This Privacy Policy explains what information Medo Ventures LLC ("Medo Ventures," "we," "us") collects through WattAscent, including the website at wattascent.com and the WattAscent web, desktop and mobile apps (the "Service"), how we use and share it, and the choices you have.
Some of the information WattAscent uses, like heart rate, is health-related. Our Consumer Health Data Privacy Policy describes how we handle that data and how to exercise your rights over it. The short version: we don't sell your data, we don't use it for advertising, and we use it to coach you.
1. Information we collect
Information you give us
- Account details: your name and email address.
- Profile and training settings: weight (to calculate watts per kilogram), preferred units, optional birth year, experience level, resting and maximum heart rate, functional threshold power (FTP), weekly schedule and time available, goal events, and plan preferences.
- Feedback in the app: post-ride effort ratings and other answers you give.
- Messages: what you send us when you contact support.
Information from your devices
When you ride, WattAscent connects to your smart trainer, power meter and heart rate monitor over Bluetooth or ANT+. It records power, cadence, speed, heart rate and workout timing, and saves the ride to your account. It also records results of tests and readiness checks.
Information from Strava, if you connect it
With your permission, we receive your Strava profile basics and activities, including activity type, date, duration, distance, power, heart rate and best efforts, plus your FTP if you've saved one in Strava. We use them to count all of your training, not just indoor rides. Strava access tokens are stored securely on our servers and never in your browser.
Payment information
Payments are processed by our third-party payment processor. We receive only what we need to manage your subscription, such as your name, email address, billing country and postal code, the last four digits of your card, and payment status. We never see or store your full card number.
Information collected automatically
- Server logs: our hosting provider records technical information such as IP address, browser and device type, pages requested and timestamps. These logs are used to deliver, secure and troubleshoot the Service.
- Sign-in storage: the app stores a sign-in session in your browser or device so you stay signed in. This is essential to the Service.
- No ad tracking: we don't use advertising cookies, cross-site tracking or third-party analytics.
- Fonts: our website loads fonts from Google Fonts, so your browser connects to Google, which receives your IP address.
2. How we use information
- To coach you: to build and adjust your training plan, set power targets, estimate and update your FTP, track your workout levels, training load, fitness and fatigue, and run readiness checks and tests.
- To run your account, sign you in and process your subscription.
- To send you service emails, such as sign-in links, receipts and renewal reminders. We'll only send marketing emails if you've agreed to them, and you can unsubscribe at any time.
- To provide support and respond to you.
- To keep the Service secure, prevent abuse and fix problems.
- To improve WattAscent, using aggregated or de-identified information wherever we can.
- To meet legal obligations and enforce our Terms.
Automated training decisions. WattAscent's adaptive engine automatically adjusts your training using rules based on published sports-science research. These adjustments only affect your training recommendations. You can always change your FTP, plan or workout yourself.
Strava data. We use data from Strava only to provide WattAscent's features to you. We don't use it to train artificial intelligence models, and we don't share it with others.
3. How we share information
We don't sell your personal information, and we don't share it for targeted advertising. We share it only:
- With service providers who run parts of the Service for us under contracts that limit their use of your information: Supabase (database and sign-in), Cloudflare (website and app hosting, security), our email delivery provider (sign-in and account emails) and our payment processor.
- With Strava, at your direction: if you connect Strava and choose to upload rides, we send those rides to Strava.
- For legal reasons: if required by law or legal process, or to protect the rights, safety or property of our users, Medo Ventures or others.
- In a business transfer: if Medo Ventures is involved in a merger, acquisition or sale of assets. Your information would remain protected by this policy, and we'd tell you before it became subject to a different one.
- With your consent in any other case.
4. How long we keep information
We keep your information while your account is open. If you delete your account, we delete your personal information within 30 days. Copies in backups are removed within a further 30 days. We keep a record of payments for as long as tax and accounting laws require.
5. Security
We protect your information with encryption in transit (HTTPS), access controls that keep each rider's data separate, and limited staff access. No system is perfectly secure, but we work to protect your data and will notify you if a breach affects it, as the law requires.
6. Your choices and rights
Wherever you live, you can:
- see and correct your profile and training settings in the app;
- ask for a copy of your personal information, or download your rides;
- delete your account and personal information;
- disconnect Strava at any time;
- unsubscribe from marketing emails.
To make a request, email hello@medoventures.com. We'll confirm it's you before acting, respond within 45 days, and won't treat you differently for using your rights. You may have further rights where you live (for example in California, the European Union or the United Kingdom), and we honor them. If you're unhappy with our response, you can contact your local data protection authority.
For rights over health-related data, including Washington consumer health data rights, see our Consumer Health Data Privacy Policy.
7. Where your data is stored
WattAscent is run from the United States, and your information is stored and processed in the United States. If you use WattAscent from another country, your information will be transferred to the United States.
8. Children
WattAscent is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, email hello@medoventures.com and we'll delete it.
9. Changes to this policy
We may update this policy. If we make significant changes, we'll tell you by email or in the app before they take effect, and update the effective date above.
10. Contact
Questions or requests? Email hello@medoventures.com.
Medo Ventures LLC
Seattle, Washington, USA