Sign up

Privacy

Your training data stays yours.

What we store, why, who else sees it, and how to have it deleted. Last updated 9 November 2026.

Who we are

Two Thresholds is a cycling training app for athletes and their coaches, made by Ivan Milicevic in Norway. Questions about your data go to [email protected].

What we store

  • Your account: name, email address and a password, stored only as a one-way hash.
  • Your training: rides and their files (power, heart rate, cadence, speed, GPS route), planned workouts, notes, events, threshold values and the metrics we compute from them.
  • Conversations: comments you and your coach write on rides and planned workouts, and whether you have read them.
  • Sign-in records: when you last signed in, the IP address and the browser or device name, kept to secure your account and to let you sign out other devices.
  • Trial sign-ups on this website: the name, email and answers you send in the form.

The iPhone app stores your session in the iPhone's Keychain and nothing else on the phone. There is no advertising, no tracking across apps or websites, and no analytics service on the app or this website.

Why

Only to run the service you signed up for: show your training, compute your metrics, let you and your coach talk about it, and send the emails you ask for (password links and feedback replies). We never sell your data or use it for advertising.

Who else sees it

  • Your coach, if you have connected one, sees your training and your conversations. You choose whether rides synced from Strava are shared.
  • Services you connect yourself, such as Vekta, Strava or intervals.icu, exchange data with us under your own account with them.
  • AI assistants you connect (Claude or ChatGPT through MCP) read the data you ask them about, under your own account with them. Rides from Strava are never shared this way.
  • Cloudflare carries the encrypted connection to our server.
  • Resend sends our emails (EU region, no open or click tracking).

The data itself lives on our own server in Norway.

How long, and deleting it

We keep your data while your account is open. Email [email protected] from your account's address to get a copy of your data or to delete your account; we delete the account, its rides, plans and comments within 30 days. Backups roll over within a further 30 days.

Your rights

Under the GDPR you can ask to see, correct, export or delete your data, or object to how we use it, at the address above. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).