ConocalPrivacy policy
Last updated September 29, 2026
Conocal is a training log and plan for runners, run by Animeeples LLC ("we", "us"). This policy covers the app at app.conocal.com (and the Conocal apps for Mac and iPhone when they ship), the API behind it at api.conocal.com, and this website. Questions go to hello@conocal.com.
The short version: we collect what it takes to show you your training, we don't sell it or use it for ads, and you can delete all of it from the app.
What we collect
| What | Where it comes from | Why |
|---|---|---|
| Name, email address, password (stored only as a hash) | You, when you create an account | To sign you in and to email you (password resets, invites) |
| Sign-in sessions, with the IP address and browser or device they came from | Your device, when you sign in | To keep you signed in and to spot misuse |
| Activities: the full FIT file of each workout, including GPS positions, heart rate, pace, elevation, cadence, power and laps | COROS, once you connect it | To show your runs, charts, maps, heart rate zones and training load |
| Daily health and wellness readings: resting and average heart rate, sleep, heart rate variability, stress, recovery and COROS's fitness and training load assessments | COROS, once you connect it | Training load uses your resting heart rate; the rest is kept so features can use it later without asking COROS again |
| Your COROS profile and the list of your COROS devices | COROS, once you connect it | To show which watch recorded a run |
| Weather for each activity | Open-Meteo (see below) | To show temperature, dew point, humidity and wind during a run |
| What you enter: your training plan and its change log, shoes, units, heart rate settings | You | To run the features you use them for |
| Page views on this website and the web app, without cookies | Cloudflare Web Analytics | To see how many people visit and which pages load slowly |
Heart rate, sleep and other wellness readings are health data, and GPS tracks show where you ran and often where you live. We treat both as sensitive: they are used only to show your own training back to you.
What we don't do
- We don't sell or rent your data, share it with advertisers, or show ads.
- We don't show your data to other users. There is no public profile or feed.
- We don't use your data to train AI models.
- We don't write anything to your COROS account. Our access is read-only.
Who else handles it
- Cloudflare hosts the app, the API and this website, stores all of your data (databases and files), sends our email, and provides the cookieless page-view analytics.
- COROS is where your activities and health data come from. You connect it by signing in to COROS and approving access. COROS's own privacy policy covers what they do. Disconnecting in Settings revokes our access.
- Open-Meteo provides historical weather. For each activity we send it GPS positions and times along the route (one every 15 minutes) and get back the weather at those points. We don't send your name, email or anything else about you.
We would disclose data if the law required it, and would tell you first unless we're barred from doing so.
Where it's stored and for how long
Your data is stored with Cloudflare, which may process it in the United States and other countries where it runs data centers. It's encrypted in transit and at rest.
We keep your data while you have an account. When you delete your account, it's removed right away from the app's storage; database backups can hold a copy for up to 30 days before they expire.
Your choices
- Delete your account: Settings → Delete my account. This revokes COROS access and deletes your account, activities, files, plan, shoes and settings.
- Disconnect COROS: Settings → Disconnect. We stop syncing; what already synced stays until you delete your account.
- A copy of your data, or a correction: email hello@conocal.com and we'll answer within 30 days.
Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to processing or to complain to your data protection authority. Email us to use any of them.
Cookies and storage
This website sets no cookies. The web app keeps your sign-in token in your browser's local storage (on Mac and iPhone, in the Keychain) so you stay signed in; signing out removes it.
Children
Conocal isn't meant for anyone under 16, and we don't knowingly collect data from them. If you think a child has an account, email us and we'll delete it.
Changes
If we change this policy, we'll update the date above. For changes that matter, such as a new kind of data or a new company that handles it, we'll email you before they take effect.