CoachGoat - Privacy Policy

Policy version: 26 October 2026

Who we are

CoachGoat is provided by MoonGoat Studios Ltd ("we", "us"), a limited company registered in England and Wales, company number 17359130. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

CoachGoat calculates your running baseline and training information on your device. The app does not automatically upload your Apple Health workouts, heart-rate samples or routes to us. If you choose to contact support or submit feedback, we and the relevant service providers receive the information you submit. Apple services and external websites have their own data handling, described below.

MoonGoat Studios Ltd is responsible for the personal information we receive through support, feedback and our website. For privacy questions or requests, contact feedback@coachgoat.app.

Apple Health data we access

With your permission, CoachGoat reads running workouts and running legs within multisport workouts, including distance, duration and dates; recorded workout routes; heart-rate samples; resting heart rate; and workout effort scores.

The routine workout fetch covers the past 60 days so that runs in your recent history can be compared with each run's preceding 30 days. Your active baseline remains the longest run in the past 30 days.

If that fetch returns no workouts, CoachGoat can check for the most recent readable running or multisport workout without a date limit. This check can read a workout older than 60 days. The app uses its presence to recognise earlier running history and decide how to handle a cached baseline; it does not load that workout's route or heart-rate samples as part of the check.

Heart-rate zone setup can read the latest available resting heart-rate sample. This check is not limited to the 60-day workout window.

CoachGoat only requests read access to Apple Health. It does not write to or modify your Apple Health records.

How the app uses your information

CoachGoat uses these readings and the profile/settings you enter to calculate running baselines and distance comparisons, show history and route maps, suggest training plans, calculate heart-rate zones, and provide post-run summaries. Training calculations happen on your device. The app does not send Apple Health readings to advertising, analytics or data-broker services.

Local storage and retention

CoachGoat stores preferences and app state in iOS app settings storage. This includes onboarding and walkthrough status, distance units, notification settings, whether Apple Health has been connected, running experience, race goals, planned-run preferences, and when you last dismissed a post-run summary or a spike notification.

The app also stores a local yes/no record of whether you confirmed that you are 18 or over. This does not record your date of birth or exact age, and CoachGoat does not transmit this confirmation.

The app uses the iOS Keychain for your previous-injury choices, heart-rate zone settings (including any saved maximum or resting heart rate), whether heart-rate data has been found in Apple Health, baseline values and overrides, cached training values, your training plan, the information used to tailor training recommendations, records of which workouts the app has already seen and when it first found them, the date of your most recent run, and premium purchase/promotion state. Keychain items are configured to be accessible while your device is unlocked. Device backup and restore settings can affect locally stored information; CoachGoat does not operate a cloud-sync service for your training data.

CoachGoat loads workout routes and detailed workout samples into memory when needed and does not itself save route-coordinate files. Apple Health retains the source records separately.

The 60-day workout fetch is not a deletion schedule for all app data. Preferences, plans and cached state can remain until changed, replaced or removed. Cache-validity periods control when values are reused; they do not guarantee deletion at expiry. Records of observed workouts are pruned when replaced by a nonempty fetch, but can remain after an empty fetch.

Support email and feature requests

Sending feedback is optional. The app prepares an editable email to feedback@coachgoat.app, including its version and build number, your device model and iOS version. You can review or remove those details before sending. The app does not automatically attach workouts, routes, heart-rate data or diagnostic log files. Opening the feedback composer does not send the message.

If you send it, we receive your email address, any sender name supplied by your mail service, your message, and any diagnostics or attachments you choose to include. Your mail service and our email providers also handle the message. Our support mailbox uses Microsoft 365 Email Essentials supplied through GoDaddy. The feedback address is an alias delivered to our business mailbox. At present, Mark Garvey is the only person within MoonGoat Studios Ltd with mailbox access; the providers also process information to supply and maintain the email service. Please do not include health records, route screenshots, passwords or other sensitive information in a routine support request. Describe the problem without private health details where possible.

