Privacy policy

Who we are

athlate is a training log app made by Lyskamm Invest AS, a company registered in Norway. This policy covers the athlate app, the athlate.com website, and our TestFlight beta.

What we collect

Account details: email address, display name, and authentication identifiers.

Training data: your workout logs, programs, exercises, schedules, and cardio entries.

Waitlist emails, if you sign up before launch.

Language preference (English or Norwegian).

Support communications: your name, email, and message, if you contact us.

Basic technical metadata, such as device and request information, needed to run the service and keep it secure.

Usage analytics: events such as a session being completed, a program being created, or an export being used. See Usage analytics below, including how to turn it off.

How we use it

• To run the app: your training log, programs, and account sync.
• To authenticate you and attach your data to your account.
• To notify the waitlist when athlate launches.
• To handle support requests and data requests.
• To protect the service from spam and abuse.

Usage analytics

We measure how the app is used, with Google Analytics for Firebase and PostHog. We record events such as a session being completed, a program being created, onboarding being finished, cardio being logged, an export being used, and a service being connected. Events are tied to your user id, not to your name. The measurement says how long a session was and what kind of program you made, not what you lifted.

The numbers are exported to Google BigQuery, where we look at them in aggregate to understand use over time.

You can turn usage analytics off. Under Account in the app there is a switch called “Share usage statistics”. It is on by default, and turning it off stops both Google Analytics for Firebase and PostHog immediately. You do not need to restart the app, and the choice is remembered until you change it. The switch does not affect crash reporting or App Check, which we rely on to run the service securely.

This is the processing of ours that rests on legitimate interest, and the switch is how you object to it. You do not need to write to us.

We do not show ads in athlate, and we do not track you across other companies’ apps or websites.

How long we keep it

• Active accounts: kept while your account is active, deleted when you remove it.
• Waitlist emails: kept until launch notifications are done, or until you ask us to delete them.
• Support requests: kept for as long as needed to handle the request, plus up to 24 months for our records.
• Encrypted backups: removed within 90 days.
• Exports you request: sent to your own cloud storage (iCloud, Google Drive, or Dropbox). We don't keep a copy.

Who we share it with

We do not sell your personal data. We use infrastructure providers for hosting, authentication, and our database, and they process your data under our instructions. If you turn on cloud backup, that backup goes directly from your device to your own third-party account.

Your rights, including deletion

You can delete your account and training data at any time. See how to delete your account for the exact steps. Deletion requests are handled without undue delay, and within 30 days.

You can also ask us what data we hold about you, or ask us to correct it, by emailing us.

You can object to processing based on legitimate interest. For usage analytics, the switch described above does exactly that, and takes effect at once.

Contact

Questions about this policy: support@athlate.com.

Data controller: Lyskamm Invest AS.