How SPLT Club handles the athlete profiles and accounts it controls, for users in the UK, EU, US and Canada.
At a glance
- SPLT Club keeps your training and health profile so you can track your progress and share it with the clubs you choose.
- Clubs only see your profile if you (or your parent or guardian) say yes, and you can stop sharing at any time.
- We never sell your data or use it for advertising.
- You can see, download, correct or delete your data at any time in Settings.
1. Who we are
SPLT Club [Ltd] ("SPLT Club", "we", "us") is a company registered in Scotland (number [Company Number]) at [Registered Address]. We are the controller of your SPLT Club account and athlete profile.
- Privacy contact: [Privacy Email]
- Person responsible for privacy (including for Quebec): [Name or role], [Privacy Email]
- UK ICO registration number: [ICO Number]
- EU representative: [EU Representative name and address]
2. Who this notice covers
This notice covers athletes, parents and guardians, club staff who use SPLT Club, and visitors to our website and apps.
It does not cover the notes, attendance and selection records that a club creates about you ("Club Records"). Each club is responsible for its own records, and its privacy notice explains how it uses them and the profile information you share with it. We process Club Records for clubs under contract.
3. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email, phone, date of birth, emergency contact | You, your guardian, or the club that invited you |
| Account | Login details, settings, consent choices, club memberships | You, and our systems |
| Training and performance | Sessions, workloads, results, attendance you record | You |
| Health and wellbeing | Injuries, illness, pain, recovery, sleep, heart rate, body weight, fatigue and wellbeing ratings | You, your guardian if you're under 16, or your club's staff (an injury a coach records is part of your profile) |
| Device data | Workouts, heart rate and sleep data from devices and apps you connect (not your routes or location) | The devices and apps you connect |
| Photos and video | A photo of an ergometer screen you upload so the result can be read; video clips of training your club uploads | You, or your club |
| Club fees and payments | What you owe your club and what you have paid; card details are held by our payment provider, not by us | Your club, and our payment provider |
| Guardian details | Name, contact details, relationship to the athlete | The guardian, or the club |
| Club staff details | Name, role, club, work contact details | The staff member, or their club |
| Technical and usage | IP address, device and app version, logs, error reports | Our systems and service providers |
| Support | Messages you send us | You |
Your health and wellbeing information is central to what SPLT Club does, so we ask for your explicit consent to hold it when you create your account, and SPLT Club cannot be used without it. If you withdraw that consent, your account is suspended, you can download a copy of your data, and your health information is deleted within 30 days (section 8).
4. How we use your information, and our legal bases
UK and EU law requires a legal basis for each use. Health data also needs your explicit consent.
| What we do | Information used | Legal basis (UK and EU GDPR) |
|---|---|---|
| Create and run your account and profile | Identity, contact, account, training | Contract: providing the service you signed up for |
| Hold and display your health information | Health and wellbeing, device data | Explicit consent |
| Share your profile with clubs you choose | Profile data you choose to share, including health | Explicit consent, given separately for each club |
| Import data from devices you connect | Device data | Explicit consent |
| Show load and wellbeing alerts (section 5) | Training, health and device data | Explicit consent (part of your health consent) |
| Answer a coach's questions and draft actions with the coach assistant, at the coach's request | For the athletes the coach asks about: names, squads, recent training, last test, readiness and its trend, whether they are fit (never an injury's reason), and check-in notes. Only athletes who share with that club | [Explicit consent (your club sharing consent) — confirm] |
| Send service messages, such as invites, security alerts and policy changes | Contact, account | Contract, and legitimate interests in keeping you informed |
| Keep the service secure and prevent misuse | Technical, account | Legitimate interests in security |
| Fix problems and improve the service | Technical; aggregated or de-identified data only | Legitimate interests in a working product |
| Keep records of consents and meet legal duties | Consent records, account | Legal obligation, and legitimate interests in proving compliance |
| Answer support requests and data rights requests | Contact, support | Legal obligation and legitimate interests |
Where we rely on legitimate interests, we have checked that they are not outweighed by your rights. You can object at any time (section 12).
