Last updated 18 August 2026
Privacy
Musette holds your bodyweight, your training and what you ate. That is health data, and this page says plainly what happens to it.
The short version. Your data is used to compute your plan and nothing else. It is never sold, and never shared for advertising. Three companies process it on our behalf, named below. You can export or delete everything yourself, at any time, without asking us.
What is held
| What | Why | Kept for |
|---|---|---|
| Bodyweight, height, age, sex | The energy targets cannot be computed without them | Until you delete your account |
| Training: hours, load, power, heart rate | Sets each day's calories and carbohydrate | Until you delete your account |
| What you ate, and what you ticked off | Shows the plan against reality | 90 days, then deleted automatically |
| Your passkey's public key | So you can sign in without a password | Until you delete your account |
| Your intervals.icu authorisation | To read your rides | Until you disconnect it |
The 90-day limit on the food log is a real retention policy, not an aspiration — old entries are pruned by the server whether or not you ask.
Legal basis
Bodyweight and training load are special-category data under Article 9 of the UK and EU GDPR. We rely on your explicit consent, given at signup and recorded with a timestamp. You can withdraw it at any time by deleting your account, which erases the data rather than hiding it.
Who else processes it
| Processor | What they see | Why |
|---|---|---|
| Cloudflare | Everything, at rest and in transit | Hosting, storage and the network |
| intervals.icu | Your rides, read-only | Supplies the training data |
| OpenAI | A small fixed set of derived figures — the day's targets, training load, what you logged. Not your name, not your email, not raw ride files | Writes the plain-language explanation of your plan |
OpenAI's default abuse-monitoring retention is 30 days. We do not use your data to train any model, and our agreement does not permit them to either.
Your rights
- Export. Everything held about you, as JSON, from inside the app. No request, no waiting.
- Deletion. Erases your profile, targets, food log and credentials. Household items others still rely on — a shared shopping list — are handed over rather than destroyed.
- Correction. Every figure in your profile is editable by you.
- Complaint. To your data protection authority; in the UK, the ICO.
What deletion does not immediately reach: Cloudflare's request logs, which expire on their own schedule, and any backup made before you deleted. Both age out; neither is used for anything.
If something goes wrong
Musette does not collect your email address, which is good for your privacy and genuinely awkward for breach notification — we would have no way to write to you. So the commitment is this: a notice on this site and a banner inside the app, within 72 hours of becoming aware, describing what happened and what to do. If you would rather be told directly, you can add a contact address in the app; it is optional and used for nothing else.
Cookies
None before you sign in. This page sets nothing. After sign-in there is one cookie, which keeps you signed in, and it is not shared with anyone.
Contact
The data controller is the operator of Musette, reachable at hello@musetteapp.com.