Privacy Policy

Effective Date

20 January 2025

Last Updated

12 November 2025

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you use Lode.

By using Lode, you acknowledge that you have read and understood this Privacy Policy and consent to the described practices.

1. Introduction

Welcome to Lode ("we", "us", or "our"). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect your data when you use the Lode mobile and web application (the "Service"), which helps runners and athletes monitor and understand their training load through the Acute:Chronic Workload Ratio (ACWR).

By using our Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Who We Are

Data Controller:

Lode (trading name of an individual developer)

174A Flat A Lavender Hill

London, SW11 5TG

United Kingdom

vanessa.robitaille@loderunning.com

We are registered and operate in the United Kingdom.

3. Information We Collect

We only collect information necessary to deliver the Service effectively and safely.

3.1 Account Information

When you register or use the Service, we collect:

Name or username
Email address
Password (encrypted)
Country or region (optional)

3.2 Training Data

When you log workouts manually or sync from connected services (e.g., Garmin, Apple HealthKit), we collect:

Activity date, type, and duration
Distance, speed, and heart rate data
Training load and effort metrics
GPS and performance data (if available)

This data is required to calculate your ACWR and training trends.

3.3 Device and Usage Data

We automatically collect technical data such as:

Device type and operating system
IP address and browser type (for security and analytics)
App usage events and crash logs

This helps us improve performance, fix errors, and enhance usability.

3.4 Subscription and Payment Data

If you choose to subscribe to a paid plan (when available), we may collect:

Payment method details (processed securely by a third-party provider)
Transaction history and subscription status

We do not store or process your full payment card details.

3.5 Communication Data

If you contact us, we may collect:

Your email and message content
Support or feedback interactions

4. How We Use Your Information

We process your data to deliver, maintain, and improve the Service. We use your data for the following purposes:

Purpose	Example of Processing	Lawful Basis
Provide and operate the Service	Account creation, syncing workouts	Contractual necessity
Calculate ACWR and training load	Automated analysis of activity data	Legitimate interest / consent
Integrate with Garmin or Apple HealthKit	Sync and display your connected data	Consent
Maintain account security	Login, authentication, and monitoring	Legitimate interest
Improve our app and algorithms	Aggregate and anonymise data for insights	Legitimate interest
Communicate with you	Service updates, feature changes	Contractual necessity
Manage subscriptions and billing	Process payments securely	Contractual necessity
Comply with legal obligations	Record-keeping, tax, data protection	Legal obligation

We do not use your personal data for advertising, profiling for marketing, or third-party resale.

5. Algorithmic Processing and ACWR Analytics

Lode uses algorithms and analytics to calculate your Acute:Chronic Workload Ratio (ACWR).

This is an automated process based on your training data.
The result (your ACWR score and trend) is displayed only to you.
We do not use this data to make automated decisions that have legal, financial, or medical effects.
ACWR results are educational indicators only and not medical assessments.
No third parties have access to individual ACWR calculations or training logs.

6. Garmin and Apple HealthKit Data

When you choose to connect Lode with Garmin or Apple HealthKit, you grant permission for us to access your training data through their APIs.

We will:

Only use this data to calculate and display ACWR-related insights
Respect the privacy settings you control in Garmin Connect or Apple Health
Not use, sell, or share your data for marketing or analytics beyond Lode
Store your synced data securely in the UK (via Supabase)
Delete your connected data if you disconnect or delete your account

Apple HealthKit:

We comply fully with Apple's HealthKit Developer Guidelines:

Health data is used exclusively to provide ACWR insights within Lode
Health data is never used for advertising or tracking
HealthKit data is not shared with third parties or combined with non-health data for marketing

Garmin:

We comply with the Garmin Developer Program Agreement:

Data is accessed only with explicit user consent
We do not sell, transfer, or disclose Garmin-sourced data
We implement appropriate technical and organisational safeguards
Users may revoke Garmin access at any time via their Garmin account

7. Data Sharing

We only share data when necessary to operate the Service securely.

7.1 Service Providers

We may use trusted partners for:

Hosting and database: Supabase (UK servers)
Payment processing: Stripe or similar provider (for future paid plans)
Error tracking and analytics: Supabase internal analytics

All partners are bound by strict data protection and confidentiality obligations.

7.2 Legal Requirements

We may disclose your information if required by law, such as:

Compliance with a valid legal process
Protection of our legal rights or prevention of fraud
Enforcement of our Terms and Conditions

We never sell or trade your personal information.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above or as required by law.

Data Type	Retention Period
Account information	Until account deletion or inactivity for 24 months
Training data	Until deleted by you or anonymised after account closure
Support messages	Up to 12 months
Payment/transaction data	As required by tax or financial regulations

When data is no longer required, it is securely deleted or anonymised.

9. Data Storage and Security

All user data is stored in Supabase servers located in the United Kingdom.
Data in transit is encrypted using HTTPS (TLS).
Data at rest is protected with AES encryption.
Access to production systems is restricted and logged.
We regularly review security configurations and access policies.

Despite our efforts, no online platform can guarantee absolute security.

If a data breach occurs that may affect you, we will notify you and the UK Information Commissioner's Office (ICO) as required by law.

10. International Data Transfers

We currently store and process all user data within the UK. If we engage service providers outside the UK in future, we will ensure:

Transfers comply with UK GDPR standards, and
Appropriate safeguards (such as Standard Contractual Clauses) are in place.

11. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Access – Request a copy of your personal data.
Rectification – Request correction of inaccurate data.
Erasure ('Right to be Forgotten') – Request deletion of your data.
Restriction – Request limited processing in certain circumstances.
Portability – Request transfer of your data to another service.
Objection – Object to processing based on legitimate interests.
Withdraw Consent – Withdraw consent for Garmin/Apple HealthKit integrations or analytics at any time.

How to Exercise Your Rights

You can exercise your rights by contacting us at:

lode.acwr@gmail.com

We may need to verify your identity before fulfilling your request.

Information Commissioner's Office (ICO)

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

https://ico.org.uk/

Tel: 0303 123 1113

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age.

We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us to delete it immediately.

13. Cookies and Analytics

Lode uses functional and minimal analytics cookies (if on web) to:

Enable secure login
Track app performance and usage trends (anonymised)

We do not use cookies for marketing or advertising.

You can manage cookie preferences through your browser settings.

14. Communications

We may send you:

Account and security updates
Service notifications and feature updates
Administrative or legal information

We will not send marketing emails without your explicit consent.

You may opt out of non-essential communications at any time.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will:

Update the 'Last Updated' date above
Notify registered users via email or in-app notification

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

16. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy, please contact:

Lode Privacy Enquiries

We're here to help protect your privacy