PRIVACY POLICY
Last Updated: March 28, 2025
This Privacy Policy describes how WorkoutOdyssey ("we," "us," or "our") collects, uses, and discloses your personal information when you use our website and application (collectively, the "Service").
We are committed to protecting your privacy and ensuring you have a positive experience when using our Service. This policy outlines our data handling practices and your privacy rights.
1. INFORMATION WE COLLECT
1.1 Information You Provide to Us
When you register for an account, we collect:
- Email address (required)
- Password (required)
- Name (optional)
When you use our Service, we collect:
- Workout data that you manually input or upload, which may include:
- Workout type (including but not limited to running, walking, cycling)
- Distance
- Duration
- Date and time
- Pace/speed
- Route information and location data (when you upload files such as .tcx files)
- Any other workout metrics you choose to provide
1.2 Information We Collect Automatically
When you access or use our Service, we automatically collect:
- Log data (e.g., IP address, browser type, pages viewed, time spent on pages)
- Device information (e.g., device type, operating system)
- Usage information (e.g., features used, workout uploads)
- Cookies and similar technologies (see our Cookie Policy section below)
2. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
2.1 To Provide and Maintain the Service
- Create and manage your account
- Process and display your workout data
- Generate statistics and visualizations of your workouts
- Display maps of your workout routes
2.2 To Improve and Develop the Service
- Understand how users interact with our Service
- Identify and fix technical issues
- Develop new features and functionality
- Analyze usage patterns and trends
2.3 To Communicate with You
- Respond to your inquiries and support requests
- Send service-related notifications (e.g., account verification, technical notices, updates)
- Send you information about new features or services (if you have opted in to marketing communications)
2.4 To Ensure Security and Compliance
- Detect and prevent fraudulent activity and security incidents
- Debug to identify and repair errors
- Comply with legal obligations
3. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information to third parties. We may share your information in the following circumstances:
3.1 Service Providers
We may share your information with third-party vendors and service providers who perform services on our behalf, such as:
- Cloud storage providers
- Analytics providers
- Customer support services
- Email service providers
These providers are contractually bound to use your information only as necessary to provide services to us and in accordance with this Privacy Policy.
3.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
3.3 Business Transfers
In the event of a merger, acquisition, bankruptcy, or other sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
3.4 With Your Consent
We may share your information in other ways if you have explicitly consented to such sharing.
4. DATA RETENTION
We retain your personal information for as long as necessary to provide you with the Service and fulfill the purposes outlined in this Privacy Policy. When we no longer need to use your information, we will take reasonable steps to remove it from our systems and records or take steps to anonymize it.
You may request deletion of your account and associated data at any time through the Service interface or by contacting us. We will process your request in accordance with applicable data protection laws.
5. YOUR RIGHTS AND CHOICES
Depending on your location, you may have certain rights regarding your personal information, including:
5.1 Access and Portability
You can access your personal information and workout data through your account. You may also request a copy of the personal data we hold about you.
5.2 Correction
You can correct or update your account information through your account settings or by contacting us.
5.3 Deletion
You can delete your account and request deletion of your personal information at any time. Some information may be retained for legal or legitimate business purposes.
5.4 Objection and Restriction
You may have the right to object to or restrict certain processing of your personal information.
5.5 Communication Preferences
You can opt out of marketing communications by following the unsubscribe instructions in any marketing email we send or by contacting us directly.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section.
6. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. INTERNATIONAL DATA TRANSFERS
We are based in the United Kingdom and process data on servers located in the UK and European Economic Area (EEA). If we transfer your personal information to countries outside the UK or EEA, we will ensure that appropriate safeguards are in place to protect your information and that transfers comply with applicable data protection laws.
8. CHILDREN'S PRIVACY
Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.
9. COOKIE POLICY
9.1 What Are Cookies
Cookies are small data files placed on your device when you visit a website. We use cookies and similar technologies (e.g., web beacons, pixels) to recognize you and/or your device(s) and provide you with a personalized experience.
9.2 Types of Cookies We Use
WorkoutOdyssey only uses essential cookies that are strictly necessary for our Service to function properly. These include:
- Authentication Cookies: To recognize you when you log in to your account and maintain your logged-in status
- Security Cookies: To protect user accounts and prevent fraudulent activities
- Session Cookies: To remember information you've provided during your current browser session
We do not use cookies for advertising, analytics, or tracking purposes.
9.3 Your Cookie Choices
Most web browsers allow you to control cookies through their settings preferences. You can typically find these settings in the "options" or "preferences" menu of your browser. However, please note that if you disable the essential cookies we use, you may not be able to access or use certain features of our Service.
For more information about cookies and how to manage them on different browsers, you can visit www.allaboutcookies.org.
10. THIRD-PARTY LINKS AND SERVICES
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice (such as an email notification). Your continued use of the Service after such modifications constitutes your acknowledgment of the modified Privacy Policy.
12. CONTACT US
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at mariusz.las01@gmail.com.
13. FOR USERS IN THE EUROPEAN ECONOMIC AREA (EEA) AND UK
13.1 Legal Basis for Processing
For users in the EEA and UK, we process your personal information on the following legal bases:
- Performance of Contract: To provide you with the Service you have signed up for
- Legitimate Interests: For purposes that are in our legitimate business interests, such as security, fraud prevention, and improving our Service
- Consent: For purposes for which you have given us clear consent
- Legal Obligation: To comply with legal obligations
13.2 Data Controller
WorkoutOdyssey is the data controller of your personal information. Our contact details are provided in the "Contact Us" section.
13.3 Supervisory Authority
If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).