VertPilot

Privacy Policy

Effective date: 2026-09-06

Summary

We store what is needed to plan and review your races, keep it in the EU, do not sell it, and delete it when you ask. The data controller is the operator of VertPilot, an independent developer established in Romania; full legal identity on request. Contact: the contact form.

What we collect

  • Account: a technical identifier from Google or Apple when you sign in. Your name, email address and profile picture are shown to you in the app and kept only on your phone; the server does not store them. We never see your Google or Apple password.
  • Athlete profile: what you enter in onboarding and settings, such as weight, experience, carbohydrate tolerance, known gut issues and preferred fueling products.
  • Races and plans: the races you add (name, date, distance, elevation, aid stations, cutoffs), the fueling plans generated for them, and any edits you make.
  • Race logs: what you record about a race afterwards, including fueling consumed and gut issues.
  • Watch data, only after you link your watch in the app. Always: start time, duration, the intakes the data field recorded (planned, taken, skipped, logged) and its glycogen estimate every five minutes. Only if you switch them on under Settings > What the watch shares: effort (distance, calories, average and maximum heart rate, ascent); effort over time (heart rate, pace and altitude every five minutes); coarse route (position every five minutes, rounded to about 100 m, never a precise track). Each switch explains what it is for; the server discards anything you have not switched on, and every run shows what was shared.
  • Research consent, separate switch, off by default: your runs may be included in anonymised aggregate statistics used to improve the fueling rules. Never shown as yours, never with your name, account or route. You can withdraw at any time; past aggregates cannot be unwound but contain nothing that identifies you.
  • Usage and diagnostics: app events, screens used, device model, OS version, app version, crash reports and approximate country derived from IP address.
  • Preferences: legal acceptance timestamps and your notification setting.

What we use it for

  • To run your account and keep your data in sync across your devices (contract).
  • To build fueling plans and race strategy from your profile, races and logs (contract).
  • To generate AI guidance for subscribers, using your profile, race, plan and logs as input (contract).
  • To send you the fueling reminders you set up, if you enable notifications (consent).
  • To understand how the app is used and fix crashes (legitimate interest in improving and securing the service).
  • To meet legal obligations such as tax records for purchases, handled by our payment provider.

Where it is processed and who helps us

  • Amazon Web Services, region Frankfurt, Germany: sign-in (Amazon Cognito), API, database and AI inference (Amazon Bedrock). AWS does not use content sent to Bedrock to train models.
  • Google and Apple: identity providers for sign-in. They receive that you signed in to VertPilot; we receive your name, email and picture.
  • Google Firebase (Analytics and Crashlytics) and Google Analytics: usage statistics and crash reports. Processing may occur in the United States under the EU-US Data Privacy Framework and standard contractual clauses.
  • Lemon Squeezy, LLC (United States): payments for subscriptions bought on vertpilot.com. Lemon Squeezy is the merchant of record and processes your billing details under its own privacy policy. We receive your email and subscription status, never card numbers.
  • Watch platform: the data field runs on your watch and its manufacturer's phone app; that manufacturer processes your activity data under its own policy.

Retention and deletion

We keep your data while your account exists. Sign-in sessions last 30 days and renew while you use the app. Crash and analytics data is retained according to Firebase defaults, currently up to 14 months for analytics. In Settings you can download everything we hold about you as a file, delete any single run, or delete your account: that removes your profile, races, plans, runs, quick plans and any research copies immediately, except records our payment provider must keep for tax law. Weather for a run (temperature and rain at the start) is looked up once from your coarse position, if you share it, through Open-Meteo, which receives a position rounded to about 100 m and no account information.

Your rights

  • Access, correct, export or delete your personal data.
  • Object to or restrict processing based on legitimate interest.
  • Withdraw consent for notifications at any time in Settings or in your device settings.
  • Complain to a supervisory authority. In Romania this is ANSPDCP (dataprotection.ro). You may also complain to the authority of your own EU country.

To exercise these rights, use the contact form and pick "My data", writing from the address linked to your account so we can match it. You can also export and delete everything yourself in the app under Settings.

Security

Data is encrypted in transit and at rest. Sign-in tokens are stored in the secure storage of your device. Access to production systems is limited to the operator. No system is perfectly secure; if a breach affects you we will notify you as the law requires.

Children

VertPilot is not intended for anyone under 16 and we do not knowingly collect their data.

Changes

We will update this policy when our processing changes, for example when a new feature adds a data source. Material changes are announced in the app and require acceptance before you continue.