Privacy and your training data

Short version

• Pitwall does not sell personal or training data and the public website does not use advertising trackers.
• Connect Garmin to import activity data from your linked profile. You can also upload FIT activity files from other apps or devices.
• Body Check and external Buddy AI each require a separate, optional choice. You can withdraw either choice in Settings.
• You control your plan and can export your account data or delete your account.

1. Controller and contact

Pitwall is provided and operated by De Bonte Koning B.V., registered in the Netherlands under Chamber of Commerce number 89960017. De Bonte Koning B.V. is the controller for Pitwall. Contact support@pit-wall.eu for product or account questions and privacy@pit-wall.eu for privacy requests.

2. Data Pitwall processes

• Account: private profile, verified email, recorded agreements and optional consents, sessions and account recovery.
• Training: goals, planned sessions, sports, dates, duration, distance, intensity, notes and completed activities. Activity files can contain heart rate, power, calories, elevation, route points and other recorded measurements.
• Connections: provider identifier, your import choices, connection and import status, and encrypted session credentials.
• Optional features: Body Check observations and history; Buddy conversations, explicitly saved preferences and proposal decisions; private images; device notification subscriptions; referral attribution; and feedback ratings and explanations.
• Security and reliability: limited security events, errors and import or job status needed to protect accounts and operate the service.

Current optional features

Body Check stores athlete-reported areas, sensations, intensity, timing and history. Buddy is available with Plus and Pro and can store conversations, explicitly saved memories and proposal decisions. Local Buddy does not need external AI consent or tokens; external AI requires separate consent and available allowance. Optional photo import stores private activity-photo copies. Device notifications use subscription details and your reminder time, timezone and language. Invitations can record referral or campaign attribution.

Body Check and external Buddy AI have separate optional consents and withdrawal controls. The retention periods and processors below apply to these features.

Feedback during the beta

Sending feedback is optional. Pitwall records the page you rate, your choice of good, neutral or bad, any explanation you choose to add, the app version when supplied, and the submission time. The feedback is linked to your Pitwall account. Page identifiers do not include a full URL, query parameters or the contents of your training page. No screenshot or training data is automatically added to a feedback submission.

De Bonte Koning B.V. uses this feedback to understand which pages work well, investigate problems and improve Pitwall during the beta. Only authorised Pitwall administrators can view the reports, scores per page and individual explanations. Feedback is included in your account export and removed when your account is deleted, subject to the backup limits below. Avoid putting passwords, health details or someone else's personal information in your explanation. Privacy questions or requests can be sent to privacy@pit-wall.eu.

3. Purposes and legal bases

Account and planning data supports the service you request. Limited security information protects the service and its users. Connected training data and Body Check observations can reveal health information. Pitwall asks for separate explicit consent before importing connected activity data or processing Body Check observations. External Buddy AI has a separate opt-in. These choices are optional and withdrawing them is as easy as granting them.

Disconnect a provider to stop new imports. Withdraw Body Check or external AI consent in Settings to stop that processing and remove the associated feature data. Earlier lawful processing is unaffected. Planning remains available without external AI consent. With Plus or Pro, local Buddy assistance remains available without external AI consent or tokens.

4. Garmin and FIT import

The Garmin connection imports activity data from your linked Garmin profile into Pitwall: completed activities, their recorded measurements and routes, and activity-photo copies only when you select that option. It does not import sleep, daily wellness or unrelated profile information, and does not publish workouts or change your Garmin profile. Your password and MFA code are used to establish the connection and are not stored. Session credentials are encrypted on the server.

Disconnecting removes the connection credentials and stops future imports. Activities already imported remain when you disconnect. You can delete them individually in Pitwall, or erase all account data using account deletion. Manual FIT upload is independent of the Garmin connection: FIT activity files exported by other apps and devices are also supported. The measurements available depend on the file and source.

