Privacy Policy

Last updated 8 October 2026

Pre-launch draft, pending legal review

This policy explains what personal data CritixFit collects, why, and the rights you have over it. CritixFit is an AI endurance-coaching service (run, bike, swim, triathlon). CritixFit is run by CRITIXFIT LIMITED, Hong Kong (company no. 81235804), the controller of your data. Privacy requests go to [email protected].

We do not sell your data, we show no ads, and we never use your health data for advertising.

What this policy covers

This policy covers the CritixFit website (critix.fit), the web app (app.critix.fit), our mobile apps, our watch app, and the coach voice calls offered on our website. It does not cover other websites or services that you reach through a link, or the services you connect to CritixFit, which have their own policies.

It explains what we collect, why we collect it, who we share it with, where it is kept and for how long, and what you can do about it. If something here is unclear, write to us at [email protected] and we will explain.

What we collect

  • Account data: email and authentication details.
  • Profile and physiology: sport, experience, and self-reported metrics (for example weight, thresholds, heart-rate zones) you choose to provide.
  • Training data: workouts and wearable data you sync (Strava, Polar, Garmin through a bridge, Apple Health and others).
  • Usage data: pseudonymous product analytics and error diagnostics.

Health data we collect

Some of what we collect is health data. This is every type:

  • Heart rate, and HRV (from your phone camera or your watch)
  • Sleep
  • Weight, height and age
  • Injuries and areas of pain
  • Whether you have a heart condition, are pregnant, or have a history of disordered eating, if you tell us
  • Your check-in answers: soreness, mood and energy
  • Workout data and GPS routes
  • What you say to a coach, in chat and in voice calls

US residents: see our Consumer Health Data Privacy Policy.

How we use it

To create and adapt your training plan, give post-workout feedback, power the AI coaching agents, and keep the service secure. Health-related data is special-category data and is processed only with your explicit consent.

Legal basis for each purpose

  • Your account and your training plan

    Legal basis
    Contract: we need it to give you the service

  • Health data

    Legal basis
    Your explicit consent (GDPR Article 9(2)(a)), which you can withdraw at any time

  • Security and fraud prevention

    Legal basis
    Legitimate interest

  • Product analytics in the EU and UK

    Legal basis
    Your consent

  • Marketing email

    Legal basis
    Your consent

  • Invoices and tax records

    Legal basis
    Legal obligation

AI processing

Our coaches run on Google Cloud's AI service (Vertex AI). Google processes the requests for us in data centres in the EU, the US and Asia, under Google's data processing terms and EU Standard Contractual Clauses. Before we send anything, the training context is pruned to statistics and stripped of personal identifiers such as your name and email. During a live voice call, your voice is sent to Google for as long as the call runs. How our coaches are built to stay safe is explained on the AI safety page.

Voice calls and the microphone

When you start a live voice call, the app uses your microphone. Your voice is streamed to Google's AI service while the call runs, and a live text copy of what is said is used to check the call for safety. We do not store the audio or a transcript of your calls. We keep only how long each call lasted, so that we can apply usage limits.

Camera

To measure HRV with your phone, the app uses the front camera and a red light from the screen. The camera frames are analysed on your phone. They are not stored and not uploaded. Only the resulting numbers (HRV, heart rate and signal quality) are sent to our servers, and only when you save a reading.

Who we share it with

We use vetted sub-processors (hosting, AI, payments, email, analytics) under data-processing agreements. The full list is on our sub-processors page. We do not sell your data.

International transfers and storage

CritixFit is run from Hong Kong. Your account and training data are stored in the EU (Ireland). AI processing happens in the EU, the US and Asia, as described above. Where data goes to a provider or a company outside the EU, the transfer relies on EU Standard Contractual Clauses (and the UK addendum for UK users) or an adequacy decision.

Retention

We keep your data while your account is active. You can delete your account at any time; we then erase or irreversibly anonymise your personal data, subject to limited legal retention. Copies in backups disappear as the backups rotate, within 30 days.

  • Account, profile, workouts, chat messages and calendar notes

    How long we keep it
    While your account exists

  • Sign-in tokens for connected watches and services

    How long we keep it
    While the connection is active. Removed when you disconnect

  • Raw data files from wearables

    How long we keep it
    13 months. A pruned summary stays with your workouts

  • Security records with full IP address and browser name

    How long we keep it
    30 days, then the address is reduced and the browser name is dropped

  • Error reports and analytics events

    How long we keep it
    About 90 days

  • Safety events (for example a pain report or a crisis reply)

    How long we keep it
    2 years, then anonymised

  • Invoices and payment records

    How long we keep it
    As long as tax and accounting law requires

  • Backups

    How long we keep it
    Up to 30 days

How to withdraw consent

Open Settings, then Privacy, and use the consent switches. You can withdraw your health data consent, analytics and cookies separately, at any time. When you withdraw your health data consent, the features that need that data stop working, for example your personal plan, your readiness and coach answers that use your data. Withdrawing does not affect what we did before.

Community and sharing

What you share to the community can be seen by other CritixFit members, according to the setting you pick when you share. A shared workout map shows where you ran, including where you started. Share only what you are happy for others to see. You can block a member or report a reply at any time.

