Back to Home

Privacy Policy for Eliteathletes Training Camp

Last Updated: 14-10-2026

1. Introduction

Welcome to Eliteathletes Training Camp ("we," "our," or "us"), operated by Eliteathletesco. We provide personalized cycling training, nutrition, strength, and recovery plans through our web application and related services, available worldwide.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read it carefully. By accessing or using Eliteathletes Training Camp, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, password, age, gender, weight, height
  • Training Goals & Preferences: Target events, performance goals, training availability
  • Health Metrics: Resting heart rate, FTP, training history, injury information
  • Payment Information: Processed securely through our third-party payment processors “https://www.stripe.com/”
  • Communication Data: Messages, feedback, and support requests

2.2 Information Collected Automatically

  • Training Data: Workout files (.FIT, .TCX, .GPX) uploaded or synced from devices/apps
  • Device Information: Device type, operating system, browser type, IP address
  • Usage Data: Training logins, feature usage, interaction patterns
  • Location Data: GPS data from training sessions (only for performance analysis)

2.3 Information from Third Parties

  • Training Platforms: Garmin Connect and Wahoo (when authorized), and .fit files you upload from your bike computer
  • Payment Processors: Billing information for subscription management
  • Analytics Services: Usage patterns to improve our services

3. How We Use Your Information

We use your information to:

  • Generate, adjust, and optimize personalized training plans
  • Calculate training load, fatigue, recovery, and nutrition metrics
  • Process payments and manage global subscriptions
  • Provide customer support in multiple languages/time zones
  • Improve platform features through aggregated analysis
  • Send service-related announcements and training insights
  • Ensure platform security and prevent fraudulent activity
  • Comply with international legal obligations

4. International Compliance Framework

As a global service, we comply with:

  • GDPR (European Union)
  • CCPA/CPRA (California, USA)
  • LGPD (Brazil)
  • PIPEDA (Canada)
  • APP (Australia)
  • Other applicable regional data protection laws

Legal bases for processing include contractual necessity, legitimate interests, consent, and legal obligations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

  • Global Service Providers: Hosting, payment processing, analytics, communication platforms
  • Professional Advisors: International legal, accounting, and consulting services
  • Legal Requirements: When required by applicable laws worldwide
  • Business Transfers: In connection with merger, acquisition, or sale
  • With Your Explicit Consent: For specific, authorized purposes only

Third-Party Integrations: Connected services (Garmin, Wahoo, etc.) operate under their own privacy policies. We only access authorized data. How we handle Garmin data is described in Section 6.

6. Garmin Connect Data

If you connect your Garmin Connect account, this section explains exactly how we collect, use, process, share and store the data Garmin sends us. It applies in addition to the rest of this policy.

6.1 What we collect

  • Activities (Garmin Activity API): for each workout you record or sync to Garmin Connect: activity type and name, start time, duration, distance, elevation gain, speed, heart rate, power, cadence and calories.
  • Connection details: your Garmin user ID and the access tokens Garmin issues to us, used only to receive your data.
  • We do not collect Garmin health or wellness data (such as sleep, steps, stress or daily heart rate).

We only receive data after you authorize Elite Athletes in Garmin Connect, and only for the permissions you grant. Garmin delivers it to our own servers; it is never sent to, or collected by, any other company directly from Garmin.

6.2 How we use it

  • Show your rides in your activity log and match them to the sessions in your plan.
  • Calculate your training load (TSS), weekly volume, longest ride, estimated FTP and race readiness.
  • Generate and adjust your training, strength and nutrition plans, and answer your questions in the in-app AI coach.
  • Send structured workouts from your plan to your Garmin device (Garmin Training API), only when you choose to.

We do not sell Garmin data, use it for advertising, or share it with anyone for their own purposes.

6.3 Processing by third parties, including AI

Garmin data is processed on our behalf by these service providers, under data processing agreements, only to run the features above:

  • Vercel Inc.: hosts our application and servers that receive the data from Garmin.
  • Google Cloud (Firebase / Cloud Firestore): our database, where your activities are stored.
  • OpenAI, accessed through Vercel AI Gateway (third-party AI): to generate your plans and AI coach replies, we send a summary of your recent Garmin activities (for example weekly hours, distance, training load, longest ride, usual training days and estimated FTP) together with your profile and goals. We do not send raw activity files or GPS tracks. Under their API terms, these providers do not use this data to train their AI models.