5. Body Check and Buddy

Body Check stores the areas, sensations, intensity, timing and history you report after your separate consent. It supports training decisions and does not provide medical diagnosis. Buddy is included with Plus and Pro and unavailable on Free. Local Buddy can use local rules and your saved context to propose goals and explain progress without external AI consent or tokens. A proposal changes your plan only after you accept it.

For Plus and Pro, with your separate external AI consent and available AI allowance, Pitwall uses OpenAI to process your Buddy message and limited training context for a response. Stored Body Check observations, raw FIT files, photos and GPS routes are not automatically sent to OpenAI. Avoid including sensitive information you do not want to share in a Buddy message. OpenAI API data is not used to train general models by default. Pitwall disables response storage; standard provider abuse-monitoring logs may nevertheless remain for up to 30 days, subject to legal or safety exceptions. Pitwall does not claim zero retention or exclusively EU AI processing.

6. Retention and deletion

• Account, training history and your images: while you use the account. After 24 months without use, we send a warning and allow 30 days to return before deletion. Unclaimed device profiles are removed after 30 days without use.
• Original activity import files: up to 90 days after successful import; failed imports up to 7 days. Normalized activity history remains available while the account is used.
• Feedback: 12 months after submission. Support correspondence: 12 months after the case is closed.
• Buddy conversations: 90 days. Minimal monthly AI usage counters remain until one month after the end of that month, including after AI consent withdrawal; they contain no conversation or health content and are erased with the account. Explicitly saved preferences: 12 months after their last change. Resolved Body Check history: 24 months. Withdrawing the relevant consent removes the associated feature data sooner.
• Minimal security events: 180 days. Technical, import and completed-job records: 30 days. Expired sign-in and MFA challenges: at most 24 hours after expiry. Expired or revoked sessions: 30 days after expiry or revocation.
• Account deletion immediately removes data from the active database and invalidates access. File deletion is retried automatically, with a 24-hour operational target. Isolated recovery copies are kept for at most 30 days; deletion is reapplied before a restored copy can be used.

7. Processors and international transfers

Railway hosts Pitwall, its database and private storage. The private media bucket is in Amsterdam. Railway is a US provider and its data-processing agreement includes safeguards for international transfers, including standard contractual clauses. Lettermint delivers account and service emails from EU infrastructure; email delivery records normally remain for 28 days. Microsoft 365 handles incoming support and privacy mail. OpenAI is the external Buddy AI processor when you opt in; processing may take place outside the EEA under its contractual safeguards.

De Bonte Koning B.V. uses the applicable data-processing agreements with these providers. Their necessary operational retention can differ from Pitwall's application retention, including email analytics or legally required records. Garmin remains the separate provider of your linked account. Training data is not shared with advertisers.

8. Cookies and device storage

The app uses necessary cookies for sessions and protection against unwanted cross-site requests. Authentication and connected-service credentials are not kept in browser storage. The public site has no advertising cookies or cross-site tracking. A functional language cookie remembers your website language for up to one year.

9. Security

Pitwall uses short-lived sessions, recovery controls, encrypted provider credentials, restricted database roles, private file access and account isolation. Backups and service monitoring support recovery. These measures are tested and reviewed; no internet service can promise absolute security.

10. Progress calculations and decisions

Pitwall calculates progress and proposes next steps from your goals and activities. You can correct matches, reject proposals and ignore generated explanations. Pitwall does not make decisions with legal or similarly significant effects and does not provide medical advice.

11. Your rights

You can request access, correction, deletion, restriction or portability, object where applicable, or withdraw consent. Export and account deletion are available in the app. Send other requests to privacy@pit-wall.eu. You may complain to the Dutch Data Protection Authority or another competent authority.

12. Adults

This invitation beta is intended for adults. An account must not be created for a child without a separately arranged lawful process.

13. Changes

This notice is version 2026-10-13.1. Material changes are dated and shown to users and can require renewed acceptance or a new optional consent.