Download

Privacy Policy

Last updated

What we collect

Account data. If you sign in with Apple or Google we receive an account identifier and, where you allow it, your email address. You can use the app as a guest without signing in.

Training profile. Your race target (date, city and race type), division, goal finish time, how many days a week you train, the equipment you have, and your training background. This includes your age, gender, your weekly running volume, and recent times you enter such as a 5K or a previous HYROX result. Some of this counts as health and fitness data.

Training activity. Which workouts you started and completed, and when, and how hard you said a workout felt.

ROXER AI. The messages you send to the coach, and the replies, are passed through our server to the AI model and are not stored by us — the conversation lives only in the app until you close it or start a new chat. We keep a per-day count of messages and the amount of text processed, so we can enforce the daily limit. See What we send to OpenAI.

Garmin watch. If you link the ROXER watch app, we receive your watch’s model name and an identifier for it. For each workout you finish on the watch, we receive the start time and, for every step, the time, distance, average and maximum heart rate, and calories. Heart rate counts as health and fitness data. Unlinking the watch, from the app or the watch, stops it sending anything; the workouts it already sent stay in your session history.

Subscription status. Whether you have an active ROXER Pass entitlement, and the purchase events Apple sends us through RevenueCat. We never see your card details.

Apple Watch and Apple Health. If you allow it, the ROXER Apple Watch app reads your heart rate and active energy to show them during a workout, and saves the finished workout to Apple Health. That data stays on your devices — it is not sent to us or to anyone else, and we never use Apple Health data for advertising.

Notifications. If you allow notifications, a push token for your device. We use it for workout reminders you have opted into and to tell you when a workout from your watch has been saved.

App usage analytics. The app sends usage events to PostHog so we can see where the app works and where it does not — for example which screens you open, which onboarding questions you answer or skip, whether a plan was generated, and whether a workout was started or completed. Each event carries the app version and platform. Before you sign in the events use a random identifier; after you sign in they are linked to your ROXER account identifier. They never contain your name, your email address, the answers you type, or the text of your ROXER AI messages. We do not record your screen, and we do not use the events to determine your location.

Crash reports. If you have turned on Share With App Developers in iOS Settings → Privacy & Security → Analytics & Improvements, Apple sends us aggregated crash and performance reports. That is controlled by you in iOS, not by us.

This website. Separate from the app — see The website below.

We do not sell your data, and we do not use it for third-party advertising.

Why we use it

  • To generate and adjust your training plan.
  • To keep your plan and progress across devices when you have an account.
  • To unlock and restore your subscription.
  • To answer your questions in ROXER AI and propose changes to your plan.
  • To send workout reminders you have opted into, and tell you when a watch workout has been saved.
  • To understand how the app is used, so we can fix what is confusing or broken.
  • To fix crashes and keep the app working.

Who processes it for us

  • Supabase — database, authentication and the server functions that build your plan.
  • Apple — sign-in, subscription purchases, and the crash reports you have opted into sharing.
  • Google — sign-in, if you choose to sign in with Google.
  • RevenueCat — subscription entitlement management. Receives your account identifier and Apple’s purchase events.
  • Superwall — shows the subscription purchase screen. Receives your account identifier, basic device information such as model, OS version and language, and whether the purchase screen was shown, closed or completed.
  • PostHog — app usage analytics and feature switches, as described above. Hosted in the United States.
  • Expo — delivers app updates. When the app checks for an update, Expo receives your device’s IP address, the app version and the platform.
  • Cloudflare — hosting and analytics for this website.
  • Garmin — if you use the watch app, its requests to us pass through the Garmin Connect app on your phone, and the workouts it records are saved to your Garmin Connect account under Garmin’s privacy policy.
  • OpenAI — runs ROXER AI. What we send is listed below.

What we send to OpenAI

Your training plan itself is built by our own code from a curated training library; no AI model writes it. OpenAI is used only when you message ROXER AI. Each message you send goes to OpenAI together with:

  • The recent conversation — up to the last 16 messages between you and the coach.
  • Today’s date, your plan’s title and type, and the current week and phase.
  • Your race date, city and venue, if you have a race.
  • Your training days, and your schedule from three days back to two weeks ahead: workout titles, types, intensity and length, whether each one is planned, done or skipped, and how hard you said it felt — plus the exercise names for the coming week.

It does not contain your name, your email address, your account identifier, your age, your gender, or any body metrics — but it does contain whatever you choose to type, so if you mention an injury or pain, that is sent too. OpenAI processes it under its API terms: it does not use the data to train its models, and keeps it for no longer than 30 days.

Keeping it

We keep your data for as long as your account exists.

When you delete your account, a server-side function removes your profile, training profile, race targets, every plan, week, phase, scheduled workout and prescription, your session history, your linked Garmin watches and the workouts they sent, your ROXER AI usage counts, your notification preferences and push tokens, and your subscription records — immediately and permanently. It is not a soft delete, there is nothing to restore, and we do not keep scheduled database backups from which it could be recovered.

Apple keeps its own record of your purchase, and RevenueCat may retain aggregate, de-identified subscription events. Neither is linked back to a deleted account. Usage events already sent to PostHog stay there, linked only to the deleted account’s identifier; email us if you want those removed too.

Your rights

Depending on where you live you can request access to your data, correction, deletion, or export. Canadian users have these rights under PIPEDA; users in the UK and EEA have them under the UK GDPR and GDPR. Email support@getroxer.com and we will respond within 30 days.

You can delete everything yourself from inside the app — see Delete your account.

Children

ROXER is not intended for anyone under 16. We do not knowingly collect data from children.

The website

This site sets no cookies and does not track you across other sites.

  • Cloudflare Web Analytics gives us aggregate page-view counts. It is cookieless, does not fingerprint you, and does not build a profile of you — which is why there is no consent banner.
  • Google Fonts serves the site’s typeface, which means Google receives your IP address when a page loads. We are moving this to self-hosted fonts.

Contact

Tymur Levtsun, 608 - 30 Roehampton Ave, Ontario, Canada — support@getroxer.com.