5. Load alerts and profiling
SPLT Club uses simple, fixed rules to flag patterns in your data, such as a sharp rise in training load compared with your recent average, or several low wellbeing scores in a row. Alerts are shown to you and to the clubs you share your profile with.
This counts as profiling, because it evaluates your health and training data automatically. But the alerts don't make decisions about you. You and your coaches decide what to do. They are not medical advice. If you withdraw your health consent, alerts stop.
6. Who we share your information with
- Clubs you choose. Only with your consent, only what you choose (from today, or your full history), and only while you're a member. If you stop sharing with a club, its access ends straight away. After you leave, the club keeps read-only access for 60 days to what you shared before you left. Notes written by one club's staff are never shown to another club; an injury you or a coach records is part of your own profile, so a club you share your history with sees it.
- Your parent or guardian, if you're under 16: your consents, sharing choices, settings and training, but not your health and wellbeing information. They can ask us for a copy of that by making a formal request, which we answer only after checking who they are and that they are linked to your account.
- Service providers who help us run SPLT Club, under contracts that only let them use your data for us: Railway (hosting and database), SendGrid (email), Stripe (club fee payments) and Anthropic (reading an ergometer photo, a receipt or a race draw, and reviewing training video, with no names sent; and the coach assistant, described in section 4). The full list is at spltclub.com/legal/sub-processors.
- Apps you connect, such as Concept2, Strava, Garmin or Whoop, which you authorise yourself and which have their own privacy policies.
- Authorities, where the law requires it, or to protect someone's life in an emergency.
- A buyer or successor, if SPLT Club is sold or merged. We would tell you first, and this notice would continue to apply.
We never sell your personal information, share it for targeted advertising, or let clubs see another club's notes about you.
7. Where your information is stored, and international transfers
Your information is stored in the United States, with our hosting provider Railway. Some of our other service providers are also based in the US. So if you are in the UK or the EU, your information is transferred to the US.
When information moves between countries, we protect it with:
- UK and EU adequacy decisions, including the EU's decision for the UK and the UK-US Data Bridge or EU-US Data Privacy Framework, where the provider is certified
- Standard contractual clauses approved by the European Commission, with the UK Addendum for UK data
If you're in Canada, your information is stored outside Canada and may be accessible to authorities in the US under US law. You can ask us for details of the safeguards at [Privacy Email].
8. How long we keep your information
| Information | How long |
|---|---|
| Athlete profile | While your account is open. Deleted within 30 days of you deleting your account. |
| Inactive accounts | Deleted if there's no club membership and no sign-in for [2] years, after a [30]-day warning |
| Health information, after you withdraw consent | Deleted within 30 days |
| A club's access after you leave it | Read-only for 60 days, then removed |
| A club's access if you stop sharing with it | Ends straight away |
| Club Records about you | Deleted 60 days after you leave the club, stop sharing with it or delete your account, unless the club must keep them by law |
| Guardian account | While linked to a child's account, then deleted within 30 days |
| Club staff account | Until removed by the club, then deleted within 60 days |
| Consent records | [6] years after the account closes, to prove consent was given |
| Security logs | [12] months |
| Support messages | [2] years |
| Backups | Overwritten within [35] days |
9. Security
We protect your information with encryption in transit [and at rest], role-based access, multi-factor authentication available to every account, audit logs of changes, and [regular security testing]. If a breach puts you at risk, we will tell you and the relevant regulator, as the law requires.
10. Children
SPLT Club can be used by athletes of any age who are invited by a club.
- For athletes under 16, the club invites both the athlete and a parent or guardian. The athlete can set up their account, but it cannot be used until their parent or guardian has accepted the Terms and given every consent. Until the athlete turns 16, their parent or guardian can see and manage their consents, sharing choices, settings and training, but not their health and wellbeing information. A parent or guardian can ask for a copy of a child's health information by making a formal request to [Privacy Email], which we answer only after checking who they are and that they are linked to the child's account.