Feature requests open the CoachGoat board on Featurebase in your browser. CoachGoat does not add your health data or app diagnostics to that link. Featurebase (CORDNET OÜ, Estonia) hosts the board and handles submissions for us. It also processes service information for its own purposes under its privacy policy. Featurebase can send board information, including your submissions, to third-party AI providers for search, for spam and abuse protection, and for any Featurebase AI features we use. Its subprocessor list shows these providers processing data in the United States. Featurebase states that this information is not used to train AI models, although its AI providers may retain it for abuse monitoring, safety or legal requirements. A visit can disclose browser, device and connection information to the provider; posting can disclose your name, email/account identifier, text, comments, votes and attachments, including images and videos you choose to upload. Posting and commenting require sign-in; the portal also permits guest voting. The board is publicly accessible and new posts default to public. Public posts, comments and display names may be seen and copied by other visitors. Do not post private health information or information about children.

Support and feedback submissions leave your device and can be retained by us and service providers. Deleting CoachGoat or revoking Apple Health access does not remove those submissions. Contact us about information we control in support correspondence, our feedback board or website. We will work with our providers where needed. Provider account controls are also available for information they control independently.

We use support messages and feedback to answer your requests, investigate problems and improve CoachGoat. We do not use your submissions for marketing or add you to a marketing list because you contact support or submit feedback.

We delete routine support correspondence from our active mailbox 12 months after your request is resolved. We keep feature requests while they remain useful for planning or explaining product decisions and review them at least annually, removing information we no longer need. Specific legal obligations or claims may require us to keep some records longer. Removing an email from the inbox alone does not remove it from Deleted Items or provider recovery storage. We include sent replies, attachments and working copies in our deletion process. Provider recovery, backups and specific legal holds can outlast active deletion. Featurebase's published DPA allows rolling backups to persist for up to 365 days after source deletion and operational logs for up to 12 months. Contact feedback@coachgoat.app about deletion or other privacy requests.

Apple services and external websites

The native app contains no non-Apple analytics, crash-reporting, advertising or tracking SDKs and does not require a CoachGoat online account. The profile you enter for training calculations is stored locally. CoachGoat does not track your location in real time; route maps use previously recorded Apple Health workouts.

Apple provides HealthKit, MapKit, StoreKit, WorkoutKit and notification services. Apple may process information needed to provide those features under its own terms and privacy policy. Purchases are handled by Apple; CoachGoat receives purchase-entitlement information to unlock features and retains a local premium-status cache. We do not receive your payment-card details through the app. If you choose to share analytics with app developers in your iOS settings, Apple gives us crash reports, app performance information such as hangs and energy use, and combined usage figures such as sessions, active devices and retention. Apple provides this without your name or contact details. We use it to find and fix problems in the app and to understand how the app is used overall.

Links to research, setup guidance, other apps, the feedback board and other websites open in your browser or the relevant app. Those destinations may process visit or submission information. Our product website has separate contact, mailing-list and cookie handling, described below. Other destinations have their own notices.

Notifications and Apple Watch

If you allow notifications, CoachGoat schedules local training reminders on your device. It does not operate a push-notification server. If you use Send to Apple Watch, the app shares your planned workout information with your watch through Apple's WorkoutKit service.

Your choices and deletion

You can change CoachGoat's Apple Health access in the Health app or iOS privacy settings. Revoking access stops future reads of the affected data; it does not erase data previously stored by CoachGoat or delete records from Apple Health.

You can edit your profile/settings and clear your training plan within the app. Deleting the app removes its app-container data, but Keychain items may remain and may be available after reinstalling. CoachGoat currently has no single control that clears all its stored data. Manage Apple Health records and device backups separately using Apple's controls.

Support correspondence and Featurebase submissions are separate from the app's local storage. Contact feedback@coachgoat.app about your support data and privacy requests.

Website contact, mailing list and cookies

Our company website at moongoatstudios.co.uk, including the CoachGoat information pages, uses GitHub Pages. These pages do not contain our own analytics scripts, contact forms or advertising. GitHub logs visitors' IP addresses for security even when they are not signed in to GitHub. Its processing and retention are described in the GitHub privacy statement. Opening an email link uses your chosen email service; it does not send a message automatically.

