Privacy Policy

Account and identity data

Email address

First and last name

Gender (optional)

Date of birth

Profile photo (optional, if you upload one)

Authentication identifiers from Apple or Google if you sign in with those providers

Fitness and training data you provide

Critical Power (CP)/FTP, training status, maximum carbohydrate intake, feed interval, power-mode and fuelling preferences

Planned and completed sessions, workout structure, and the fuelling plans we generate for you

Menstrual cycle data (optional)

If your biological sex is set to female, the App asks whether you feel more fatigued during part of your menstrual cycle. If you choose to use this feature, you enter how strong that fatigue is, when it happens around your period, your usual cycle and period length, and the dates your periods start. This data stays on your device. The App uses it to work out which days your fuelling plans should carry more carbohydrate.

If you have connected TrainingPeaks, or paired our Karoo app from your phone, the App sends our servers one thing derived from this data: a list of the next 21 days on which your fuelling plans are raised, and by how much (for example, “8 October: one step”). We use it only so our Karoo app can show you the same fuelling plans as your phone. We never receive your period dates, your cycle or period length, or your answers. Because the list can indicate when your period is expected, we treat it as health data.

Apple Health (Apple Watch app)

If you turn on Record as workout in our Apple Watch app, the watch uses Apple HealthKit to record your ride as a cycling workout. It reads your heart rate and active energy during the ride and saves the finished workout to Apple Health. This data stays on your devices and in Apple Health: we never receive your heart rate or your workouts, and we don’t use HealthKit data for advertising or share it with anyone. You can turn recording off at any time in the watch app, or remove StemNotes’ access in the Health app.

Data from services you connect

If you connect TrainingPeaks or intervals.icu, we access your planned and completed workouts, workout structure, power/intensity data and related metrics via those services’ authorised APIs, solely to generate your fuelling recommendations.

If you turn on calendar notes, the App also adds a “StemNotes Fuel Plan” note to your TrainingPeaks or intervals.icu calendar for each planned session, and updates it with what you ate after the ride. It never changes your own workouts. Turn the notes off in Settings and the App removes the notes it added.

Garmin Connect

If you connect Garmin Connect, Garmin sends our servers each activity you record from then on. For cycling activities we keep the ride’s name, type, start time and duration, the device you recorded it on, its average power and the power recorded during the ride. We discard everything else Garmin sends, and we don’t keep non-cycling activities. We use these rides only to match each one to your planned session and work out the carbohydrate you should have eaten for the ride you actually did. We don’t receive rides recorded before you connected. We never sell Garmin data or share it with anyone else, no AI system processes it, and we don’t use it to train or improve AI models.

Workout descriptions

On a paid plan, when you describe a workout in Add Workout, we send the text you typed and your Critical Power to Anthropic, whose AI model turns it into a structured workout. We send nothing else with it: no name, email or other training data. Anthropic doesn’t use this data to train its models. We keep a count of the workout credits you have used this month and any you have bought.

Fuelling plans on your watch or Garmin Edge

If you link our Apple Watch app or Garmin Edge field, the App sends our servers your upcoming fuelling plans (session names, timings and carbohydrate amounts) so the device can download them, including when your phone isn’t nearby.

Subscription and purchase data

Records of your subscription status and entitlements, and of any workout-credit packs you buy (the App Store transaction ID and the number of credits added). Payments are processed by Apple through the App Store, or by Google through Google Play on Android. We never receive or store your payment card details.

Access codes

If you enter an access code, we check your account email against the list of riders that code covers, and record that you redeemed it, when your free access started and when it ends.

Device and technical data

Basic technical information necessary to operate the App and deliver notifications (e.g. device/OS type, app version, and a push notification identifier where applicable). If you use our Karoo app, Garmin Edge field or Apple Watch app, we also record against your account which of them you have paired and when each last downloaded a plan, so we can support them.

Fuel cards you share

When you share a fuel card from the App (to an Instagram or Facebook Story, by saving or copying it, or to another app), we record your name and account email, the ride’s title, date, duration and intensity, the planned and eaten carbohydrate shown on the card, which card you shared and where you sent it. We do not receive the image, and we never include menstrual cycle data in these records.

Trial emails

If your account is new, the App reports your plan to our servers for about your first five weeks, or until any offer we email you ends: whether you are on a free plan, a trial or a paid plan, when it ends, which subscription it is, its price, and whether you use iOS or Android. We store this with your name, account email and the date you joined, so that we only send emails that fit your plan and can apply any offer we email you. Accounts more than six days old when the App first reports aren’t included, and we store nothing for them.

If Marketing emails is on, the App also sends a summary of your recent rides. For each ride it sends the date, the planned and eaten carbohydrate, the duration and whether you completed it, covering the last 21 days and up to 40 rides. We never receive ride titles or menstrual cycle data in these summaries. We use them to show you your own numbers in emails during your first weeks. If Marketing emails is off, the App sends no rides and we don’t send you these emails.

Website visits

When you visit stemnotes.io we ask whether we can count your visit. If you say yes, we count which pages you view, where you came from (such as a search engine, social app or campaign link), your country, your type of device and which links and buttons you use. We don’t use cookies for this. To tell visits apart, we combine your IP address and browser details with a random value we replace each day and turn them into a one-way code. We delete the code and the random value within 25 hours, we never store your IP address, and what we keep is daily totals that don’t identify you. We do this to see which pages and campaigns work, based on your consent. If you say no, we count nothing.

Turn off this counting on this device. We remember your answer with one setting in your browser. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as no. Framer, which hosts our website, records its own page statistics for us, and this choice doesn’t affect those.

We do not use third-party advertising or third-party usage-analytics SDKs in the App.