Privacy Statement

At TextFit, we care about your privacy and are transparent about the data we store and how we use it.

Data controller

The controller for the data collected by TextFit is , the app's publisher (see the legal notice). For any question about your data or to exercise your rights, you can contact him at .

Purposes of processing

Your data is used to: provide the TextFit service (importing, displaying and tracking your sport activities); generate the AI coach's advice and responses; keep the service secure and running smoothly; and, if you consent, measure app usage to improve it (analytics).

Legal basis

Processing your data to provide the service (account, activities, AI coach) is based on the performance of the contract you enter into with TextFit when you create an account. Processing for analytics purposes (PostHog) is based on your consent, collected via the banner shown on your first visit, which you can withdraw at any time.

Categories of data processed

We process: your identity (username, first name, last name); your athlete profile information (sex, date of birth, training location); your sport activity data, including physiological metrics such as heart rate; your login credentials for third-party providers (Strava, Garmin); and the history of your conversations with the AI coach. Some of this data (heart rate and other fitness data) may qualify as health data under the GDPR; it is only used to provide the coaching service and is never shared for commercial purposes.

Hosting & Data Location

All data related to TextFit is hosted on servers provided by OVH, located in France.

Recipients and processors

Your data is hosted by OVH (France). If you consent to analytics, usage data is sent to PostHog, whose instance is hosted in the European Union. Messages exchanged with the AI coach, along with the profile and activity data needed for its responses, are sent to OpenAI to generate the coach's answers; this processing may involve a transfer outside the European Union, covered by OpenAI's contractual safeguards. No data is sold or shared for advertising purposes.

Retention period

Your data is kept for as long as your account is active. When you delete your account from Profile settings, all of your data — activities, login credentials, coach conversations, planned sessions, and versioned content (athlete profile, goals, strategy) — is permanently and immediately deleted.

Deleting your account

You have full control over your data. At any time, you can permanently delete your account and all associated data — activities, connected provider credentials, AI coach conversations, planned sessions, analytics data, and versioned content (profile, goals, strategy) — by visiting your Profile settings in the application and selecting the option to delete your account.

Your GDPR rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. You can exercise these rights by contacting us at ; we will respond within one month.

Filing a complaint

If you believe your rights are not being respected, you can file a complaint with the French data protection authority (CNIL) — cnil.fr.

Analytics & Monitoring

We use PostHog for basic product analytics and monitoring to help us understand how TextFit is used and to identify bugs. This instance of PostHog is hosted in the European Union (EU). PostHog is only enabled after you consent, via the banner shown on your first visit; you can change this choice at any time from Profile → Account, or by clearing this site's cookies in your browser. Any analytics data associated with your user profile is permanently deleted if you choose to delete your account.

AI coach

TextFit's AI coach relies on OpenAI models to generate its responses and analyses. To do so, your athlete profile, relevant activity data, and conversation history are sent to it. These exchanges are kept to maintain the context of your conversations and are deleted if you delete your account.

Connected Providers

We connect to the following providers to fetch and display your activities:

Strava

When you connect your Strava account, we use the Strava API to retrieve your data. Specifically, we store:

  • User Info: Basic profile information required to identify your account.
  • Activity Data: All your activity data (e.g., runs, rides, moving time, distance, laps, etc.) to present them in our clean text format.

Garmin

When you sign in with Garmin, we retrieve your data to show your activities. We store:

  • User Info: Your Garmin Connect email and an AES-256 encrypted version of your password, strictly necessary to sign in to Garmin Connect on your behalf and fetch your data; it is never stored in clear text or used for any other purpose.
  • Activity Data: All your synced Garmin activities and related metrics to display them in the app.