6.4 Storage, security and retention

  • Garmin data is encrypted in transit and at rest, and access is restricted to the systems that provide the features above.
  • Your activities are kept while your account is active so your plan and history stay accurate.
  • Deleting your account permanently deletes all your Garmin data from our database.

6.5 Your control

  • Disconnect Garmin at any time from your dashboard, or remove Elite Athletes in Garmin Connect (Settings > Connected Apps). We stop receiving data immediately.
  • If you change the permissions you share with us in Garmin Connect, we only process what you still allow.
  • To have your already imported Garmin data deleted without closing your account, email info@eliteathletesco.com.

Garmin is a trademark of Garmin Ltd. or its subsidiaries. Garmin's own handling of your data is governed by the Garmin Privacy Policy.

7. Data Security & International Transfers

We implement enterprise-grade security measures:

  • Encryption (AES-256) for data at rest and in transit
  • Regular security audits and vulnerability assessments
  • Strict access controls and authentication protocols
  • Secure development lifecycle practices
  • Comprehensive backup and disaster recovery systems

Data may be transferred globally to provide our services. We use Standard Contractual Clauses, Privacy Shield frameworks (where applicable), and other lawful transfer mechanisms.

8. Data Retention Schedule

We retain data based on purpose and legal requirements:

  • Active account data: Retained while account is active
  • Training data: Kept while your account is active and permanently deleted when you delete your account
  • Financial records: 7-10 years (jurisdiction-dependent legal requirements)
  • Anonymized data: Indefinitely for research and development
  • Deletion requests: Processed within 30 days, subject to legal holds

9. Your Global Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access and receive copies of your data
  • Correct inaccurate or incomplete information
  • Delete your personal data (right to erasure)
  • Restrict or object to certain processing
  • Data portability in machine-readable format
  • Withdraw consent where processing is consent-based
  • Opt-out of sales/sharing (where applicable)
  • Non-discrimination for exercising rights

To exercise rights, contact: [info@eliteathletesco.com]

10. Special Category Data Processing

As we process health and fitness data (special category under GDPR), we:

  • Implement enhanced security and privacy protections
  • Use data exclusively for providing contracted services
  • Never use sensitive data for marketing without explicit consent
  • Allow granular control over data sharing preferences
  • Conduct Data Protection Impact Assessments regularly

11. Cookies and Tracking Technologies

We use necessary, functional, and analytical cookies/trackers:

  • Essential: Required for platform functionality
  • Functional: Remember preferences and settings
  • Analytical: Improve services (with opt-out options)
  • Third-party: Governed by respective provider policies

Global users receive cookie consent banners tailored to regional requirements.

12. Children's Privacy Protection

Our services are not intended for users under 16. We:

  • Do not knowingly collect data from children
  • Implement age-screening during registration
  • Promptly delete discovered child data
  • Comply with COPPA (US), GDPR-K (EU), and similar regulations

13. Automated Decision-Making & AI Transparency

Our platform uses AI for training optimization. We ensure:

  • Human oversight of significant automated decisions
  • Right to request human intervention
  • Transparency about AI logic and factors considered
  • Regular bias testing and algorithmic fairness audits
  • Option to adjust or override AI recommendations

14. Policy Updates & Notification

We may update this policy to reflect:

  • New service features or functionalities
  • Changes in applicable laws and regulations
  • Evolving security standards and best practices

Material changes will be notified via:

  • Email to registered users
  • Platform notifications for 30 days
  • Updated "Last Updated" date
  • Summary of key changes provided

15. Contact & Compliance Information

Data Controller: Eliteathletesco

Email: info@eliteathletesco.com

Website: https://eliteathletesco.com/

Global Compliance Contacts:

  • EU/UK Representative
  • Data Protection Officer
  • US Privacy Inquiries

16. Dispute Resolution & Jurisdiction

  • EU/UK/EEA: Right to lodge complaints with supervisory authorities
  • California: Right to opt-out of sales/sharing via "Do Not Sell/Share My Personal Information" link
  • Other Regions: Contact us first to resolve issues informally
  • Arbitration: Any unresolved disputes may be settled by binding arbitration per our Terms of Service

Governing Law and Jurisdiction:

This Privacy Policy is governed by and construed in accordance with the laws of Spain, with specific reference to:

  • Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD)
  • Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR)
  • Other applicable Spanish and European Union data protection legislation

For any disputes arising from data protection matters, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the competent supervisory authority in your EU member state."