Session replay and analytics

We use PostHog, hosted in the EU, for product analytics and for screen recordings that help us fix problems. On health screens, all text, charts and maps are hidden from the recording. In the EU and UK this runs only if you accept analytics cookies. We honour the Do Not Track signal. See the Cookie Policy.

Google user data

If you connect a Google service (such as Google Health), CritixFit accesses, with your explicit consent, read-only fitness and health data from your Google account: activity and exercise sessions, sleep, and health metrics such as heart rate.

  • Use: this data is used solely to provide your own user-facing features: training history, training-load and readiness analytics, and your personalized coaching. It is never used for advertising.
  • Transfer: we do not sell Google user data and do not transfer it to third parties, except to sub-processors that operate the service on our behalf under data-processing agreements. It is never transferred to data brokers, advertisers, or third-party AI/ML services.
  • Protection: Google user data is encrypted in transit and at rest, stored in the EU, and protected by per-user access controls (row-level security).
  • Retention and deletion: we retain it while your account is active or the connection remains enabled; it is deleted when you disconnect the integration, delete your account, or request deletion. You can also request export or deletion at any time in the app or at [email protected].

CritixFit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data, raw, aggregated, or anonymised, is never used to develop, improve, or train generalized artificial-intelligence or machine-learning models, and is never transferred to third-party AI/ML tools for such purposes. Where AI generates your personalized coaching, your data is processed only for that individual, real-time, user-facing feature.

How we protect your data

  • Everything travels over encrypted connections (HTTPS with TLS), and stored data is encrypted.
  • Database rules limit each record to its owner, so other members cannot read your data.
  • The sign-in details that connect a watch or another service are stored encrypted.
  • Requests are checked against your secure sign-in, and rate limits stop anyone from flooding the service.
  • Our network provider shields the service from attacks, and we track errors and outages as they happen.

No system is perfectly secure. Please use a strong password that you do not use elsewhere, and tell us at once if you think someone else has used your account.

Automated decisions and AI

Your training plan and your coaches' replies are produced automatically by software and AI, from your answers, your data and your activity. We do not make decisions about you that have legal or similarly significant effects. If you want to understand how a plan was built, or you think it is wrong, you can change your answers in the app or write to us, and a person will look at it.

Emails and notifications

We send emails that the service needs, such as your invite, sign-in and account messages, and security notices. We send marketing email only if you agreed, and every such email has an unsubscribe link. Push notifications, such as training reminders, can be turned off in the app's Settings and in your device settings.

Links to other sites

CritixFit links to other sites, such as the services you can connect. We do not control them and are not responsible for their privacy practices. Please read their policies.

For people in Hong Kong: why we collect personal data

We collect personal data to create and run your account, to build and adjust your training plan, to let you talk with your coaches, to keep the service safe, to answer your messages, to improve CritixFit, and to meet our legal duties. Giving us some data is optional, but then some features cannot work. We pass data only to the providers listed on our sub-processors page, some of whom are outside Hong Kong. You can ask to see or correct the personal data we hold about you by writing to [email protected].

If something goes wrong

If a data breach puts your data at risk, we tell you and the regulators as the law requires. In the EU and UK that means telling the data protection authority within 72 hours. For US users we follow the FTC Health Breach Notification Rule, and for users in Japan we report to the Personal Information Protection Commission.

Your rights by region

You can ask to see, correct, download or delete your data, and to withdraw consent. In the app, open Settings to download your data or delete your account. You can also write to [email protected].

  • EU and UK

    Your rights
    Access, rectification, erasure, portability, restriction, objection, and withdrawing consent (GDPR)
    Who you can complain to
    Your local data protection authority (in the UK, the ICO)

  • Israel

    Your rights
    See, correct and delete your data (Protection of Privacy Law)
    Who you can complain to
    The Privacy Protection Authority

  • Hong Kong

    Your rights
    Access and correct your data (Personal Data (Privacy) Ordinance)
    Who you can complain to
    The Office of the Privacy Commissioner for Personal Data (PCPD)

  • Japan

    Your rights
    Disclosure, correction, deletion and stopping use (APPI)
    Who you can complain to
    The Personal Information Protection Commission

  • South Korea

    Your rights
    Access, correction, deletion and suspension (PIPA)
    Who you can complain to
    The Personal Information Protection Commission (PIPC)

  • Singapore

    Your rights
    Access and correction (PDPA)
    Who you can complain to
    The Personal Data Protection Commission (PDPC)

  • US states

    Your rights
    Depending on your state: know, access, correct and delete your data. We do not sell data or use it for targeted advertising
    Who you can complain to
    Your state attorney general. Washington and Nevada also protect consumer health data

EU and UK representative

Our representative in the EU and the UK under GDPR Article 27 will be named on this page once appointed. Until then, write to [email protected].

Your choices at a glance

  • Consent: Settings, then Privacy, to withdraw health data consent, analytics and cookies.
  • Your data: download it, or delete your account, in Settings.
  • Connected services: disconnect a watch or app at any time in Settings.
  • Notifications: turn push notifications off in Settings and on your device.
  • Emails: use the unsubscribe link in any marketing email.
  • Questions or complaints: write to [email protected]. You can also complain to your data protection authority, as the table above shows.

Children

CritixFit is not intended for anyone under 16. If we learn that someone under 16 has an account, we delete it.

Changes and contact

We will notify you of material changes. Questions: [email protected].