Skip to content

Privacy Policy

Last updated: April 23, 2026

1. Introduction

RowCraft ("the Service") is operated by Kerry Jones. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. We are committed to protecting your privacy and handling your data transparently.

2. Data We Collect

We collect only the data necessary to provide the Service:

  • Account information: Email address and password (password is hashed and stored securely by our authentication provider; we never see or store your plain-text password).
  • Profile information: Display name (optional) and fitness settings such as your Functional Threshold Power (FTP) in watts and maximum heart rate.
  • Workout data: Workouts you create, training plans, and workout results including distance, time, split times, stroke rate, heart rate, and watts.
  • Device data: When you connect a Concept2 PM5 via Bluetooth Low Energy (BLE), we receive real-time performance data during your session. This data is processed to display live metrics and is stored as part of your workout results.

We do not collect location data, device identifiers, browsing history, or any data beyond what is listed above.

3. How We Use Your Data

Your data is used solely to provide and improve the Service:

  • Authenticating your account and maintaining your session
  • Displaying your workout history and progress
  • Personalizing workout targets based on your FTP and heart rate settings
  • Enabling you to share public workouts with other users

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. We do not use your data for profiling or automated decision-making.

4. Cookies and Tracking

The Service uses essential cookies required for authentication and session management. We also use PostHog, a product analytics service, to understand how the Service is used. PostHog collects anonymous usage data such as pages visited, session duration, and general device type. This data helps us improve the Service and is not used for advertising or sold to third parties.

PostHog may set cookies to distinguish unique visitors and sessions. No personally identifiable information (such as your email address or workout data) is sent to PostHog.

5. Data Storage and Security

Your data is stored on cloud infrastructure provided by Supabase. Data is encrypted in transit (TLS) and at rest. We implement reasonable security measures to protect your data, but no method of transmission or storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data and workout history will be permanently deleted. Public workouts you created may be retained in anonymized form.

7. Your Rights

You have the right to:

  • Access your data: Request a summary of the personal data we hold about you by contacting us.
  • Correct your data: Update your profile information at any time through the Service.
  • Delete your data: Delete your account and all associated data at any time, or contact us at support@rowcraft.app.
  • Export your data: Request a copy of your workout data by contacting us.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that data promptly. If you believe a child under 13 has provided us with personal information, please contact us.

9. Third-Party Services

The Service offers optional integration with the Concept2 Logbook for syncing workout results. When you link your Concept2 account and sync a workout, your workout data (distance, time, split times, stroke rate) is transmitted to Concept2 and is subject to their privacy policy. You can disconnect your Concept2 account at any time from your profile settings.

We use Sentry for crash and error reporting. When the app encounters an error, Sentry may receive diagnostic data such as the error message, stack trace, and device type. This data is used solely to identify and fix bugs. Sentry does not receive your workout data, email address, or any personally identifiable information.

We use PostHog for product analytics. PostHog receives anonymous usage data such as pages visited and session duration to help us understand how the Service is used and where to make improvements. PostHog does not receive your email address, workout data, or any personally identifiable information. For more details, see PostHog's privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or your data, please contact us at support@rowcraft.app.