.site.

8. Cookies

CoachDrop uses a single session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

9. Children's privacy

CoachDrop is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of CoachDrop after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests: