Privacy Policy

This policy explains what data Velox (“we”, “us”) collects, why, and how we protect it. For the purposes of UK data-protection law, Velox is the data controller for the personal data described here. We aim to collect only what we need to run the Service. You can reach us about privacy at hello@velox.run.

Account data: your email address, the name you give us (optional), whether you want product emails (and when you said yes), the date you accepted our Terms, and the language you last signed in with, so emails we send you reach you in it. If we suspend your account under our Terms, we record when and why. If you set a password, it is stored only as a bcrypt hash. If you sign in with Google, Google shares your name and email address with us. If you add a profile photo, we store it as a small square image with its metadata (such as location) removed; only you can see it, unless you choose to show it to the members of the clubs you are in (you can stop at any time), and removing it or deleting your account deletes it. If you send us feedback, we keep your message, its kind, the page you sent it from and the language you were reading.

Garmin data: your runs and wellness metrics (pace, heart rate, sleep, HRV and similar), and the gear you track in Garmin Connect (shoes and their distances), synced with your authorisation, and the email address of your Garmin account, so that one Garmin account links to only one Velox account. Some of this is health data, a special category under UK GDPR, which we process only to provide the Service to you, on the basis of your explicit consent. We store an encrypted Garmin access token, never your Garmin password. If your Garmin account uses two-step verification, Garmin’s sign-in session is held encrypted for up to ten minutes while you enter the code, then deleted. If you choose to send your training plan to your watch, we also write your next two weeks of sessions to your Garmin Connect calendar as workouts, and change or remove them when your plan changes or you turn it off. If you change which shoes a run was in, we make that change in your Garmin account too. Disconnecting Garmin deletes the access token and stops syncing; the runs and health data already imported stay in your account until you delete it.

Training data: the plans you build (your goal race, its date and the settings you choose), the notes you write on your runs, and the coaching written for you from them.

Billing data: Pro is sold by Polar, which acts as the seller (merchant of record): it takes your payment, issues your receipts and handles sales tax and VAT, under its own privacy policy. We give Polar your email address and an account reference so your subscription is linked to you, and we store the Polar subscription reference, plan, price, status and renewal dates, and when we last sent you a renewal reminder or a cooling-off notice. We never see or store your card details.

Run clubs: if you start or join a club, what you post for it (the club’s name, place and description, and its runs’ titles, times, meeting points, distances and sessions) is public: anyone can see it and search engines may index it, unless its organisers make the club unlisted (kept out of the directory and search, but open to anyone with its link) or private (seen only by its members, and by Velox admins for moderation). Which clubs you are in, your name, whether you are going to a run, and the distance and time of any run you add to a club’s results are shown only to that club’s members. The route, heart rate and everything else about your runs are never shared with a club. High fives you give and messages you post in a run’s chat are seen by that club’s members only. Leaving a club, or taking a run off its results, removes them from it. You can report a club, a chat message or a member of a club you are in to Velox. We keep the report with your account so we can act on it, and nobody you report is told who reported them. When a message is reported, we keep a copy of it with the report, seen only by Velox admins, so it can still be judged if it is deleted later. If one of your messages or your account is reported, an admin may remove the message or suspend the account.

Technical data: to stop repeated attempts at signing in and at our forms, we record your IP address against each attempt and delete it within a day. The country your connection comes from is read on each visit to show prices in your currency, and is not stored. Our hosting and database providers keep their own short-lived request logs. When something goes wrong on a page, a report of the error is sent to our error-monitoring provider (Sentry, which stores it in the EU): what failed and where in our code, the page’s address, your browser and device type, and, if you are signed in, your account’s ID (not your name or email address). It does not include your IP address, and it sets no cookies. We use these reports only to find and fix faults, and Sentry deletes them after 90 days at most.

