Privacy & Legal Documents

The Service is operated by the STAS.run team, which determines the purposes and means of processing personal data for the Service. Privacy contact: hi@stas.run.

Telegram support: @stas_support_bot.

This document applies to users of STAS, visitors of stas.run, users connecting Intervals.icu, Telegram users interacting with the STAS bot, users who authorize STAS in ChatGPT or other AI assistants, and people who contact STAS support.

Third-party services such as Intervals.icu, Telegram, ChatGPT, Claude, Mistral AI, OpenRouter, Google, Yandex, Meta/Instagram, and wearable device platforms process data under their own terms and privacy policies.

Depending on how you use the Service, STAS may process:

• Account and identity data: name, display name, email address if you choose to add and confirm it, internal user ID, Intervals.icu athlete ID, Telegram ID, username, language, timezone, and connection status.
• Training and activity data: workouts, planned workouts, activity names, dates, duration, distance, pace, speed, power, cadence, heart rate, elevation, intervals, splits, training load, fitness, fatigue, form, zones, notes, reports, and related metrics.
• Route and location-related data: route geometry, map-derived information, city or country labels, and approximate training area when available through connected services.
• Wellness and physiological data: resting heart rate, HRV, sleep, sleep score, weight, body composition, SpO2, stress, fatigue, soreness, mood, motivation, readiness, and similar data when available.
• User-provided profile data: goals, race targets, training rules, constraints, injuries or limitations that you choose to provide, preferred schedule, free-text comments, and training reports.
• AI context and generated content: prompts, prepared training context, summaries, recommendations, plans, classifications, explanations, and messages generated or used by AI services.
• Technical and usage data: session cookies, product events, source of first visit, signup events, authentication events, error logs, device and browser information, IP-related technical data, timestamps, and security logs.
• Consent and legal records: document version, consent action, source, locale, timestamp, and related technical metadata.

Some training, wellness, physiological, route, and limitation data may be sensitive or health-related under applicable privacy laws. STAS processes such data only for operating the personalized training service and related user-requested features.

• Data you provide directly in the web application, Telegram, support messages, or AI assistant flows.
• Intervals.icu after you authorize STAS to access your Intervals.icu account.
• Telegram when you interact with the STAS bot or support.
• AI assistant authorization flows when you connect STAS to ChatGPT, Claude, or compatible tools.
• Website, browser, server, analytics, and security systems during normal use of the Service.

• Provide account access, authentication, authorization, and connected-service management.
• Import, store, update, and display training history, calendar data, wellness data, and related metrics.
• Generate personalized training summaries, classifications, plans, suggestions, reports, and notifications.
• Prepare structured context for AI assistants when required to answer user requests or generate analysis.
• Operate Telegram bot messages, reminders, training reports, support communication, and quick access links.
• Maintain service security, prevent abuse, diagnose errors, monitor reliability, and protect accounts.
• Measure website and product usage, conversion, onboarding, feature adoption, and service performance where analytics consent has been provided where required.
• Keep consent, withdrawal, deletion, and account operation records.
• Comply with applicable legal, regulatory, security, and dispute-resolution obligations.

Depending on the jurisdiction and processing activity, STAS relies on one or more of the following legal bases:

• Your consent, including consent to process training, wellness, profile, AI context, and technical data for the Service.
• Explicit consent where sensitive, health-related, or special-category data requires a higher standard of consent.
• Performance of a user-requested service, including account access, Intervals.icu connection, AI assistant connection, and delivery of training features.
• Legitimate interests in operating, securing, debugging, and improving the Service, where those interests are not overridden by user rights.
• Compliance with applicable legal obligations.

STAS may disclose or make personal data available to the following recipients or categories of recipients where necessary for the purposes described in this page:

• Intervals.icu - source of training, calendar, and athlete data, and recipient of user-requested workout or calendar updates where applicable.
• Telegram - bot messages, notifications, account linking, and support communication.
• Mistral AI - primary AI provider for analysis and recommendations.
• OpenRouter - fallback AI provider if the primary AI provider is unavailable.
• OpenAI - when you use STAS GPT or authorize STAS through ChatGPT.
• Resend - the email delivery processor for service messages such as confirmation links and, only after a separate voluntary opt-in, STAS news and product updates. STAS sends the recipient address and the minimum message or subscription data needed for delivery; email addresses, confirmation tokens, and full links are not included in product analytics.
• GlitchTip / Sentry-compatible error reporting - technical error reporting, diagnostics, and reliability monitoring.
• Yandex Metrika and Google Analytics - website and conversion analytics. Webvisor is disabled.
• Meta / Instagram - only where a training card is published through STAS Instagram features.
• Server infrastructure and database hosting provider - server infrastructure, application hosting, and database hosting.
• Professional advisers, authorities, or other parties - only where required by law, necessary to protect rights, or necessary to respond to lawful requests.

