Privacy Policy

1. Introduction

This Privacy Policy explains how Polar Industries ("we", "us", "our") collects, uses, stores, and protects your personal information when you use the Watta iOS app and website (collectively, the "Service").

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Polar Industries is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at [email protected].

3. What Data We Collect

We may collect the following types of personal data:

• Account information: name, email address, profile photo, and authentication provider details.
• Health and fitness data: height, weight, date of birth, gender, maximum heart rate, resting heart rate, and workout data including distance, time, splits, stroke rate, watts, and calories.
• Photos: images of erg screens that you upload for OCR processing.
• Device and usage data: device type, operating system, app version, IP address, and usage analytics.
• Communications: emails or support messages you send us.

4. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve the Watta Service.
• Process workout photos and extract training data using AI OCR.
• Calculate your Effort Score and heart rate zone analysis.
• Enable social features such as clubs, squads, and follower interactions.
• Sync your workouts to connected third-party services like Strava.
• Send service-related emails and, with your consent, marketing communications.
• Analyse app usage to improve performance and user experience.

5. Legal Basis for Processing

We process your data on the following legal bases:

• Contract: processing necessary to provide the Service you requested.
• Consent: for marketing communications and usage analytics.
• Legitimate interests: for app improvement, fraud prevention, and security.
• Legal obligation: where required by law.

6. Third-Party Services

We use trusted third-party services to operate the Service:

• Firebase: authentication and app infrastructure.
• PostHog: product analytics (only with your analytics consent).
• Google Analytics: website usage analytics (only with your consent).
• Sentry: error tracking and app stability.
• Railway: cloud hosting for our backend.
• Strava: workout sync (only when you connect your account).
• Notion: help documentation and internal knowledge base.

7. Data Sharing

We do not sell your personal data. We only share data with third parties when necessary to provide the Service, with your consent, or when required by law.

Social features allow you to share workouts with other users. You control the privacy setting of each workout (public or private) and can manage your profile visibility in settings.

8. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service. Workout data is retained until you delete it or your account. When you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data ("right to be forgotten").
• Restrict or object to certain processing.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise your rights, contact us at [email protected].

10. Cookies and Tracking

Our website uses cookies and similar technologies. Essential cookies are required for the site to function. Analytics cookies (Google Analytics) are only set after you provide consent. You can manage or withdraw your consent at any time using the cookie banner.

11. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, secure cloud infrastructure, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Watta is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The latest version will always be available on this page.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].