The separate CoachGoat product website at coachgoat.app is hosted using GoDaddy Websites + Marketing. When you use its contact form, we and GoDaddy receive the contact details and message you enter. GoDaddy can store a conversation and contact record as well as deliver an email copy. We use enquiries to respond and manage the request, with the same purposes and retention criteria as support correspondence.

A separate mailing-list opt-in is optional. Contacting us or submitting feedback does not by itself give permission for marketing. If you opt in, we use your email address to send the CoachGoat updates described when you subscribe. You can withdraw by contacting feedback@coachgoat.app or using an unsubscribe link in a marketing email. Withdrawal does not affect the lawfulness of earlier processing. We keep mailing details while you remain subscribed and the list serves its stated purpose, reviewing necessity at least annually. We may retain a minimal suppression record to honour an unsubscribe and prevent accidental re-enrolment.

GoDaddy processes connection and technical information to host, secure and operate the site. The website presents a cookie choice for analytics. Its contact form uses Google's reCAPTCHA service for abuse prevention, which can process browser, device, connection and interaction information. Consult the cookie controls shown on the site and the GoDaddy privacy notice, GoDaddy cookie policy and Google privacy policy. The native app's lack of tracking SDKs is not a statement that the website or Featurebase uses no cookies.

Why we use personal information

We use ordinary contact details and correspondence to provide requested support and investigate faults, relying on our legitimate interests in operating a reliable app and answering enquiries (UK GDPR Article 6(1)(f)). The same basis covers reviewing ordinary feature requests to understand problems and plan improvements. We limit access, avoid unnecessary identifying information and apply the retention rules above. Where processing is necessary to fulfil a purchase or other contract with you, we rely on Article 6(1)(b); where a specific law requires a record, we rely on Article 6(1)(c).

Optional marketing relies on your consent (Article 6(1)(a)). Non-essential website cookies requiring consent rely on your cookie choice. Necessary website security processing supports our legitimate interests in preventing abuse. Providing support or feedback is voluntary; without enough contact or issue details we may be unable to reply or investigate. You do not need to contact us, join the board or subscribe to use the app.

Apple Health permissions control which readings the app can access for local training calculations. Your locally entered profile can include previous-injury choices. We do not automatically receive those readings or choices. If a support issue requires us to use identifiable health information, we will first explain the specific information and purpose and ask for your explicit consent (Articles 6(1)(a) and 9(2)(a)). Sending an unsolicited health attachment is not treated as consent for unrestricted use. You may withdraw such consent through our privacy contact. We do not use support health information for marketing or public feature requests.

Providers and international processing

Microsoft and GoDaddy process support email; GoDaddy also hosts the product website and its forms. GitHub hosts the company website and processes visit information. Featurebase processes our board records. These providers can use subprocessors for hosting, delivery and security, and Featurebase also uses AI providers as described above. They can process information outside the UK, including in the EEA and United States. We do not promise UK-only storage.

The providers' published data-processing terms provide for international-transfer protections, including adequacy arrangements where applicable and contractual safeguards such as standard contractual clauses and the UK Addendum. Details are available in the GoDaddy DPA, Microsoft DPA library and Featurebase DPA. Contact us for information about the safeguards applicable to our processing. Apple's platform services, Google reCAPTCHA and providers' independently controlled service data are also subject to their own privacy notices.

Your information rights

You can ask us to access, correct or erase personal information we hold, restrict its use, or provide a portable copy where that right applies. Rights depend on the processing and relevant law; we will explain any applicable exception. We may need proportionate information to verify a request. We cannot remotely read or erase app data held only on your device.

Your right to object: You can object to our use of your information based on legitimate interests, including support-related product improvement. You can always object to direct marketing. Contact feedback@coachgoat.app. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.

You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. You may also contact the data-protection authority where you live where applicable. You do not have to contact us first.

CoachGoat's local calculations provide training information; we do not use support, board or website information to make solely automated decisions with legal or similarly significant effects on you.

Age and policy updates

CoachGoat is intended for people aged 18 and over. If you believe someone under 18 has supplied personal information through support or feedback, contact feedback@coachgoat.app.

We may update this policy when our practices change. The policy version date above identifies this wording.