- Any linked parent or guardian can withdraw a consent, and a withdrawal takes priority.
- From 16, athletes manage their own account and consents. On their 16th birthday they are asked to give each consent in their own name, and at 18 any guardian link ends.
- At 16 or 17, the club may also invite a parent or guardian to co-accept the Terms. It's optional, and the athlete's account never waits for it.
- [Before any US launch: in the US, we get verifiable parental consent before collecting information from children under 13, and parents can review, delete or stop further collection at any time.]
- Accounts for under-18s use high-privacy settings by default: no public profiles, no location tracking, no marketing and no advertising.
11. Cookies
We only use essential cookies and similar technologies, to keep you signed in and keep SPLT Club secure. We don't use analytics or advertising cookies. If that ever changes, we will ask for your permission first and update this notice.
12. Your rights (UK and EU)
You have the right to:
- access your information and get a copy;
- correct information that's wrong;
- delete your information;
- restrict how we use it while a concern is resolved;
- download it in a portable format;
- object to uses based on legitimate interests;
- withdraw consent at any time, without affecting anything done before; and
- complain to the ICO (ico.org.uk) or to the data protection authority in your EU country.
Most of these you can do yourself in Settings. Otherwise, contact [Privacy Email]. We reply within one month, and may ask you to confirm your identity. For information a club holds about you, contact that club. If you contact us instead, we'll pass your request on.
13. US residents
In the past 12 months, we have collected these categories of personal information: identifiers; contact and account details; age; health and fitness information; account login details; information about children; and device and usage information. Section 3 explains the sources, and section 4 explains the purposes.
Health information, login details and children's information are sensitive personal information. We use them only to provide the service you asked for, as section 4 describes. We do not collect precise geolocation: workouts imported from devices keep their times and distances, not their routes.
We disclose personal information to our service providers, and to clubs at your direction. We do not sell or share personal information, or use it for targeted advertising, and we have not done so in the past 12 months. This includes information about anyone under 16.
Depending on your state, you can ask to know, access, correct, delete or download your information; opt out of sale, sharing, targeted advertising and certain profiling; and limit the use of sensitive information. We won't treat you differently for using these rights.
- How to ask: use Settings, or email [Privacy Email]. We will verify your identity first. An authorised agent can ask for you, with your signed permission.
- Appeals: if we decline your request, you can appeal by replying to our decision. If we still decline, you can contact your state Attorney General.
- Global Privacy Control: we treat GPC browser signals as an opt-out request.
Washington, Nevada and Connecticut residents: see our Consumer Health Data Privacy Policy for how we handle consumer health data.
14. Canada and Quebec
We handle personal information under PIPEDA and applicable provincial laws, including Quebec's privacy law. The person responsible for protecting personal information is [Name or role], at [Privacy Email].
You can access and correct your information, withdraw consent, and ask for a copy in a structured, commonly used format. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. Your information is stored outside Canada (section 7).
15. Changes to this notice
We'll tell you about material changes by email or in the app at least [30] days before they take effect, and ask for your consent again where the law requires it. Previous versions are available on request.
16. Contact us
SPLT Club [Ltd], [Registered Address]. Privacy: [Privacy Email]. EU representative: [EU Representative contact].
A short version, for under-16s
How SPLT Club looks after your information
What we keep: your name, your training, and how you're feeling, like sleep, injuries and tiredness.
Why: so you and your coaches can plan your training and keep you healthy.
Who can see it: you, and coaches at clubs your parent or guardian said yes to. Your parent or guardian can see your training and your privacy choices, but not how you're feeling or your injuries. If they really need to, they can ask us for a copy. Nobody else.
What we never do: sell your information, show you adverts, or let strangers see your profile.
Alerts: sometimes the app spots that you've trained a lot more than usual and lets you and your coach know. It's a helpful nudge, not a doctor.
Your choices: you or your parent can fix mistakes, download your information or delete it. When you turn 16, you take charge of your own account.
Worried about something? Talk to your parent, your coach or your club's welfare officer, or email us at [Privacy Email].