Privacy Policy

1. Introduction

RowCraft ("the Service") is operated by Kerry Jones. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. We are committed to protecting your privacy and handling your data transparently.

2. Data We Collect

We collect only the data necessary to provide the Service:

• Account information: Email address and password (password is hashed and stored securely by our authentication provider; we never see or store your plain-text password).
• Profile information: Display name (optional) and fitness settings such as your Functional Threshold Power (FTP) in watts and maximum heart rate.
• Workout data: Workouts you create, training plans, and workout results including distance, time, split times, stroke rate, heart rate, and watts.
• Device data: When you connect a Concept2 PM5 via Bluetooth Low Energy (BLE), we receive real-time performance data during your session. This data is processed to display live metrics and is stored as part of your workout results.

We do not collect location data, device identifiers, browsing history, or any data beyond what is listed above.

3. How We Use Your Data

Your data is used solely to provide and improve the Service:

• Authenticating your account and maintaining your session
• Displaying your workout history and progress
• Personalizing workout targets based on your FTP and heart rate settings
• Enabling you to share public workouts with other users

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. We do not use your data for profiling or automated decision-making.

4. Cookies and Tracking

The Service uses only essential cookies required for authentication and session management. We do not use analytics cookies, advertising trackers, or any third-party tracking services.

5. Data Storage and Security

Your data is stored on cloud infrastructure provided by Supabase. Data is encrypted in transit (TLS) and at rest. We implement reasonable security measures to protect your data, but no method of transmission or storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data and workout history will be permanently deleted. Public workouts you created may be retained in anonymized form.

7. Your Rights

You have the right to:

• Access your data: Request a summary of the personal data we hold about you by contacting us.
• Correct your data: Update your profile information at any time through the Service.
• Delete your data: Request deletion of your account and all associated data by contacting us.
• Export your data: Request a copy of your workout data by contacting us.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that data promptly. If you believe a child under 13 has provided us with personal information, please contact us.

9. Third-Party Services

We may in the future offer integration with third-party services such as the Concept2 Logbook for syncing workout results. If and when such integrations are available, any data you choose to sync will be transmitted directly to the third party and will be subject to their privacy policy. We will update this section when third-party integrations become available.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or your data, please contact us at kerry@kerryjones.net.