Privacy Policy.

Summary.

• We collect what you give us: your sign-in details and your rowing.
• Some of it is health and fitness information (heart rate). We save it only if you say yes, use it only to run your training log, and send it to Concept2 only if you turn that on separately. Older versions of the app send heart rate with a workout when it has one and do not ask first. We save it only while your current answer to saving heart rate is yes, and otherwise discard it instead of saving it. We never sell it or use it for advertising.
• We get a little from other services you choose to use: Apple or Google sign-in, Concept2 if you link it, and the app store if you subscribe.
• A few service providers help run Ergomatic. We do not sell or share your information for advertising.
• You can delete your workouts or your whole account in the app at any time.

1. What we collect.

Your account. When you sign in with Apple, Google or an email code, we receive an account identifier, your email address and, if provided, your name. We keep a sign-in token so you stay signed in.

Your rowing. Your workouts, plans and plan history, baselines, test history, settings and workout logs. A log can include time, distance, splits, stroke rate, notes and effort rating, and heart rate if you choose to save it. When you connect a monitor, we can record its name and serial number.

Heart rate. The app shows heart rate while you row. The first time a workout with heart rate is about to be saved, the app asks whether to save heart rate with your workouts. If you say no, the workout is saved without it. On updated versions of the app, the app also removes heart rate from its saved copies on that phone, or tells you in You › Settings if it could not, and on your other phones the next time they open the app online. Change your answer in You on the web or in an updated app. We keep a record of your answers and when you gave them. Older versions of the app do not ask, do not remove heart rate from your phone and do not offer these settings; update the app to answer.

If you link Concept2. Your Concept2 account ID, username and connection tokens, and your recent results. We read your profile’s weight and gender to work out your weight class, but we do not store those two values.

If you subscribe. Your subscription status and access dates. Apple or Google handles payment; we never receive your card number.

Error reports. If the app hits an error, it sends us technical details such as a scrubbed error message and stack trace, the screen, app version and platform. If you are signed in, we log it with your account ID and sign-in method.

Connection information. Like any online service, our servers and Cloudflare receive your IP address with each request. We may use it briefly to deliver the request and to protect Ergomatic from abuse, such as limiting repeated requests. We don’t add it to your account profile; it can appear in server and security logs, kept as in section 5.

If you email us. Your address, message and any attachments.

We do not collect your precise location, contacts, photos or advertising identifiers. We use no advertising tools, and today no analytics tools, in the app or on this website.

2. How we use it.

To create and secure your account; to plan your sessions, show your progress and keep your training log; to send results to Concept2 when you ask us to; to confirm your subscription; to send account emails, such as sign-in codes, a welcome message, notices about your subscription’s status, and an account-deletion confirmation; to fix errors; and to answer you when you write to us.

We may offer training emails you can turn on in settings, such as a progress summary, a session reminder or a personal best. These use your workouts only to show you your own training and never advertise anything. Turn them off in settings or with the link in each.

We may also send occasional emails about Ergomatic, such as news about the app or an invitation to come back. We never base these emails on your workouts or health data. Every one has an unsubscribe link, and you can opt out at any time by using it or writing to hello@ergomatic.io. Opting out does not stop account or training emails.

We do not use health and fitness information for advertising, marketing or data mining, and we do not sell it. Ergomatic does not use iCloud to sync your training data.

3. Who we share it with.

Service providers that help run Ergomatic, limited to that purpose, and services you choose to connect, which handle your information under their own policies. Today they are:

• Cloudflare carries app and website requests and hosts this site.
• Amazon Web Services handles email-code sign-in and sends our emails.
• Apple and Google handle sign-in and in-app purchases on their platforms. On iPhone, Google’s sign-in may also use your IP address to estimate your general location for fraud prevention.
• Google handles mail sent to hello@ergomatic.io.
• RevenueCat manages in-app subscriptions. When you sign in to the iPhone or Android app, it receives your Ergomatic account ID, and from your device your IP address and basic device and app details. If you buy, it also receives store purchase information.
• Service providers that host and monitor our serversreceive technical records of how your requests ran, which can include your account ID and IP address.
• Concept2 receives a workout only after you link your account and send it, or turn on automatic sending. It gets timing, distance, rowing data, intervals, targets, weight class and drag factor and, if you turn each on, heart-rate data and a monitor verification code, but not your workout title, notes or effort rating. Concept2 handles it under its own privacy policy.

Today our account and training database runs on a server we operate. If Ergomatic is ever sold or merged, your information may transfer to the new owner under this notice. We may also disclose information when the law requires it.