Usage data: to understand how Velox is used and improve it, we record some of the things you do, against your account’s ID: signing up, connecting Garmin, building a training plan, starting or joining a club, sending feedback, and starting, cancelling or ending Pro (with the plan). If you accept analytics cookies, your browser also sends us the pages you visit, the buttons and links you click (with their text) and the forms you submit (not what you type into them), with your browser and device type, the page that sent you to us, the approximate location (country and city) worked out from your connection, and, once you sign in, your account’s ID. Both go to our analytics provider (PostHog, which stores it in the EU). Neither includes your name, email address, runs or health data. If you reject analytics cookies, your browser sends none of it.

Contract: to provide the Service and manage your subscription.

Consent: for processing your Garmin health data, for product emails and for analytics cookies. You can withdraw consent at any time.

Legitimate interests: to secure, maintain and improve the Service (including recording the usage described in section 2 against your account), and to keep run clubs safe (acting on reports and keeping a record of how we did), where not overridden by your rights.

Legal obligation: where the law requires us to keep or disclose data. The billing records tax law requires are kept by Polar, as the seller, not by us.

We use your data to provide analytics and coaching, operate your subscription, run the clubs you join (showing your name and the results you add to their members), secure your account, respond to support requests, and send account emails (confirmation, sign-in links and password resets) and the billing notices the law requires (renewal reminders and cooling-off notices) through our email provider.

If you ask for product emails (occasional training tips and news about Velox), we give our email provider (Resend) your email address and the name you gave us, once you have confirmed your address, so it can send them. Every one has an unsubscribe link, and you can also stop them from your account page. Either way, we stop sending them and delete your details from Resend’s list.

When you generate a plan, prediction or analysis, the relevant training data is sent to our AI provider (Anthropic) to write the result. It is used to fulfil your request and is not used to train their models.

We rely on these providers to operate Velox, each processing data only as needed to provide their service: Supabase (database and sign-in), Vercel (hosting), Polar (payments), Anthropic (AI), Resend (email), Sentry (error monitoring), PostHog (product analytics) and, if you choose to sign in with it, Google.

Some of our providers process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum.

We keep your account, Garmin and training data for as long as your account is active. If you delete your account, we delete it, including your runs, health data, plans, photo, club memberships, results and chat messages. A few things stay, no longer linked to your account: clubs and club runs you created stay with their club; feedback you sent; reports you made, with the copy of any message they were about; and our admin log of actions taken on your account (such as a suspension), which keeps your email address so the record still reads. Deleting your account also cancels any Pro subscription immediately and asks Polar to anonymise your customer record; Polar keeps only the transaction records the law requires of a seller. It also deletes your usage data from PostHog and takes you off our product-email list. Backups are purged on a rolling basis.

Velox always sets essential cookies: the ones that keep you signed in and secure your session. They’re required for the Service to work, so they’re always on. Any other cookie is optional and waits for your consent, as described below.

When you read Velox in a language other than your browser’s, for example by choosing one from the language menu, a cookie remembers that language until you close your browser. It holds the language and nothing else.

If you choose a light or dark look from the theme menu, your browser keeps that choice in its own storage so every page opens in it. It holds the choice and nothing else, is never sent to us, and is removed when you choose System again.

With your consent, we also use analytics cookies: PostHog sets a cookie and keeps a record in your browser’s storage so the pages you visit can be counted as one visitor’s, as described in section 2. Nothing is set until you accept, and rejecting is one click. You can change your mind at any time from “Cookie settings” at the foot of every page; withdrawing deletes PostHog’s cookie and storage. Your choice itself is kept in your browser’s storage.

We don’t use advertising cookies. If that ever changes, we’ll ask for your consent first and update this policy.

Garmin tokens are encrypted at rest with AES-256-GCM, passwords are hashed with bcrypt, database access is restricted so each account can read only its own data and what the clubs it has joined share with their members, and all traffic is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.

Under UK GDPR you have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent at any time. You can download a copy of your data or delete your account yourself, at any time, from your account page. For anything else, or if you’re unhappy with how we’ve handled your data, contact hello@velox.run: we’ll acknowledge a complaint within 30 days and answer it in full without undue delay. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children under 16.

We may update this policy from time to time; we’ll tell you about material changes through the Service or by email. The “last updated” date above reflects the latest version.

For any privacy questions or requests, contact us at hello@velox.run.