Hello!
I have a test account that I use to test functionality. I now see a lot of planned workouts/training sessions in this account, but I never set up anything there.
Do you know where these workouts could be coming from?
Is this caused by a new feature or some default setting that was enabled automatically? If so, where can I disable it and remove all of these planned workouts from the account?
IntervalCoach is one of the AI apps interfacing with Intervals.
So you have IntervalCoach pushing stuff to that account.
Look in the settings/app page, there you see all connected apps and there you can disconnect
I never used this account with IntervalsCoach!
This account is just for Apple to test my App PaceKeeper AI.
Well, I delete now all workouts with my own App. But really no idea, how this App saved workouts in this account.
Then they may abusing your API key or the API key of any user which is coaching this account.
ok, I rotate the API key
There may not be a direct path from IntervalssCoach, but there can be an indirect one where workouts from IntervalsCoach go to PaceKeeper and the from there to that account.
It’s not like they are falling from the sky..
And it clearly has IntervalsCoach as the initial source. Some kind of loop or forwarding from one to the other.
The good thing is that this is only a test account for Apple review/testing. We don’t need to waste our time with that 
However, I would still like to understand how write access to this account was possible.
As far as I can see, there are only two possible explanations:
a) The login details that were provided to Apple
An Apple reviewer may have logged into the app once, activated something, and then disconnected it again. They did have the login credentials, but I do not think they created any activities.
b) The API key
The API key, together with the athlete ID, may have been compromised, which would allow third-party software to access the account.
My own intervals account follows “PaceKeeper AI Bot”. But in that case my account does not have write access to the bot’s account, correct?
My app “PaceKeeper AI” does not have its own login system. It only uses the Intervals.icu OAuth flow. Therefore, a third-party app cannot connect to a PaceKeeper account through my app. The connection would have to be made directly with Intervals.icu.
So, from my point of view, it can only be option a) or b). Is that correct, or am I missing another possible path?
One other place to check.
Are you using a plan? It can also push workouts to your calendar if you’re linked to it.
You can check on the settings page, just above the merchandise section.
You didn’t say how your test account is connected to your real account (complete independent or are you “coaching” it or just follow?). And what apps have a connection to your real account.
There may be more ways depending on what you have enabled
@Gerald Thanks for the tip. But no plan active or added
@R2Tom My real account just following the bot. There is no trainer set in the bot´s account.
I`m not sure, but maybe I added the App in my real account weeks or months ago for testing. But my real Account has no write access to the bot`s account.
Guess not possible to find how they come in the calendar.
Best would be to delink everything and add it one by one.
Took me a long time to figure out where the VO2max value was coming from, when Garmin was disconnected. It was “estimated” from HRV4Training through the Dropbox link.
