Privacy Policy

Last updated: December 2024

1. Introduction

Sports Intelligence (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number)
• Account credentials and profile information
• Fitness and workout data from connected services (Strava)
• Payment and billing information
• Communication preferences

2.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our services
• To process your requests and transactions
• To analyze your fitness data and provide AI-powered insights
• To communicate with you about our services
• To improve our services and develop new features
• To comply with legal obligations

4. AI-Powered Data Analysis and User Consent

Sports Intelligence incorporates artificial intelligence technology to provide personalized training insights and performance analysis. By creating an account and using our services, you explicitly consent to the following AI-related data processing:

4.1 AI Data Processing

We use AI technology through integration with OpenAI ChatGPT API to analyze your fitness data. This processing includes:

• Converting your workout data into anonymized performance metrics (heart rate, cadence, pace, power output, elevation gain, duration)
• Generating personalized training recommendations based on your performance patterns
• Providing insights to help optimize your training for specific events (marathons, triathlons, Ironman competitions)
• Identifying potential overtraining or undertraining patterns

4.2 Data Anonymization and Security

We maintain strict data protection measures for AI processing:

• No Personal Identifiers: All personal identifiers, location data, and personally identifiable information are removed before AI analysis
• Limited Data Sharing: Only anonymized performance metrics are shared with OpenAI through their secure API endpoints
• No AI Model Training: We explicitly do not use your data to train AI models
• No Data Retention: AI-processed data is not stored or retained beyond the immediate analysis session
• Purpose Limitation: Data is used exclusively for providing training insights to you as the individual user

4.3 Your Consent and Control

By using our services, you acknowledge and consent to:

• AI analysis of your anonymized performance data for training recommendations
• Sharing anonymized metrics with OpenAI for analysis purposes only
• Receiving AI-generated insights and recommendations based on your data

You maintain full control over your data and can withdraw this consent at any time by disconnecting your Strava account or contacting us directly.

5. Strava API Integration and Data Usage

Sports Intelligence integrates with Strava API to provide comprehensive fitness analytics. Our use of Strava data is strictly limited and compliant with Strava terms of service:

5.1 Data Collection from Strava

We collect the following data from your Strava account:

• Workout activities (running, cycling, swimming, etc.)
• Performance metrics (distance, time, pace, heart rate, power output)
• Training data (elevation gain, cadence, calories burned)
• Activity descriptions and notes (if provided)

5.2 Data Processing and Analysis

Your Strava data is processed for the following legitimate purposes:

• Performance Analysis: Analyzing your workout patterns and performance trends
• Training Optimization: Providing personalized training recommendations for endurance events
• Progress Tracking: Monitoring your fitness progress over time
• Event Preparation: Helping you prepare for marathons, triathlons, and Ironman competitions
• Health Insights: Identifying potential overtraining or undertraining patterns

5.3 Data Protection and Compliance

We maintain strict compliance with Strava API terms and data protection requirements:

• No Commercial Use: We do not sell, share, or use your data for commercial purposes beyond providing our service to you
• No Third-Party Sharing: Your data is not shared with third parties except as explicitly stated in this policy
• User Control: You maintain full control over your data and can disconnect your Strava account at any time
• Secure Storage: All data is stored securely using industry-standard encryption and security measures
• Purpose Limitation: Data is used exclusively for providing training insights to you as the individual user

6. Third-Party Service Providers

We work with the following third-party service providers to deliver our services:

6.1 Strava API

We integrate with Strava API to access your fitness data. This integration is:

• Authorized by you through OAuth2 authentication
• Limited to the data you explicitly grant access to
• Governed by Strava terms of service and privacy policy
• Revocable by you at any time through your Strava account settings

6.2 OpenAI ChatGPT API

We use OpenAI ChatGPT API for AI-powered analysis. This integration:

• Only processes anonymized performance metrics
• Does not include personal identifiers or location data
• Is governed by OpenAI data usage policies
• Is used exclusively for generating training recommendations

6.3 Payment Processors

We use secure payment processors to handle billing and subscription management. These services:

• Process payment information securely
• Comply with PCI DSS standards
• Do not store payment information on our servers

7. Data Security and Technical Safeguards

We implement comprehensive security measures to protect your data:

7.1 Technical Security

• Encryption: All data transmission is encrypted using industry-standard protocols (TLS/SSL)
• Secure Storage: Data is stored using encrypted databases and secure cloud infrastructure
• Access Controls: Strict authentication and authorization controls limit data access
• Regular Updates: Security systems are regularly updated and monitored

7.2 Operational Security

• Staff Training: All team members are trained on data protection and privacy requirements
• Access Logging: All data access is logged and monitored for security purposes
• Incident Response: We have procedures in place to respond to any security incidents
• Regular Audits: Security practices are regularly reviewed and audited

8. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: When you explicitly consent to data processing, including AI analysis and Strava integration
• Contract: To fulfill our contractual obligations to provide fitness analytics services
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

9. Data Sharing and Disclosure

We may share your information in the following circumstances:

• With third-party service providers (e.g., Strava API, OpenAI ChatGPT API, payment processors) as described in this policy
• When required by law or to protect our rights and the rights of others
• In connection with a business transfer or merger (with appropriate notice)
• With your explicit consent for specific purposes

Important: We do not sell, share, or use your data for commercial purposes beyond providing the service to you as an individual user. We do not use your data to train AI models or for any other commercial exploitation.

10. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data, including AI analysis
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for AI analysis or Strava integration at any time

11. Data Retention

We retain your personal information according to the following principles:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Workout Data: Retained to provide ongoing analytics and historical performance tracking
• AI-Processed Data: Not retained beyond the immediate analysis session
• Legal Requirements: Some data may be retained longer if required by law

You can request deletion of your data at any time, subject to legal and technical limitations.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including:

• OpenAI services for AI analysis (United States)
• Strava services for data access (United States)
• Our cloud infrastructure providers

We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, maintain your session, and provide personalized content. You can control cookie settings through your browser preferences.

14. Children Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

16. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us: