1. Who we are
Peakfy (the “app”, the “service”, “Peakfy”) is an AI cycling-coaching app. Peakfy is operated by La Partage Media LTD, the data controller responsible for your personal data.
- Company: La Partage Media LTD (company number 15043925)
- Registered address: 124 City Road, London EC1V 2NX, United Kingdom
- Contact: hello@peakfy.app · +49 2423 9070095
This Privacy Policy explains what personal data we collect, why, how we use and protect it, who we share it with, and the rights you have over it. We are committed to data minimisation: we collect only what we need to give you accurate coaching, we store your data in the European Union, and we never sell your data or use it for advertising.
2. Scope
This policy covers the Peakfy mobile app and the Peakfy website. It applies to everyone who creates a Peakfy account or connects a third-party service to Peakfy.
3. The data we collect
a) Account and profile data
- Email address and authentication data (managed by our authentication provider; passwords are stored only as salted hashes — we never see your password).
- Optional profile details you provide: name or display name, sex, date of birth or age, height, weight, training goal and event(s), experience level, preferred units and language, and manually entered performance values such as FTP.
b) Health and fitness data (special category — see legal basis in Section 5)
Depending on what you record or connect, this can include:
- Activity data: power, heart rate, cadence, speed, distance, duration, elevation, calories, temperature, and GPS route / location data for your rides and other activities.
- Recovery and wellness data: heart-rate variability (HRV), resting heart rate, sleep, VO2max, body weight, and your subjective effort ratings (RPE).
- Values we compute from the above (for example training load, readiness/recovery, personal bests, estimated FTP and training zones). These are computed by our software from your real data.
c) Data from services you connect
If you choose to connect a third-party service, we access data through that service's official API, only after you authorise it, and only to the extent needed to provide Peakfy's features:
- Garmin Connect — completed activities, and wellness data (sleep, HRV, resting heart rate); and we write your planned workouts to your Garmin Connect calendar so they reach your device.
- Strava — completed activities you authorise.
- Apple Health (HealthKit) — sleep, HRV, resting heart rate, VO2max, weight and related metrics (read on your device with your permission). See the HealthKit statement in Section 8.
- Intervals.icu, Zwift, Rouvy, Wahoo and similar — the activity and/or workout data needed to bring your training into Peakfy or send your planned workouts out to your device or app.
You can disconnect any service at any time (Section 10).
d) Technical data
Minimal technical information needed to run and secure the service (for example app version and basic diagnostic/error information). Peakfy does not use third-party advertising or cross-app tracking SDKs, and does not build advertising profiles.
e) The Peakfy website (getpeakfy.com)
Our marketing website is a purely informational site. It uses no cookies and no analytics, tracking or advertising tools, and its fonts are served locally from our own server (no connection to third-party font servers). When you visit, our hosting provider automatically processes standard server log data — including your IP address, the date and time, the page requested, and your browser type — to deliver and secure the site (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, reliable website).
4. How we use your data
We use your data only to provide and improve the coaching service you asked for:
- to calculate your training metrics, zones, load, readiness and personal bests accurately;
- to let the AI coach plan sessions, explain them, and analyse your activities;
- to write planned workouts to your calendar and connected device/app at your request;
- to operate, secure, debug and support the app;
- to communicate with you about your account and service (e.g. verification and security emails).
5. Legal bases (UK GDPR and EU GDPR)
- Health and fitness data is special-category data (Article 9). We process it only on the basis of your explicit consent, which you give when you enter or connect this data. You can withdraw consent at any time (Section 10), which stops future processing.
- Contract (Article 6(1)(b)): account and profile data needed to provide the service you signed up for.
- Legitimate interests (Article 6(1)(f)): keeping the service secure and working (balanced against your rights).
- Legal obligation (Article 6(1)(c)): where the law requires us to retain certain records.
6. How the AI coach uses your data
Peakfy's coach is an AI chat. The numbers are always computed by our software, not by the AI — the AI explains and plans, it does not invent values. To generate its replies, relevant training context is sent to our AI processing provider (currently Anthropic). Before data is sent to the AI provider we remove direct identifiers such as your name and email address. The AI provider processes the request only to return a response and does not use your data to train its models for this purpose. We never send your data to an AI provider for advertising or profiling.
