Orvik privacy policy
Last updated: 2026-10-31
Orvik is a training app. It reads the plan your coach has written in TrainingPeaks and gives you a daily call on today's session. This policy says what the app does with your data. Short version: your data stays on your phone, and I never receive it.
What Orvik does with your data
TrainingPeaks. When you connect, you log in on TrainingPeaks' own login page, shown inside the app. Orvik never sees or stores your password. TrainingPeaks gives the app a short-lived access token, and the app uses it to read your data straight from TrainingPeaks to your phone. The calls are read-only: Orvik does not change anything in your TrainingPeaks account.
What is read. Your workouts and their comments, and daily metrics such as resting pulse, sleep, weight and training thresholds. If you sync your Garmin watch to TrainingPeaks, the health data Garmin sends there (for example resting pulse and sleep) arrives in Orvik through TrainingPeaks.
Garmin (optional). If you connect Garmin, you create a personal API token in your own Garmin Connect account and paste it into Orvik. The token is kept in your phone's keychain. Orvik uses it to read your daily summaries, HRV and sleep straight from Garmin to your phone, read-only. You can delete the token in Garmin Connect at any time, or tap Disconnect Garmin in the app, which deletes the token and Garmin's days from your phone.
intervals.icu (instead of TrainingPeaks). If you connect intervals.icu, you paste your athlete id and API key from your intervals.icu settings. They are kept in your phone's keychain, and Orvik uses them to read your planned workouts, activities, wellness (HRV, resting pulse, sleep, weight) and thresholds straight from intervals.icu to your phone, read-only.
Where it is stored. A cached copy of that data is kept in a file on your phone, so the app does not have to fetch everything again each time you open it. Your daily check-ins (sleep, soreness, stress, mood) and your illness and pain flags are also stored on your phone only.
The login. The short-lived access token is kept in the app's memory only. Your TrainingPeaks login session is kept by the app's built-in browser, the same way a web browser remembers that you are logged in, so you do not have to log in every day.
Your own numbers. If you correct a threshold or your weight in the app, that value is stored on your phone only.
Backups. The copy of your TrainingPeaks data is kept as a cache and is not part of phone backups. On Android, Orvik is left out of Google backups altogether. On iPhone, if you use iCloud Backup, Apple's backup of your phone includes your check-ins and settings, as it does for any app; that backup is yours and is not sent to me.
Disconnect. "Disconnect" in the app deletes the cached copy of your TrainingPeaks data and the numbers you corrected, and logs the built-in browser out of TrainingPeaks. Your check-ins stay on the phone until you delete the app. Deleting the app removes everything Orvik has stored on your phone.
Read my comments with Jev (optional, off by default). If you turn this on in Me, the app sends your completed sessions to Orvik's server so that TypeSafe's Jev model can read them and notice illness, injury and tests run below your best. What is sent: session titles, your coach's plan, your comments and your coach's comments, and the duration, distance, pace and power of the session and of the other sessions that day, for the last four months. Never RPE, feel, TSS, date of birth or your name. Orvik's server passes the texts to TypeSafe and stores nothing; it keeps only a random install id for a moment, to limit how often one phone can ask. The answers (Jev's judgments) are kept on your phone only. Turn it off in Me and the judgments on your phone are deleted and nothing more is sent; Disconnect deletes them too. Nothing is sent unless you turn this on.
Demo data. The app includes a built-in demo data set, so you can try it without a TrainingPeaks account. Nothing is fetched for that.
What Orvik does not do
- Unless you turn on "Read my comments with Jev", there is no Orvik server in play and nothing is sent to me or to any server I run. With it on, the texts listed above go through Orvik's server to TypeSafe and are not stored.
- There are no accounts, no analytics, no advertising and no tracking.
- I do not sell, share or give your data to anyone.
- Apart from the optional Jev feature, the only network traffic that carries your data is between your phone and TrainingPeaks (or Garmin, or intervals.icu), at your request. TrainingPeaks handles that data under its own privacy policy.
Health information
Orvik shows information about your training and recovery. It is not a medical device and does not give medical advice. If you feel unwell or in pain, talk to a doctor or physiotherapist.
Children
Orvik is not aimed at children.
Changes
If the app changes in a way that affects this policy, for example by adding a server, I will update this page and the date above before that version is released.
Contact
Questions about this policy: ulrikgpt@outlook.com