Tri-It Coming soon

Privacy Policy

Pilot policy, last updated September 2026

What we collect

  • Your email address (from Sign in with Apple, Sign in with Google or email sign-in).
  • Workout data synced from Apple Health (iPhone) or Health Connect (Android): activity type, date, duration, distance and heart-rate summaries when you grant access.
  • Your referral code, Fuel balance, ledger and reward redemptions.
  • Workout detail, only if you turn it on in the app: heart-rate readings over the session, calories, cadence, power, swim laps, the device that recorded it and, unless you switch route maps off, the GPS route. The first and last 200 metres of every route are removed before it is stored, so a map never shows where you start or finish.
  • An optional profile photo you upload.
  • Your device's push-notification token, if you allow notifications, so we can tell you when a workout has been verified.
  • Basic product-usage events (for example, that a reward was viewed or a health sync completed). These are used only to keep the service running and improve it.
  • If you join the waitlist on this website, the email address you enter there.

Who can use Tri-It

Tri-It is for people aged 13 and over.

Workout detail and your consent

Heart-rate and other health readings are special category data under UK GDPR. We only keep workout detail with your explicit consent, given in the app before anything is stored. It is used solely to show you your own stats, charts and route maps, is visible only to you, and is never shared with brands or sold. You can withdraw consent at any time in You ▸ Workout data; doing so deletes all stored workout detail straight away. Your workouts and Fuel are not affected. Raw readings used to verify a workout are checked when it syncs and are not kept.

What we do with it

Fuel is calculated from your verified training and used to determine your monthly discount tier. We record issued discount codes and attributed partner visits. Aggregate, anonymous statistics may be used to improve the product. We never sell your personal data.

Third parties

  • Apple: sign-in identity and Apple Health data you explicitly allow.
  • Google: Sign in with Google identity, Health Connect data you explicitly allow on Android, Firebase Cloud Messaging for notifications and Google Play Integrity checks that confirm workout uploads come from a genuine copy of the app.
  • Amazon Web Services (London, UK) hosts and stores your data, encrypted, as our processor. This includes Amazon SES, which sends the emails we send you (sign-in codes and a welcome message), and Amazon SNS, which delivers push notifications through Apple and Google.
  • Affiliate networks and brands: a reward click may identify that the visit came from Tri-It; it does not share your profile.

Your rights (UK GDPR)

You can delete your account at any time from the in-app Profile screen. Deletion removes your account, activities, workout detail, profile photo, Fuel ledger and redemptions from our systems. You may also request a copy of your data or correction of it by contacting us.

How long we keep it

Your data is retained while your account is active. Deleting your account removes it from our systems immediately, including your push-notification registrations and, if you signed in with Apple, your Sign in with Apple connection. Operational backups age out within 35 days and technical logs within 90 days. Waitlist emails are kept until you ask us to remove them.

Contact

Questions or requests: privacy@tri-it.app.