Privacy Policy
Last updated: 13 February 2026
1. Who we are
AeroBase ("we", "us", "our") operates the aerobase.run website and associated services. We are the data controller for any personal data processed through our service.
Contact: privacy@aerobase.run
2. What data we collect
We collect the following categories of personal data:
- Account information: Email address provided when joining our waitlist or creating an account.
- Activity and wellness data: Running activities, heart rate data, sleep data, HRV, and training metrics synced from connected fitness platforms (e.g. Garmin Connect).
- Usage data: Basic analytics about how you interact with the service (pages viewed, features used).
3. Legal basis for processing
We process your data under the following legal bases:
- Consent: When you connect a fitness platform via OAuth, you explicitly authorise us to access your activity and wellness data. You can revoke this at any time.
- Legitimate interest: We process waitlist email addresses to communicate about our service launch and updates. You can unsubscribe at any time.
- Contract performance: Processing necessary to provide the service you have signed up for.
4. How we use your data
Your data is used to:
- Display your training metrics, progress charts, and aerobic base analysis.
- Generate insights such as cardiac drift trends, HR zone breakdowns, and training load summaries.
- Send waitlist updates and service announcements (email only).
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data storage and retention
- Your data is stored securely using industry-standard encryption in transit and at rest.
- Activity and wellness data is retained for as long as your account is active.
- Waitlist email addresses are retained until you unsubscribe or we complete the waitlist process.
- You may request deletion of all your data at any time (see Your Rights below).
6. Third parties
We integrate with the following third-party fitness platforms to sync your data:
- Garmin Connect
- Additional platforms in the future (e.g. Polar, COROS, Suunto, Apple Health)
When you connect a platform, we access your data through their official API using OAuth. We do not receive or store your platform password. Each platform's own privacy policy governs how they handle your data on their side.
7. Your rights
Under the UK GDPR and EU GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure: Request deletion of your personal data.
- Portability: Receive your data in a structured, machine-readable format.
- Withdraw consent: Revoke access to connected platforms at any time, either through our service or directly through the platform.
- Complaint: Lodge a complaint with your local data protection authority (e.g. the ICO in the UK).
To exercise any of these rights, contact us at privacy@aerobase.run.
8. Cookies
We use minimal cookies required for the service to function:
- Session cookie: Keeps you logged in. Essential for the service to work. Expires when you close your browser or after a set period.
We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across websites.
9. Changes to this policy
We may update this privacy policy from time to time. If we make significant changes, we will notify you via email or a prominent notice on the site. The "last updated" date at the top of this page indicates when the policy was last revised.
10. Contact
If you have questions about this privacy policy or how we handle your data, please contact us:
privacy@aerobase.run