Privacy Policy

2. What we collect

Category	Items	When
Account (required)	Email, password (stored with one-way hashing), display name	At sign-up
Google sign-in	Email, name and profile picture URL of your Google account	When you sign up or in with Google
Profile (optional)	Gender, birth year, height, weight, division, time zone and language, Instagram handle, official-results athlete link	When you enter them
Workouts	Session start and end times, splits, exercises, recording device, RPE, notes, PFT and official race results, goals and training programs	When you record or import them
Health data (sensitive, optional)	Heart rate during exercise (per-segment average and max) — stored only with your separate consent	When you have consented and record with a heart-rate watch or strap
Machine raw data	Time-series speed, power and stroke data from machines such as the Concept2 PM5

3. Retention and destruction

Information	Retention
Account, profile, workouts, crew and center activity	Until you delete your account — deleted immediately when you do (see “What remains after deletion” below)
Heart rate (health data)	Until you turn off heart-rate consent or delete your account — turning it off deletes stored heart rate, and AI comments that used it are rewritten without it
Workouts you delete	Removed from screens and statistics immediately. A deletion marker is kept so that an offline device cannot bring the record back when it syncs again, and it is destroyed with your account.
Photo-zone background	Deleted within about 5 minutes after it has been shown once and the photo zone moves on, or 24 hours after upload if it was never shown
Notification subscriptions	Until you turn notifications off or the subscription expires, at the latest until account deletion
Consent records	Until you delete your account
Access logs	Deleted automatically after the hosting and database providers’ log retention period (30 days or less)

8. Pseudonymized data (optional training consent)

Only the records of users who agree to “use pseudonymized workout records to improve analysis models” are processed as below. This consent is optional; every feature works the same without it.

Item	Details
Purpose	Building and improving workout analysis models (e.g. time prediction, pacing analysis)
Data	Splits, exercises, machine raw data, RPE, division and recording method, PFT results, gender, age group (10-year bands). Heart rate only with both heart-rate collection and “include heart rate in training data” consents; height and weight only as 5 cm / 5 kg bands
Pseudonymization	Names, emails, notes, crews, centers, race titles, locations and official-results links are removed; account and session IDs are replaced with codes derived from a separately kept secret; dates become “days since the person’s first record”, and birth year becomes an age group.
Additional information	The secret used to derive codes is kept separately in the database and cannot be read by anyone. Every export is logged with who exported how many records and when.
Retention	Up to 2 years from when a dataset is created, destroyed without delay once the purpose is fulfilled
Third parties / processors	None

11. Privacy officer

Item	Details
Operator	to be confirmed
Privacy officer	to be confirmed
Contact	to be confirmed

Operator

Details: to be confirmed

Privacy officer

Details: to be confirmed

Contact

Details: to be confirmed

Send privacy questions, complaints and requests for remedy to the contact above. We will respond without delay.

Privacy Policy

Privacy Policy

1. Why we process personal information

2. What we collect

3. Retention and destruction

4. Disclosure to third parties

5. Processors and transfers abroad

6. What other users can see

7. Your rights

8. Pseudonymized data (optional training consent)

9. Security measures

10. Cookies

11. Privacy officer

12. Remedies

13. Changes to this policy