STAS does not sell personal data.

Email is optional for connecting Intervals.icu and viewing training data. If you explicitly request confirmation, STAS uses your address to send a one-time confirmation link so that permanent profile changes can be protected. The link expires and is single-use. Confirming an address does not subscribe it to marketing.

STAS news and product updates are off by default and separate from account messages and Telegram. You can opt in with the separate checkbox next to email confirmation or later change the setting in your profile. Every marketing email includes a way to unsubscribe. Unsubscribing from news does not stop necessary account and security messages.

Without this opt-in, STAS sends email only when you explicitly request an account action, when a specific security notice is necessary, or when the law requires a notice about your account or data. These service messages do not include product news, training summaries, tips, surveys, donation requests, re-engagement prompts, or promotional content. A message that mixes a service notice with marketing is treated as marketing and is not sent without the separate opt-in.

STAS keeps the minimum delivery status and suppression record needed to avoid repeated unwanted messages. Deleting an account removes the address, pending confirmation, preferences, and unsent email tasks as part of account deletion, subject to records that must be retained by law.

STAS may process, store, or transfer personal data outside your country of residence. Transfers may involve the European Economic Area, the United States, and other countries where hosting, AI, analytics, messaging, support, Intervals.icu, Telegram, Meta/Instagram, or other service providers operate.

Where required by applicable law, STAS relies on your consent, appropriate contractual or technical safeguards, provider terms, or other lawful mechanisms for international transfers.

STAS may send prepared training context, profile data, user rules, workout data, wellness data, and user messages to AI providers when this is necessary to generate analysis, recommendations, summaries, plans, or replies requested through the Service.

STAS aims to send only the context reasonably necessary for the relevant AI task. AI outputs are probabilistic and may be wrong. STAS does not use AI outputs as legally binding decisions about you.

STAS may publish anonymous or pseudonymous training cards through Instagram features. These cards may include route visualization, approximate location such as city or country, distance, duration, workout type, and selected activity metrics. Name, username, and direct user profile links are not intended to be displayed on such cards.

Even without a name, route or location information may reveal sensitive details such as a training area or routine. You may request removal through the Telegram notification controls where available or by contacting hi@stas.run.

STAS retains personal data for as long as reasonably necessary to provide the Service, maintain account history, operate connected features, comply with legal or security obligations, resolve disputes, and keep records of consent or account actions.

• Account, training, wellness, profile, rules, and AI working history are generally retained while your STAS account remains active.
• When you delete your STAS account, STAS deletes your profile, workouts, wellness data, connections, and working history from the active STAS system, subject to technical backup retention and lawful retention needs.
• Data held by Intervals.icu, Telegram, ChatGPT, Claude, wearable platforms, or other third-party services must be managed through those services.
• Backups and technical logs may retain data for a limited technical period until overwritten, rotated, or deleted according to operational schedules.
• Consent, withdrawal, deletion, security, and audit records may be retained where necessary to demonstrate compliance or protect rights.

STAS uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encrypted Intervals.icu access tokens, secure session cookie settings in production, restricted production access, server-side access controls, error monitoring, and operational security procedures.

No internet service can guarantee absolute security. You should keep your connected accounts, Telegram account, email account, and AI assistant accounts protected.

Depending on applicable law, you may have the right to request:

• access to personal data processed by STAS;
• correction of inaccurate or incomplete data;
• deletion of your STAS account and data;
• withdrawal of consent;
• restriction of processing;
• objection to certain processing activities;
• data portability where applicable;
• information about recipients, categories of recipients, and international transfers;
• submission of a complaint to a competent data protection authority where applicable.

To exercise rights, contact hi@stas.run. STAS may need to verify your identity before fulfilling a request.

STAS is not intended for children below the age at which they can lawfully consent to personal data processing in their jurisdiction. If you believe that a child has provided personal data to STAS without appropriate consent, contact hi@stas.run.

STAS uses cookies and similar technologies to operate the website, keep users signed in, understand product usage, measure conversion, and improve reliability.

• stas_session - account login, session security, and authenticated access.
• stas_cookie_consent - stores your analytics cookie choice.
• stas_first_touch - first visit source for product analytics and attribution, used only where analytics consent has been provided where required.
• stas_signup_goal - short-lived technical cookie used to record successful signup events in analytics, used only where analytics consent has been provided where required.
• Yandex Metrika and Google Analytics - website and conversion analytics. Webvisor is disabled.

You can accept or decline analytics cookies through the cookie banner. You can also control cookies through browser settings. Blocking essential cookies may prevent login or account features from working.