Your training data needs clear boundaries.

Closed-beta notice · updated 4 September 2026

Short version

• Pitwall does not sell personal or training data.
• The public site does not use advertising or behavioural trackers.
• A temporary Garmin connector is available only to approved athletes with explicit authorization. Official API access and workout publication remain pending.
• AI may assist with target proposals and explanations, but the athlete remains in control.
• Account export and deletion controls are live for closed-beta users.

1. Controller and contact

De Bonte Koning B.V., registered in the Netherlands, is the controller for Pitwall. Privacy and support questions can be sent to support@pit-wall.eu. The registered office and Dutch Chamber of Commerce number will be added to this public notice before closed-beta access expands.

2. Data Pitwall processes

• Account: private profile, verified email address, agreement records, session records, and account-recovery information.
• Planning: goals, target sessions, sports, dates, duration, distance, intensity, notes, and plan changes.
• Completed training: authorized activity type, timing, duration, distance, heart rate, power, calories, elevation, source identifiers, and other fields included in the approved integration.
• Connections: provider user identifier, granted permissions, connection state, import status, and encrypted access credentials.
• Safety and reliability: limited request, error, device, import, and security-event information used to prevent abuse and fix problems.

3. Purposes and legal bases

Account and planning data is used to provide the service requested by the user. Security information is used to protect Pitwall, its users, and the service. Connected training data can reveal information about health and physical performance, so Pitwall obtains separate, explicit consent before importing it. Consent can be withdrawn by disconnecting the provider, without affecting earlier lawful processing.

4. Garmin connection

Garmin is the first connected activity source. In the controlled beta, an explicitly experimental connector uses credentials supplied by the athlete only to establish a Garmin session. The password and MFA code are not stored. This connector uses services outside Garmin's public developer API and may stop working. Separately, official Garmin Connect Activity API and Training API access remains pending. Workout publication is disabled in production.

Disconnecting Garmin removes the connection credentials and ends future imports. The athlete can separately choose whether previously imported activities should remain in Pitwall or be deleted.

5. AI-assisted features

Pitwall may use language models to propose training targets or explain differences between a target and completed activity. Proposals remain inactive until the athlete accepts them. Core measurements and matching evidence remain available without relying on generated text.

Before any personal training data is sent to an external AI processor, Pitwall will identify that processor, explain the purpose, minimize the data shared, document processing locations and safeguards, and request any consent that is required. Connected Garmin data will not be used to train a general-purpose model.

6. Retention and deletion

Account, planning, and imported activity data is kept while the account is active or until the user deletes it. Short-lived sign-in, recovery, and connection attempts expire automatically. Exact periods for security logs, import events, inactive accounts, deleted data, and backups will be published and enforced before closed-beta access expands. Deleted data may remain in isolated backups only until the normal backup cycle removes it.

7. Recipients and international transfers

Pitwall uses infrastructure, database, email-delivery, approved training provider, and any disclosed AI services only where needed to operate the product. The final processor list, processing countries, and safeguards for transfers outside the European Economic Area will be published before closed-beta access expands. Training data is not shared with advertisers.

8. Cookies and device storage

The app uses strictly necessary cookies to keep a device signed in and block unwanted cross-site requests. Authentication and connected-service credentials are not stored in browser storage. The public site does not use advertising cookies or cross-site tracking.

9. Security

Pitwall uses short-lived sign-in sessions, recovery controls, encrypted provider credentials, restricted database access, and separate account boundaries. No internet service can promise absolute security, so these safeguards are tested and reviewed as the product changes.

10. Progress calculations and decisions

Pitwall calculates progress, consistency, match confidence, and suggested next steps from saved targets and activities. These are training-support features, not medical advice. Pitwall does not make decisions with legal or similarly significant effects. Athletes can review and correct matches, reject target proposals, and ignore generated explanations.

11. Your rights

Depending on applicable law, users may ask for access, correction, deletion, restriction, or portability of their data, object to certain processing, withdraw consent, and complain to the Dutch Data Protection Authority or another competent authority. Requests can be sent to support@pit-wall.eu.

12. Children

Pitwall is not directed at children. Closed-beta participation is limited to adults unless a separate age and guardian process is designed.

13. Changes

Material changes will be dated and shown to users where appropriate. This version applies to the controlled closed beta; material changes can require renewed acceptance.