Sanne privacy policy

Who we are

Sanne is made by FierceSpeed in New Zealand. The Privacy Act 2020 applies to it.

For anything in this policy, including a request about your information, use the contact form.

The short version

• Your training, meals, photographs and measurements are kept in a database on your phone.
• There is no Sanne server. FierceSpeed receives nothing: no statistics, no diagnostics, no crash reports.
• There are no advertisements and no tracking.
• Android's own cloud backup is turned off for this app.
• Nothing reaches an outside service unless you turn that service on and give it your own credentials.
• API keys and Garmin sign-in tokens are held in the Android Keystore, apart from the database, and are never written into a backup file.
• Removing the app removes everything it kept.

What Sanne keeps on your phone

• Training sessions, sets, repetitions, loads and timings.
• Meals, any photographs you attach to them, and your nutrition targets.
• Weight, body-fat readings and daily check-ins.
• Heart rate, sleep, stress and activity brought in from your own Garmin account.
• Your profile: date of birth, sex, equipment, constraints, goals and schedule.
• Your conversations with the coach.

What leaves your phone, and when

Sanne reaches a short, fixed list of services. Each one is off until you turn it on, each is reached with credentials you supply yourself, and Android blocks every other address. Unencrypted connections are refused everywhere.

• Claude, at Anthropic. Your message, the recent conversation and any photograph you attached. Sent when you send a message, with your own API key.
• OpenAI. The same, if you choose OpenAI instead.
• Garmin Connect. Your sign-in, and any session you choose to send to your watch.
• USDA FoodData Central and Open Food Facts. A food name or a barcode, if you turn food lookups on.

What you send to Claude or OpenAI is handled under your own agreement with that company, and their retention applies. Sanne asks OpenAI not to keep conversation state. FierceSpeed cannot see any of it and cannot control what a provider does with something sent under your key. If you never enter a key, Sanne never contacts them.

Garmin

Sanne signs in to your own Garmin account on Garmin's own page, shown inside the app. Your Garmin password is typed into Garmin's page, not into a Sanne form, and Sanne does not keep it. Only the tokens that sign-in produces are kept, in the Android Keystore.

Sanne reads Garmin through an interface Garmin does not publish or support. Garmin may change or block it at any time, and this is explained on a screen you must accept before the first connection. Nothing is ever written to your Garmin account without you tapping to send it.

Disconnecting Garmin in settings discards the stored tokens. To withdraw Sanne's access at Garmin's end, use your Garmin account settings.

Photographs

You choose each photograph, and Sanne resizes it on your phone and keeps it there. A photograph goes to the coaching provider you chose only as part of a message you send. Sanne uploads photographs nowhere else, and sees nothing in your photo library beyond the images you pick.

Backups

Sanne can write a nightly backup into a folder you pick yourself, through Android's own folder picker. If the folder you pick happens to belong to a storage service, it is Android that talks to that service: Sanne holds no account with one and has no access to it. It writes a file into the folder you granted, and nothing more. A backup never contains your API keys or Garmin tokens.

What Sanne does not do

• No advertisements.
• No analytics, and no crash or diagnostic reporting.
• No account, no sign-up and no identifier that follows you.
• No location permission, and no reading of your location.
• No sale or sharing of anything, to anyone, for any purpose.

Removing your information

Everything is on your device, so you control it directly.

• Delete single records in the app.
• Clear the whole database in settings.
• Remove the app, which takes the database, the stored photographs, the API keys and the Garmin tokens with it.

Because FierceSpeed holds nothing, there is nothing to ask us to delete.

Children

Sanne is not made for children and is not intended for anyone under 16.

Sanne is not medical advice

Sanne is a fitness and wellbeing tool, not a medical device. Training plans, calorie figures and readiness scores are estimates, and a suggestion written by an AI model can be wrong. Nothing in the app is medical advice. Talk to a qualified professional before you start or change how you train or eat, particularly with a medical condition or an injury.

Changes to this policy

When this policy changes, we will update this page and the date at the top.

Contact

To reach FierceSpeed, use the contact form.