Privacy by design

Your sports data remains yours.

This is the current MVP privacy explanation and not yet the final legal privacy notice. A formal legal review is required before broad commercial launch.

What we process

Account data and profile information you provide yourself, such as age category, HYROX division, experience and optional running times. If you save a race, we also store the race name, date, your splits, optional station targets and the relevant analysis version.

If you separately opt in to product analytics, Athvaro also stores a deliberately small set of signed-in product-use events such as dashboard visits, completed calculations, saved races and clicks from the app into Discover, Gear or Events. Those events contain an event name, timestamp, signed-in user reference, short-lived browser-session identifier and a short source label. They do not contain your running times, race splits, free-text input or medical information.

Why we process it

Profile and race data are used to provide your account, Athlete Profile and personal performance analyses. Optional minimal product-use events are used to measure whether athletes activate, use multiple platform areas and return to Athvaro, so the MVP can be evaluated on real usage rather than vanity metrics.

We do not use your athlete data for public content, advertising profiles or model improvement without a separate valid basis or consent where required. Athvaro does not sell athlete data to advertisers.

Our principles

Saved races

Your saved races are available only inside your account. Active application records can be removed through the product flows we provide. Database backups may follow a separate retention cycle; immediate removal from every backup is not promised.

Your choices

You can change the optional product-analytics preference from your Athlete Profile. Self-service export, correction, full service-consent withdrawal and account-deletion workflows must be completed and legally reviewed before external beta. Athvaro will publish a verified privacy contact address before inviting external users.