Your training data needs clear boundaries.

Pre-beta notice · updated 24 August 2026

Short version

• Pitwall does not sell personal or training data.
• The public site does not use advertising or behavioural trackers.
• Garmin data will only be imported, and approved workouts will only be published, after official approval and the athlete's explicit authorization.
• AI may assist with target proposals and explanations, but the athlete remains in control.
• Export and deletion are release gates for external beta accounts.

1. Controller and contact

De Bonte Koning B.V., registered in the Netherlands, is the intended controller for Pitwall. Privacy and support questions can be sent to support@debontekoning.com. The registered office and Dutch Chamber of Commerce number will be added before any external beta data is collected.

2. Data Pitwall processes

• Account: private profile, verified email address, agreement records, session records, and account-recovery information.
• Planning: goals, target sessions, sports, dates, duration, distance, intensity, notes, and plan changes.
• Completed training: authorized activity type, timing, duration, distance, heart rate, power, calories, elevation, source identifiers, and other fields included in the approved integration.
• Connections: provider user identifier, granted permissions, connection state, import status, and encrypted access credentials.
• Safety and reliability: limited request, error, device, import, and security-event information used to prevent abuse and fix problems.

3. Purposes and legal bases

Account and planning data is used to provide the service requested by the user. Security information is used to protect Pitwall, its users, and the service. Connected training data can reveal information about health and physical performance, so Pitwall will obtain separate, explicit consent before importing it for external beta use. Consent can be withdrawn by disconnecting the provider, without affecting earlier lawful processing.

4. Garmin connection

Garmin is the first planned activity source, subject to Garmin Connect Developer Program approval. The athlete authorizes access on Garmin's own screen. Pitwall never receives the athlete's Garmin password. After authorization, Pitwall uses approved Activity API data to match completed activities with target sessions. With separate Training API access, Pitwall can publish only athlete-approved workouts and plans to the athlete's Garmin Connect calendar.

Disconnecting Garmin removes the connection credentials and ends future imports. The athlete can separately choose whether previously imported activities should remain in Pitwall or be deleted.

5. AI-assisted features

Pitwall may use language models to propose training targets or explain differences between a target and completed activity. Proposals remain inactive until the athlete accepts them. Core measurements and matching evidence remain available without relying on generated text.

Before any personal training data is sent to an external AI processor, Pitwall will identify that processor, explain the purpose, minimize the data shared, document processing locations and safeguards, and request any consent that is required. Connected Garmin data will not be used to train a general-purpose model.

6. Retention and deletion

Account, planning, and imported activity data is kept while the account is active or until the user deletes it. Short-lived sign-in, recovery, and connection attempts expire automatically. Exact periods for security logs, import events, inactive accounts, deleted data, and backups will be published and enforced before external beta data is collected. Deleted data may remain in isolated backups only until the normal backup cycle removes it.

7. Recipients and international transfers

Pitwall uses infrastructure, database, email-delivery, approved training provider, and any disclosed AI services only where needed to operate the product. The final processor list, processing countries, and safeguards for transfers outside the European Economic Area will be published before external beta. Training data is not shared with advertisers.

8. Cookies and device storage

The app uses strictly necessary cookies to keep a device signed in and block unwanted cross-site requests. Authentication and connected-service credentials are not stored in browser storage. The public site does not use advertising cookies or cross-site tracking.

9. Security

Pitwall uses short-lived sign-in sessions, recovery controls, encrypted provider credentials, restricted database access, and separate account boundaries. No internet service can promise absolute security, so these safeguards are tested and reviewed as the product changes.

10. Progress calculations and decisions

Pitwall calculates progress, consistency, match confidence, and suggested next steps from saved targets and activities. These are training-support features, not medical advice. Pitwall does not make decisions with legal or similarly significant effects. Athletes can review and correct matches, reject target proposals, and ignore generated explanations.

11. Your rights

Depending on applicable law, users may ask for access, correction, deletion, restriction, or portability of their data, object to certain processing, withdraw consent, and complain to the Dutch Data Protection Authority or another competent authority. Requests can be sent to support@debontekoning.com.

12. Children

Pitwall is not directed at children. External beta participation is limited to adults unless a separate age and guardian process is designed.

13. Changes

Material changes will be dated and shown to users where appropriate. A final, versioned notice must be accepted before external beta activity data is collected.