Automated processing (Art. 22 GDPR). Peakfy generates your training recommendations automatically, including with the help of AI. These are training guidance only — they do not produce legal effects concerning you or similarly significantly affect you, so they are not the kind of solely automated decision covered by Article 22 GDPR. The underlying numbers are computed by our software (the AI explains and plans, it does not make decisions about you), and you can always reach a person at hello@peakfy.app with questions about how a recommendation was reached.
7. Who we share data with (processors / sub-processors)
We do not sell your data and we do not share it for anyone else's marketing. We use a small number of vetted providers (“processors”) strictly to run Peakfy, under data-processing agreements:
- Supabase — database, authentication and storage, hosted in the European Union.
- Anthropic — to generate the coach's replies (see Section 6).
- Resend — to send account and security emails.
- Netlify — hosting for the Peakfy marketing website (getpeakfy.com); processes standard server log data as described in Section 3(e).
- A subscription/billing provider — when paid subscriptions are introduced.
- The third-party platforms you connect (Garmin, Strava, Apple Health, Zwift, Rouvy, Wahoo, Intervals.icu) — data flows to/from them only to sync your training, at your request.
A current list of sub-processors is available on request at hello@peakfy.app. We may also disclose data if required by law, or to protect the rights, safety and security of our users and service.
8. Connected platforms — specific commitments
When you connect a third-party platform, our use of the information we receive complies with that platform's API terms, and:
- we access it only with your authorisation and only to provide Peakfy's features;
- we do not sell it, use it for advertising, or share it with third parties for their own purposes;
- you can disconnect at any time; we then stop syncing and delete the data we pulled from that platform, except where we must keep records to meet a legal obligation.
Apple HealthKit statement. Data read through Apple Health / HealthKit is used solely to provide Peakfy's training and recovery features that you have enabled. In line with Apple's requirements, we never use HealthKit data for advertising or marketing, never sell it, and never disclose it to third parties for their own purposes or for data-mining. HealthKit data is used on your device and, where you enable syncing, stored in your account in the EU under your consent, and is deleted when you delete your account or disconnect Apple Health.
9. Where your data is stored and international transfers
Your account and health data are stored in the European Union. La Partage Media LTD is based in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. Some processors (for example the AI provider) may process limited, identifier-stripped data outside the UK/EU; where that happens we rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK International Data Transfer Agreement/Addendum).
10. Retention, disconnecting and deletion
- We keep your data for as long as your account is active, plus any period the law requires.
- Disconnecting a service stops future syncing and deletes the data we pulled from that service (subject to legal retention).
- Deleting your account permanently deletes your personal and health data from our systems — it is genuinely erased, not merely flagged as deleted. You can delete your account in the app or by contacting hello@peakfy.app.
11. Your rights
Under the UK GDPR and the EU GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw your consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority — in the UK, the Information Commissioner's Office (ICO, ico.org.uk); in the EU, your local authority. To exercise any right, contact hello@peakfy.app; we respond within the legal time limits.
12. Security
We use industry-standard measures to protect your data, including encryption in transit, access controls, and EU-based managed infrastructure. Health data is never written to logs or error reports. No system is perfectly secure, but we work continuously to protect your information.
13. Children
Peakfy is not intended for children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use Peakfy. We do not knowingly collect data from children below that age.
14. Not a medical device
Peakfy provides training and recovery guidance for healthy athletes. It is not a medical device and does not provide medical advice, diagnosis or treatment. Always consult a qualified professional for medical questions or before starting a new training programme.
15. Changes to this policy
We may update this policy from time to time. We will post the new version here with an updated “Last updated” date and, for material changes, notify you in the app or by email.
16. Contact
Questions or requests about your data:
La Partage Media LTD, 124 City Road, London EC1V 2NX, United Kingdom.
Email hello@peakfy.app · Phone +49 2423 9070095.