Privacy policy

Effective 4 October 2026

Heracles Records is a desktop app that runs on your computer. It has no accounts of its own, and its developer runs no servers: nothing you do in the app is sent to the developer. This policy explains what the app reads, where it keeps it, and what it sends to the services you choose to connect.

Google user data

Connecting Google Drive is optional. It is used only for Sync, which keeps your Heracles Records data the same on each of your own computers.

• What the app can access. The app asks only for the drive.file permission. It creates one folder named Heracles Records in your Drive and can read and change only the files it created there. It cannot see or change any other file in your Drive.
• What it stores there. Your coach conversations, training plans, app preferences and the change log Sync needs to merge your computers. These files are scrambled with a key built into the app, which keeps them out of Drive previews and search; it is not encryption against someone with access to your Drive.
• What it reads about your account. The email address, name and storage use of the connected Google account, to show which account Sync is using.
• Where your sign-in is kept. The Google sign-in token is stored only on your computer, encrypted with your operating system's secure storage. It is never sent anywhere except to Google.
• Sharing. Google user data is not sold, not shared with anyone, not used for advertising, and not used to train AI models. It moves only between your computer and your own Google Drive.
• Stopping and deleting. Disconnect Google Drive in the app under Settings → Sync, or remove the app's access at myaccount.google.com/permissions. To delete what Sync stored, delete the Heracles Records folder from your Drive.

Heracles Records' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data on your computer

Your training data, conversations, plans and settings are stored in the app's data folder on your computer. Passwords, keys and sign-in tokens are encrypted with your operating system's secure storage where it is available. Uninstalling the app and deleting its data folder removes them.

Services you connect

When you connect a service, the app talks to it directly from your computer, and that service's own privacy policy applies:

• COROS: your activities, sleep, plans, workouts and calendar, read and saved with your COROS account.
• AI providers you choose for the coach (such as OpenAI, Anthropic, OpenRouter, or a model on your own computer): your questions and the training data the coach needs to answer them. Each conversation reads only the data you allow it.
• Hevy: the strength workouts you import, read with your Hevy API key.
• Maps and place names: map images from map providers (OpenFreeMap, OpenStreetMap, OpenTopoMap, CyclOSM, Esri), and the approximate location of places you trained, rounded to about a kilometre, sent to OpenStreetMap's Nominatim or Photon to name them.
• GitHub: checking for and downloading app updates.

Analytics

The app contains no analytics, tracking or crash reporting.

This website

This website sets no cookies and contains no analytics or tracking. It is hosted on GitHub Pages; GitHub receives the technical details any web host does, such as your IP address, under the GitHub General Privacy Statement.

Changes

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions about this policy: open an issue at github.com/quochungse/HeraclesRecords/issues.