4. Signing in with Apple or Google.

We keep only an account identifier, your email address and, if provided, your name. We use them to identify your account and to send the emails described in section 2. Apple and Google handle their own sign-in under their own privacy policies. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

5. How long we keep it.

We keep your information while you have an account. When you delete your account, we remove your account and training records from our live database promptly. Copies in backups, if any, expire on their normal cycle. A few things last a little longer:

• We keep your email address for up to 30 days to send you one deletion confirmation. A message already handed to our email service can take up to 14 more days to clear, longer if we retry it by hand.
• We ask RevenueCat to delete its record of you, and aim to finish that within seven days.
• We ask Apple and Amazon Web Services to remove related sign-in records. Those requests are best effort.
• Server logs and email-delivery records can include account IDs. Server logs are removed as they rotate, which is by size, not on a fixed schedule; email-delivery records and logs expire within 90 days and are then deleted. Copies held by the service providers that monitor our servers expire within 90 days.
• If another device still signed in to the deleted account opens the app, RevenueCat may record it again. The app signs that device out when our server refuses it, but that new RevenueCat record stays until you ask us to remove it.
• If you stop saving heart rate, heart rate already saved stays with your workouts until you delete them or your account.
• Results already sent to Concept2 stay there. Ask Concept2 to remove them.
• An email-code sign-in you started but never finished may leave an unused record with Amazon Web Services.

Deleting your Ergomatic account does not cancel a store subscription. Cancel it in your App Store or Google Play account to stop future charges.

6. On your device.

The app keeps your sign-in token in the device’s secure storage, plus drafts, preferences and recent monitor diagnostics. If you chose not to save heart rate, then on updated versions of the app new diagnostics leave it out, and diagnostics already on your phone that held heart rate are deleted, or the app tells you in You › Settings if it could not. Older versions of the app do not change their diagnostics. Signing out removes the token. Deleting your account tries to clear this device’s Ergomatic data. Unsaved work not tied to an account, another account’s data, or anything the device refuses to clear may remain, and it cannot clear another device. On iPhone, uninstalling the app may leave the token behind, but a token for a deleted account cannot reopen it. In the web app, we use only strictly necessary cookies, such as one that keeps you signed in and a short-lived one that protects a sign-in. Cloudflare may set its own security cookies.

7. Keeping it safe.

We use encrypted connections, keep the app’s sign-in token in device secure storage and limit who can reach our systems. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. If a breach affects your information, we will tell you as the law requires.

8. Children.

Ergomatic is not for children under 13, and we do not knowingly collect information from them. If you think a child under 13 has given us information, write to hello@ergomatic.io and we will delete it.

9. Your rights.

Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, or withdraw consent. You can do most of this in the app: stop saving heart rate or sending it to Concept2 in You on the web or in an updated app, delete workouts and logs one by one, or your whole account in You › ACCOUNT › Delete account. For anything else, write to hello@ergomatic.io. We will check that the request comes from the account holder before acting, and we will not treat you differently for using these rights.

If you live in a US state with a privacy law (such as California, Colorado, Connecticut, Virginia or Texas), you may also ask which categories of information we hold and who receives them, and name an authorized agent to ask for you. If we decline a request, you can appeal by replying to our answer; if we deny the appeal, you can complain to your state attorney general.

If you are in the European Economic Area or the United Kingdom, Ergomatic LLC is responsible for your information. We use it to provide the service you asked for (your account, training log, training emails you turn on, Concept2 sending and subscription), for our legitimate interests in keeping Ergomatic secure and fixing errors, and to meet legal obligations. We send you occasional emails about Ergomatic only if you have agreed to receive them, and you can withdraw that at any time with the unsubscribe link. You also have the right to object to our use of your information, to receive the information you gave us in a portable form, and to complain to your local data protection authority. Ergomatic is run from the United States, and we and our service providers may process your information there and in other countries.

In the last 12 months, we have collected these categories of personal information: identifiers (account ID, email address, name, IP address); commercial information (subscription status); internet or network activity (error reports and records of how your requests ran); characteristics such as gender, read from Concept2 to set a weight class and not stored; and sensitive information (sign-in credentials and health and fitness data such as heart rate). We have not sold or shared personal information for advertising, and we will not. We do not use sensitive information to infer things about you.

We do not respond to Do-Not-Track signals because there is no agreed standard for them, but we do not track you across other sites or apps either.

10. This website.

Cloudflare hosts the site and carries its requests. The site does not load analytics scripts or set analytics cookies. If we add analytics, we will update this policy before that change goes live.

11. Changes and contact.

When our practices change, we will update this page and its date, and for a significant change we will tell you in the app or by email. Ergomatic LLC, Pennsylvania, USA, operates the app and site. Write to hello@ergomatic.io with any privacy question or request.