Arnold Privacy Policy
Last updated: August 29, 2026
At Arnold, your training data is personal. We treat it that way.
Arnold needs some information to provide useful coaching assistance: your athlete profile, your training, certain physiological metrics, and information you choose to share with Arnold. This policy explains what data we process, why we use it, who it may be shared with, how long we keep it, and your rights.
1. Who we are
Arnold is operated by NoCoffee SARL, 7 allée Albert Camus, 31700 Blagnac, France. Email: contact@getarnold.app.
NoCoffee SARL is the data controller for the personal data processing described in this policy.
2. Who Arnold is for
Arnold is intended for people aged 18 or over. We do not knowingly seek to collect personal data relating to minors.
3. What information we collect
Account and athlete profile
We may process your first and last name, email address, date of birth, sex, weight, and height to create and manage your account and, where relevant, adapt the coaching experience to your athlete profile.
Training and activity data
When you connect a compatible service, Arnold may receive sports and training data including activities and training history, GPS data, heart rate, power, cadence, sleep, heart rate variability (HRV), weight, and training readiness indicators.
Arnold currently supports Garmin. Available integrations may change, and we will update this policy when new integrations introduce new data processing.
Information you share with Arnold
You may tell Arnold about your training and current condition, including how a workout felt, fatigue, pain, discomfort or injury, personal constraints affecting training, and notes or comments about your sports practice.
Some of this information, together with physiological data received from your devices, may constitute or allow us to infer data concerning your health under the GDPR.
Conversations and athlete memory
Messages exchanged with Arnold are stored so conversations can function and retain context. Conversations are automatically deleted after 30 days.
Arnold may extract information useful for ongoing coaching and store it separately in your athlete memory. Automatic deletion of a conversation therefore does not necessarily delete relevant information stored separately in that memory. Your athlete memory is deleted when you delete your account.
Technical and error information
We may process technical information needed to operate, secure, and diagnose Arnold, including information about your browser or device, session, and application errors. We use Honeybadger to detect and diagnose technical errors and aim to limit information sent to what is necessary for troubleshooting.
4. Why we use your information
We use your information to create, authenticate, and manage your account; synchronize and display training; analyze activities and training history; personalize Arnold's coaching assistance; answer questions using relevant context; retain useful information for continuity of coaching; enable the intended sharing of coaching information with an associated coach; keep the service secure and stable and diagnose technical issues; and understand aggregate usage of our public website.
We do not sell your personal data or use it for targeted advertising.
5. Legal bases for processing
Depending on the processing activity, we rely in particular on:
- performance of a contract, where processing is necessary to provide Arnold and the features you request;
- our legitimate interests, where necessary to secure, operate, and diagnose the service, subject to your rights and freedoms;
- your consent, where consent is the appropriate legal basis or is required for a particular processing activity.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out beforehand.
6. Sports and training data
Arnold processes sports and training data to provide coaching assistance and help you understand and adapt your training.
Some information you choose to provide — for example information about an injury — or some combinations of physiological data may be considered data concerning health under the GDPR.
Where specific rules apply to this type of data, we process it in accordance with the applicable requirements.
Arnold is a sports coaching assistance tool. It is not a medical service and does not provide medical diagnosis or treatment.
7. How Arnold uses artificial intelligence
Arnold uses artificial intelligence models provided through the Mistral AI API.
To generate a relevant response, Arnold may send Mistral information necessary for the current request, including parts of your athlete profile, training history and data, information from activities, relevant parts of athlete memory, and relevant conversation content.
According to Mistral's current API documentation, data sent through the Mistral API is not used to train Mistral's models.
More information: https://docs.mistral.ai/admin/monitor-comply/privacy-data-controls/
8. Garmin
If you connect Garmin, Arnold receives data you have authorized it to access in order to provide training analysis and coaching features. You can revoke this connection.
When you delete your Arnold account, Garmin data stored in Arnold is deleted together with other data associated with your profile. Garmin remains responsible for processing carried out directly as part of its own services.
9. Your coach and club
If your account is associated with a coach, that coach may access information intended for sports coaching within Arnold, including your activities, training notes and feedback, and injury or discomfort information shared in areas intended for coach follow-up.
Your coach and club cannot access your private conversations with Arnold.
10. Our service providers
We use a limited number of service providers:
- Hetzner — hosts the Arnold application and database in Germany: https://www.hetzner.com/
- Mistral AI — provides the artificial intelligence models used by Arnold: https://mistral.ai/
- Honeybadger — application error monitoring and diagnosis. Our account currently uses the United States region, so technical information associated with an error may be processed and stored there: https://www.honeybadger.io/
- Plausible Analytics — aggregate traffic measurement for our public website. Plausible does not use analytics cookies or persistent identifiers and states that visitor data is processed within the European Union: https://plausible.io/
11. International data transfers
Most of Arnold's core infrastructure is hosted within the European Union. Some service providers may process data outside the European Economic Area. In particular, our Honeybadger account is hosted in its United States region.
Where personal data is transferred internationally, we rely on applicable GDPR transfer mechanisms and safeguards implemented by our providers where required. We also aim to minimize personal data sent to technical diagnostic tools.
12. How long we keep information
We retain data only for as long as necessary for the purposes described here:
- conversations with Arnold: 30 days, then automatically deleted;
- profile, activities, training data, notes, feedback, and athlete memory: for the lifetime of the account, unless deleted earlier or otherwise required by law;
- public website analytics: according to the retention rules applicable to our Plausible configuration;
- technical diagnostic data: for the period necessary for troubleshooting and according to retention settings configured with our providers.
13. Deleting your account
You can delete your account directly from Arnold.
Deleting your account deletes data associated with your Arnold account, including your athlete profile, stored activities and training data, notes and training feedback, conversations, athlete memory, and associated observations. This action is permanent.
You can also ask us to delete your account and the data associated with it without reinstalling the app, by emailing contact@getarnold.app.
14. Cookies and analytics
Arnold's public website does not use advertising or tracking cookies. We use Plausible Analytics to measure website traffic without cookies or persistent identifiers.
The Arnold application only uses cookies or storage mechanisms strictly necessary for authentication and operation of the service.
15. Security
We implement reasonable technical and organizational measures designed to protect your data against unauthorized access, loss, alteration, or disclosure. No online service can guarantee absolute security.
16. Your rights
If the GDPR applies to you, depending on the circumstances you may have rights of access, rectification, erasure, restriction, objection to certain processing, data portability where applicable, and withdrawal of consent for processing based on consent.
To exercise your rights, contact contact@getarnold.app. We may request information reasonably necessary to verify your identity.
You also have the right to lodge a complaint with the CNIL, the French data protection authority: https://www.cnil.fr/
If you live elsewhere in the European Economic Area, you may also contact your local supervisory authority.
17. Changes to this policy
Arnold evolves. We may update this policy as we add features, integrations, or processing activities. If a material change affects how your personal data is processed, we will provide appropriate notice.
18. Contact us
NoCoffee SARL
7 allée Albert Camus
31700 Blagnac
France
contact@getarnold.app