Privacy policy.

The information Rowing Peak holds depends on how you use the service and which connections you choose to enable.

Connecting another service is optional. Rowing Peak only accesses a connected account after you choose to authorise the connection.

• Provide and maintain your account.
• Import, store and analyse rowing sessions.
• Prepare personalised training guidance.
• Maintain your training history.
• Operate connected services.
• Calculate training zones and performance estimates.
• Understand how your physiological response changes during training.
• Operate crew, club and coaching features that you choose to use.
• Respond to support requests.
• Secure and troubleshoot the service.
• Improve the reliability and usefulness of Rowing Peak.

Where appropriate, Rowing Peak may also use aggregated or de-identified information to understand how the service performs and improve its methods. Information that has been genuinely anonymised so that it can no longer reasonably identify an individual is no longer personal data.

Rowing Peak does not sell your personal data and does not use your health or training information to build advertising profiles for third parties.

Different legal bases apply depending on what Rowing Peak is doing with your information.

Rowing Peak uses calculations and performance models to analyse training information and generate outputs such as heart-rate zones, pace guidance, session analysis and interval forecasts. These models can take account of information such as previous workouts, pace, power, heart rate, stroke rate, workout duration and how your response changed during a session.

The purpose is to make training guidance more relevant to you rather than relying entirely on generic rowing tables. These calculations do not make decisions that have legal or similarly significant effects on you. They provide training guidance and analysis; you remain in control of whether and how you use that guidance.

Rowing Peak does not disclose personal information to other organisations simply so that they can market to you.

Information may be processed by suppliers that provide infrastructure or services needed to operate Rowing Peak. These currently include Supabase, which provides database and authentication infrastructure, and Cloudflare, which provides hosting, networking, security and related infrastructure.

Information may also be exchanged with services that you deliberately connect, such as Concept2, Withings and Strava, to the extent needed to provide the connection you requested.

Other specialist service providers may process limited information where necessary for functions such as transactional email, support, security or technical monitoring.

Where coaching, crew or club features allow another Rowing Peak user to see information about you, this is only done through the relevant relationship and permissions within Rowing Peak.

Personal information may also be disclosed where required by law, necessary to protect the service or its users, or necessary to establish, exercise or defend legal rights.

Rowing Peak's primary application database is hosted in the United Kingdom. Some infrastructure providers and connected services operate internationally, which means personal information may sometimes be processed outside the United Kingdom.

Where a restricted international transfer takes place, Rowing Peak relies on appropriate safeguards required by data protection law, such as an applicable adequacy decision, recognised contractual safeguards or another lawful transfer mechanism.

Account, training and health information is generally retained while your Rowing Peak account remains active because your training history is part of how the service provides personalised analysis.

If you delete your account, Rowing Peak will delete or anonymise personal information that is no longer required, subject to information that must reasonably be retained for security, legal or regulatory purposes.

Disconnecting an external service stops Rowing Peak from making new authorised requests to that service. Connection credentials that are no longer required are deleted or invalidated as part of the disconnection process.

Temporary authentication and connection information is retained only for as long as needed to complete or secure the relevant process. Technical and security logs are retained for limited periods according to operational and security requirements and the retention arrangements of the relevant infrastructure provider.

Deleted information may remain temporarily in protected backups until those backups pass through their normal retention cycle. Backup copies are not used for normal product processing.

Rowing Peak uses essential cookies where they are needed for secure sign-in, authentication, security and core product functionality. Supabase provides the authentication infrastructure used to maintain signed-in sessions.

Rowing Peak also stores a short preference cookie after you close the cookie notice so that the notice is not shown on every visit.

Rowing Peak does not currently use advertising cookies or non-essential cookie-based tracking. If that changes, technologies that require consent will not be used until the appropriate choice has been provided.

See the Cookie Notice for current details.

Rowing Peak uses technical and organisational measures intended to protect personal information from unauthorised access, alteration, disclosure or loss. These include encrypted network connections, access controls, database-level access restrictions, secure authentication and controls around connected-service credentials.

No internet service can guarantee absolute security. Rowing Peak reviews its security arrangements as the service develops and limits access to personal information to where it is required to operate or support the service.

Signal uses your phone's location to show position, pace and course guidance, and motion sensors to estimate stroke rate. It connects to Bluetooth heart-rate monitors when you allow the relevant device permission and choose a monitor. It does not request microphone, camera, contacts or Health Connect access for these rowing features.

When you explicitly start a recording, Signal stores available GPS positions and GPS quality, timestamps, pace and speed, distance, stroke rate, pause/resume events, course position where a course is selected, and available heart-rate readings. When you connect crew monitors, readings can be stored against Seats 1–8 and Cox. Only record another person's heart rate with their permission.

An active recording can continue while the screen is off or you use another app. A foreground recording notification identifies this activity. Signal does not start a background recording automatically. Denying a permission leaves the readings that require it unavailable; missing readings are not invented.

Unfinished rows are kept in private recovery journals. Saved rows and delivery state are stored in the app's private storage, tied to the athlete account that recorded them. Saving requests transfer to your connected Rowing Peak account over HTTPS; persistent retries can complete when reception returns. Recording IDs and delivery status help prevent duplicate uploads.

Your account email, display name, athlete identifier and a device installation identifier support sign-in, account separation and delivery. Connection tokens are stored encrypted on the phone. The service also processes limited technical request and security information to operate and protect the connection.

Connecting Strava does not enable automatic sharing by itself. Signal shares a row when you choose the manual action or enable automatic sharing. GPS and fitness data sent to Strava follow the permissions you grant and Strava's own privacy settings. Rowing Peak crew and coaching sharing follows your chosen relationships and sharing permissions; a Pro sponsorship does not grant someone access to private results.

Free and Pro capture the same available customer recording data. Pro controls ordinary CSV downloads and file sharing; privacy requests and account deletion remain available without Pro. Exported files and activities sent to another service are independent copies outside Signal's private storage.

Signal recording choices are available in Account → Recording choices and in the app. Heart-rate and location choices start off for each account and can be changed separately. Stroke rate and timing do not require either choice. Changes made on the website reach a phone when it next connects; change the choices in that installation for an immediate offline change. Disallowed measurements are removed from queued CSV uploads before sharing. These choices do not change your connected indoor services or authorise collection from other rowers.

Use Delete your Rowing Peak account to remove your account and associated service data. Update Signal on each linked device, then open it with an internet connection. After confirmation of permanent deletion, Signal removes that account's private recordings, recovery drafts, temporary sharing copies, queued uploads and credentials. Temporary deactivation and ordinary sign-out preserve recordings. Offline devices cannot receive a deletion notice until they reconnect.

We retain minimum account-security and opaque device-deletion identifiers to stop former credentials or queued work restoring a deleted account. They contain no recording file, GPS track or heart-rate samples. If Strava cannot confirm disconnection immediately, we retain only the connection handle needed to finish that disconnect and retry automatically; it is removed after confirmation. Previously downloaded files and already shared Strava activities must be removed in those locations separately; protected backups and limited security logs follow the retention arrangements above.

Rowing Peak is primarily designed as a rowing training service rather than a service directed specifically at children. Children's information requires additional protection.

If Rowing Peak knowingly offers account functionality to younger users, appropriate age, privacy and parental-consent protections will be applied where required by law. If you believe information relating to a child is being processed inappropriately, contact hello@rowingpeak.com.

Rowing Peak will update this privacy policy as the service develops or if the way personal information is used changes. Material changes will be highlighted appropriately. The date at the top of this page shows when the policy was last updated.