Skip to content
Sign in
Last updated 2026-08-25

Privacy Policy

This policy explains what data beatledger (the “Service”, operated bydatafluent, “we”, “us”) processes, why, and what your rights are. The Service is an invite-only pilot for adults aged 18 or over and is provided in the European Economic Area; the GDPR applies.

1. Data we process

  • Account and device data: email address, account and installation identifiers, sign-in timestamps, tester status, platform, and app and build version.
  • Pilot requests: email address provided when requesting an invitation. We use this to review requests and contact selected pilot testers.
  • Health-related training data: imported run files (FIT) and derived metrics — heart rate, pace, distance, elevation, precise GPS traces and start location — plus training plans, goals, and schedule constraints. This is a special category of personal data (Art. 9 GDPR) and is processed solely to provide the training functionality.
  • Conversations: messages you exchange with the AI data agent and the responses generated.
  • Feedback: issues and feature requests you submit, including screenshots and voluntary FIT samples shared to assess a requested integration.
  • Technical data: standard request logs, including IP address, user agent, and timestamps, used for security and operations.

2. Legal bases

  • Performance of the service contract (Art. 6(1)(b))
  • Explicit consent for health-related data, including GPS data, and separate explicit consent before agent context is sent to DeepSeek for AI processing (Art. 9(2)(a))
  • Legitimate interest in security and abuse prevention (Art. 6(1)(f))
  • Legal obligations, where applicable (Art. 6(1)(c))

Before you import health-related data or use the agent, the app asks for the relevant consent. FIT consent covers importing, storing, and analysing heart-rate, route/GPS, pace, elevation, and derived data, including FIT-derived start-coordinate lookup. AI consent covers sending the conversation and selected run or plan context needed for your request to DeepSeek. You can withdraw either consent in Settings. Withdrawal stops the affected feature from processing new data; account deletion removes associated account data.

3. Processors and international transfers

  • Supabase, Ireland — database, authentication, storage
  • Scaleway, Netherlands — application servers
  • DeepSeek, China — AI model inference for agent responses
  • MapTiler, Switzerland — map tiles and reverse geocoding of FIT-derived start coordinates
  • Resend, US — transactional email (EU-US DPF / SCCs)
  • Vercel, US — website hosting (EU-US DPF / SCCs)

Primary application records are stored in the EU. Processing by DeepSeek takes place in China; the European Commission has not issued an adequacy decision for China. Before that transfer, we ask for your separate explicit consent before first use (Art. 49(1)(a)). The transfer is limited to recent conversation messages, selected run and plan context, and tool results used to answer your request; raw FIT files are not transmitted. Standard contractual clauses govern the US-based processors where applicable.

4. Retention

  • Active testers: data is retained for the duration of the pilot.
  • Raw run files: 12 months after import, then deleted.
  • Agent conversations: 12 months after the last message.
  • Account, device, and feedback data: until account deletion or one year of inactivity.
  • Voluntary FIT integration samples: until account deletion or earlier on request.
  • Pilot requests: until the pilot ends or earlier on request.
  • Request logs: 30 days.

5. Your rights

You have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent. You also have the right to lodge a complaint with your relevant data-protection supervisory authority. Account deletion is available in the app and on this site; deletion removes associated account data within 30 days, subject only to data we must retain by law.

The Service does not use automated decision-making that produces legal or similarly significant effects for you.

6. Contact

Data controller: datafluent. Privacy contact: privacy@beatledger.app.