Privacy Policy

1. Introduction

Welcome to LoadLab ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently in accordance with the European General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the LoadLab application and website (loadlab.cc).

2. Data Controller

The entity responsible for processing your personal data (the Data Controller) is:

3. The Data We Collect

To provide our AI coaching services, we collect the following categories of data:

• User Profile Data: Name, date of birth, height, weight, scheduled events, available training time, and activity preferences.
• Workout Data: Workout duration, heart rate, location (GPS), speed, power (watts), user-provided annotations, and Rating of Perceived Exertion (RPE).
• Health and Biometric Data (Special Category Data): Sleep duration, sleep score, resting heart rate, heart rate variability (HRV), daily steps, general activity levels, and weight fluctuations.

4. How We Collect Your Data

We collect data in two ways:

• Directly from you: When you create an account, fill out your profile, or manually log details in the app.
• Via Third-Party Integrations: When you explicitly authorize LoadLab to connect with external platforms like Strava or Intervals.icu, we pull your workout and health metrics via their APIs.

5. How We Use Your Data and Our Legal Basis

Under the GDPR, we must have a valid legal basis to process your data.

• To Provide the Service (Contractual Necessity): We use your User Profile and Workout Data to generate training plans, calculate training load, and provide our core services.
• Processing Health Data (Explicit Consent): Because health and biometric data (like heart rate and sleep metrics) are considered "Special Category Data" under GDPR Article 9, we only process this data with your explicit, affirmative consent. You grant this consent when you connect your health data sources to LoadLab.
• Payment Processing (Contractual Necessity & Legal Obligation): To manage subscriptions, issue refunds, and maintain legally required financial records.

6. AI Processing and Third-Party Sharing

We do not sell your personal data. We only share data with trusted third-party service providers necessary to operate LoadLab:

• Google Gemini Enterprise (AI Processing): We use Google's enterprise-grade Gemini API to analyze your data and generate coaching advice. Your data is entirely private. Because we use the enterprise version of this API, Google does not use your personal data, workout history, or health metrics to train their public AI models.
• Database and Hosting Infrastructure: Your data is securely stored in a Neon database instance hosted on Amazon Web Services (AWS) servers located in Frankfurt, Germany (within the EU/EEA).
• Payment Processors: Payments are handled securely by third-party providers (e.g., Stripe). LoadLab does not store your credit card numbers.
• Data Sources (Strava, Intervals.icu etc.): Data exchange with these platforms only occurs based on your explicit authorization.

7. Data Storage and Retention

We only keep your data for as long as you have an active account with LoadLab.

• Account Deletion: If you cancel your subscription and request account deletion, all of your personal, health, and workout data is permanently erased from our active databases within 4 weeks. Once this 4-week period has passed, your data cannot be restored.

8. Your Rights Under the GDPR

As a user residing in the EU/EEA, you have specific rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your data at any time by deleting your account or contacting support.
• Right to Withdraw Consent: You can disconnect third-party integrations (like Strava) or withdraw your consent for us to process your health data at any time. (Note: Withdrawing consent may prevent us from providing you with coaching recommendations).
• Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at support@loadlab.cc. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your rights have been violated.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by placing a prominent notice within the LoadLab application prior to the changes taking effect.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at: