Who is responsible
Fitness Insights is operated by Werk Software. For any question about your data, or to exercise any of the rights below, write to jure.werk@werk.software. We answer data requests within 30 days.
What we treat as sensitive
Training data is personal. A route reveals where you live and when you are out; a heart rate is health-related information. Everything here is handled on that basis: your data is private by default, there are no public activity pages, and no route or activity is shared with anyone unless you ask.
What we store
| Account | Name, email address, password hash, and — if you sign in with Google — the identifier Google returns. |
|---|---|
| Profile you enter | Birth year, height, weight, maximum and resting heart rate, cycling threshold power, preferred sports, experience level and training goal. Fields are optional unless a calculation you asked for needs them, and each one explains why it is wanted. |
| Activities | Time, duration, distance, elevation, GPS track, heart rate, pace, cadence, power, temperature and device information, plus the original file when you upload one. |
| Analysis | Calculated metrics, training zones, insights, reports and training plans derived from the above, each recorded with the algorithm version that produced it. |
| Connections | If you connect a provider such as Garmin or Polar: the access and refresh tokens, granted scopes, your provider account identifier, and your recorded consent with its version and time. |
| Preferences | Units, timezone, language, dashboard layout, report schedule, and which analyses you switched off. |
We never ask for, receive or store your password for any provider. Authorisation happens on the provider's own website.
Why we are allowed to hold it
- Your explicit consent for health and location data, and for connecting a provider account. Consent is recorded with the policy version you accepted and can be withdrawn at any time.
- Performing our agreement with you for running your account and producing the analysis you asked for.
Where it is held
On a private server in Frankfurt, Germany, operated by DigitalOcean. Traffic is encrypted in transit. Provider tokens and the most sensitive stored fields are encrypted at rest on top of that, so reading the database alone does not reveal them. Production data is not copied to development machines.
Who else sees it
| DigitalOcean | Hosting and backups, Frankfurt. Holds the data at rest as our infrastructure provider. |
|---|---|
| Open-Meteo | Historical weather. Receives a coordinate rounded to roughly one kilometre and the hour an activity started. No name, no account identifier, no route and no health value is sent. |
| OpenFreeMap | Map tiles, built from OpenStreetMap data, and only on a page you open that draws a map — an activity with a recorded route, or your training map. Your browser asks their servers for the map squares covering that area, which tells them roughly where you were and that somebody looked. The route itself is never uploaded — it is drawn in your browser over the tiles. No name, no account identifier and no health value is sent. Nothing is requested for an activity recorded without GPS, or for any page you do not open. |
| Your provider | Only if you connect one, and only to fetch the activities you authorised. |
| Us | To run the service and to answer you when something is wrong. That includes being able to open your account and see the application as you see it, because “my dashboard looks wrong” cannot be diagnosed from the outside. Such a session cannot change anything, and both opening and closing it are written to an audit record that names the operator, the account and the time. Reading your training is treated as an action to be accounted for, not a convenience. |
| Google Analytics | Only if you agreed when asked, and nothing is loaded or sent before you do. It receives the pages you open, with activity identifiers and query strings removed first — so “/activities/:id” rather than which activity — along with your approximate location from your address, your browser and where you arrived from. It sets cookies in your browser. No name, no account identifier, no training figure and no route is ever sent. You can change your mind at any time; see Your rights below. |
No data is sent to any language-model service. Every explanation in the application is produced by our own deterministic code from your own numbers. If that ever changes, this policy changes first, the feature will be optional, and only pseudonymised minimum data would ever be sent.
We do not sell your data, and we do not use it for advertising or profiling.
How long we keep it
Your activities and analysis stay for as long as your account exists, because comparing this year against last year is the point of the product. Deleting your account removes your account, your activities, their samples, the analysis derived from them, and any copy you had prepared for download.
That erasure includes the original files you uploaded, which are deleted from storage rather than merely unlinked from your account. We keep a dated record that an erasure happened, identified by a one-way hash of your address rather than the address itself.
The server is backed up nightly and those backups are kept for 14 days before being deleted automatically. They are held on the same server and are not copied elsewhere. An erasure removes your data from the running application straight away; the backups that still contain it age out within those 14 days. If you need that confirmed, email jure.werk@werk.software.
Your rights
- Delete your account yourself, at any time, from your profile page.
- Disconnect a provider at any time. Imports stop immediately; data already imported stays until you delete it.
- Exclude an activity from your trends without deleting it.
- Withdraw analytics consent whenever you like, and as easily as you gave it: from your profile page, under Display. Withdrawing stops anything further being sent immediately.
- Download a copy of everything from your profile page. The archive holds your account, every activity with its full recordings, everything we calculated from them, your training plans, and the original files as you uploaded them. It is kept for seven days and then deleted.
- Erase your account and all of it from your profile page, including the original uploads. Ask for a correction, or for anything else, by email and we will answer within 30 days.
- Withdraw consent for provider connections or for health-data processing, which means closing your account.
- Complain to your national data protection authority if you believe we have handled your data badly.
Provider deletion requests
Where a connected provider sends a deauthorisation or data-deletion event for your account, we stop importing immediately and delete the data that event covers.
Children
The application is not intended for anyone under 16, and we do not knowingly hold data about children.
Not a medical service
Fitness Insights produces educational estimates about training. It does not diagnose illness or injury, does not tell you whether you are medically fit to train, and is not a substitute for professional advice.
Changes
This policy is versioned. When it changes materially we raise the version and ask you to accept the new one; the version you accepted, and when, is recorded against your account.