The short version: this is your training data. We don't sell it, we don't share it, and we don't use it for anything without your consent.
Your training data, activities and routes are never sold to anyone, for any reason.
Your data isn't shared with third parties. If you connect a provider like Strava, that connection only pulls your activities in - nothing goes back out.
Workout briefings (an optional feature) can use a language model, but only identity-stripped training data - no name, email, or location - and only if you've left that setting on. You can turn it off in settings at any time.
OAuth tokens for connected providers are stored encrypted, never in plain text.
You can download everything the app has on you - plans, sessions, activities, routes - at any time, from your plan page.