Privacy Policy

Effective date: May 20, 2026

This Privacy Policy describes how FKT Labs ("we," "us") collects, uses, and shares information when you use the Fuel Lab race-fueling planner at fuel-lab.vercel.app and any related FKT Labs services (the "Service").

What we collect

Information you give us.

  • Account information when you sign up: your email address, and your name and Google profile picture if you sign in with Google.
  • Athlete profile information you choose to enter: body weight, date of birth, sex (if provided), unit preference, GI history, fueling experience, caffeine preference, sweat and sodium notes, goals, food restrictions, and risk tolerance.
  • Race and training information you enter: races you plan to run, fueling plans you create, post-race logs, and manual training entries.
  • Messages you send to our AI Coach during planning conversations.

Information from connected services (only if you connect them).

  • If you connect Strava, we receive activity summaries (date, type, duration) for activities matching the trigger rules you set up, plus the access and refresh tokens needed to fetch them. We do not store your Strava password.

Information collected automatically.

  • Basic technical information your browser sends with every web request (IP address, user agent, referring page). We use this for security and to keep the service running, not to build profiles.
  • A session cookie set by our auth provider so you stay signed in.
  • Local-storage data on your device if you use the Service as a guest (so your plans persist without an account). This stays on your device until you sign up, at which point we migrate it to your account, or until you clear browser storage.

We do not knowingly collect information from children under 13.

How we use what we collect

  • To create and personalize your fueling plans
  • To save your plans so you can come back to them
  • To run the AI Coach conversation that helps you commit to a plan
  • To send transactional email (account confirmation, magic links, optional training-log nudges if you connect Strava)
  • To keep the Service secure and debug problems

We do not sell your information. We do not use it for advertising.

Who we share it with (subprocessors)

We use the following services to run Fuel Lab. Your data flows through them as needed:

  • Supabase — database and authentication
  • Vercel — hosting
  • Anthropic — AI Coach + race lookup (we send the relevant parts of your profile and conversation to generate coaching; Anthropic does not train on this data per their API terms)
  • Google — if you sign in with Google
  • Strava — if you connect Strava
  • Resend — transactional email delivery

These providers process data on US infrastructure. If you are outside the US, your information may be transferred to and stored in the US.

We will also disclose information if required by law or to protect the rights, safety, or property of FKT Labs, our users, or others.

How long we keep it

We keep your information for as long as your account is active. If you delete your account, we delete the associated profile, plans, logs, and conversations within 30 days, except where we need to retain limited records to comply with law.

Your choices

  • Edit your profile at any time inside the Service.
  • Delete your account by emailing us at the address below; we will delete your data within 30 days.
  • Disconnect Strava from your training settings, which revokes our access and deletes the stored tokens.
  • Continue as a guest instead of creating an account — your data stays on your device only.

Depending on where you live, you may have additional rights (access, correction, deletion, portability, objection) under laws like GDPR or CCPA. Email us to exercise them.

Health information disclaimer

Fuel Lab is a planning tool for endurance athletes. It is not a medical device and does not provide medical advice. Information you enter (weight, GI history, etc.) is used only to generate fueling suggestions and is not treated as protected health information under HIPAA.

Security

We use industry-standard security practices, including encryption in transit and at rest where supported by our providers. No system is perfectly secure; we cannot guarantee that unauthorized access will never occur.

Changes

We may update this policy. When we do, we will change the effective date at the top and, for material changes, notify you in-app or by email.

Contact

FKT Labs jordan.king@fktlabs.com