8. Children's Privacy

Privacy Policy.

Veer Athlete Hub LLC ("we," "us," or "our") is dedicated to safeguarding the privacy of athletes and fitness enthusiasts who use our platform. This Privacy Policy outlines how we collect, use, and share your personal data, including the health and fitness data we receive from various integrations you choose to connect.

Privacy Policy.

Last updated:
September 17, 2025

1. What Data We Collect

We may collect and process the following types of personal data:

Account Information

Name, email address, user preferences, and account settings
Profile information (training goals, event dates, fitness level)

Health & Fitness Data

When you authorize connections to third-party services, we may collect:

Current Data Integration Method: Data from Garmin Connect, Apple Health, Strava, TrainingPeaks, Coros, Polar, Oura, and other platforms you connect is currently accessed through Terra API, a secure health data aggregation service that acts as an intermediary between Veer and these platforms. Terra normalizes data into a consistent format and provides secure OAuth authentication. We may add direct API integrations with certain platforms (such as Garmin Health API) in the future.

Data collected from Garmin Connect:

Workout activities (duration, distance, sport type, start/end times)
Heart rate data (average, maximum, time-series samples)
GPS/location data (routes, coordinates, elevation)
Power metrics (cycling/running power, if available)
Cadence, speed, and pace data
Daily health summaries (steps, calories, stress levels, body battery)
Sleep data (duration, stages, quality metrics)
Physiological metrics (VO2 max, recovery time, training load)

Data collected from Apple Health:

Workout activities and health metrics (similar to Garmin data above)
Heart rate, step count, active energy
Sleep analysis and respiratory rate
GPS routes for outdoor activities

Data collected from Other Connected Services:

Training data from TrainingPeaks, Strava, Coros, Polar, Oura, and other platforms you connect
Structured workout plans and completed training sessions

Device & Integration Data

Device identifiers and types (e.g., Garmin Forerunner 965, Apple Watch Series 9)
Integration authorization tokens (securely encrypted)
Synchronization logs and timestamps

Usage Data

App interactions, features used, and session duration
Performance logs and crash reports (anonymized when possible)
Device information (OS version, app version, device model)

Important: We only collect health and fitness data from third-party services after you explicitly authorize the connection through OAuth or platform-specific permissions (e.g., iOS HealthKit authorization).

We may collect and process the following types of personal data:

Account Information

Name, email address, user preferences, and account settings
Profile information (training goals, event dates, fitness level)

Health & Fitness Data

When you authorize connections to third-party services, we may collect:

Data collected from Garmin Connect:

Workout activities (duration, distance, sport type, start/end times)
Heart rate data (average, maximum, time-series samples)
GPS/location data (routes, coordinates, elevation)
Power metrics (cycling/running power, if available)
Cadence, speed, and pace data
Daily health summaries (steps, calories, stress levels, body battery)
Sleep data (duration, stages, quality metrics)
Physiological metrics (VO2 max, recovery time, training load)

Data collected from Apple Health:

Workout activities and health metrics (similar to Garmin data above)
Heart rate, step count, active energy
Sleep analysis and respiratory rate
GPS routes for outdoor activities

Data collected from Other Connected Services:

Training data from TrainingPeaks, Strava, Coros, Polar, Oura, and other platforms you connect
Structured workout plans and completed training sessions

Device & Integration Data

Device identifiers and types (e.g., Garmin Forerunner 965, Apple Watch Series 9)
Integration authorization tokens (securely encrypted)
Synchronization logs and timestamps

Usage Data

App interactions, features used, and session duration
Performance logs and crash reports (anonymized when possible)
Device information (OS version, app version, device model)

We may collect and process the following types of personal data:

Account Information

Name, email address, user preferences, and account settings
Profile information (training goals, event dates, fitness level)

Health & Fitness Data

When you authorize connections to third-party services, we may collect:

Data collected from Garmin Connect:

Workout activities (duration, distance, sport type, start/end times)
Heart rate data (average, maximum, time-series samples)
GPS/location data (routes, coordinates, elevation)
Power metrics (cycling/running power, if available)
Cadence, speed, and pace data
Daily health summaries (steps, calories, stress levels, body battery)
Sleep data (duration, stages, quality metrics)
Physiological metrics (VO2 max, recovery time, training load)

Data collected from Apple Health:

Workout activities and health metrics (similar to Garmin data above)
Heart rate, step count, active energy
Sleep analysis and respiratory rate
GPS routes for outdoor activities

Data collected from Other Connected Services:

Training data from TrainingPeaks, Strava, Coros, Polar, Oura, and other platforms you connect
Structured workout plans and completed training sessions

Device & Integration Data

Device identifiers and types (e.g., Garmin Forerunner 965, Apple Watch Series 9)
Integration authorization tokens (securely encrypted)
Synchronization logs and timestamps

Usage Data

App interactions, features used, and session duration
Performance logs and crash reports (anonymized when possible)
Device information (OS version, app version, device model)

2. Why We Collect Your Data

We collect and process your data to:

Deliver personalized training insights: Analyze your workouts to provide AI-powered training recommendations, recovery guidance, and performance trends
Track progress and recovery: Monitor training load, recovery metrics (VRI, VEI, VSI), and readiness to train
Enable seamless data syncing: Connect with Garmin Connect, Apple Health, TrainingPeaks, and other platforms you choose to integrate
Power intelligent features: Generate weekly training recaps, detect training patterns, calculate Training Stress Score (TSS), and provide event-specific preparation guidance
Improve our services: Analyze aggregated, anonymized usage patterns to enhance features, fix bugs, and optimize performance
Provide customer support: Respond to your inquiries and troubleshoot technical issues

We collect and process your data to:

Deliver personalized training insights: Analyze your workouts to provide AI-powered training recommendations, recovery guidance, and performance trends
Track progress and recovery: Monitor training load, recovery metrics (VRI, VEI, VSI), and readiness to train
Enable seamless data syncing: Connect with Garmin Connect, Apple Health, TrainingPeaks, and other platforms you choose to integrate
Power intelligent features: Generate weekly training recaps, detect training patterns, calculate Training Stress Score (TSS), and provide event-specific preparation guidance
Improve our services: Analyze aggregated, anonymized usage patterns to enhance features, fix bugs, and optimize performance
Provide customer support: Respond to your inquiries and troubleshoot technical issues

We collect and process your data to:

Deliver personalized training insights: Analyze your workouts to provide AI-powered training recommendations, recovery guidance, and performance trends
Track progress and recovery: Monitor training load, recovery metrics (VRI, VEI, VSI), and readiness to train
Enable seamless data syncing: Connect with Garmin Connect, Apple Health, TrainingPeaks, and other platforms you choose to integrate
Power intelligent features: Generate weekly training recaps, detect training patterns, calculate Training Stress Score (TSS), and provide event-specific preparation guidance
Improve our services: Analyze aggregated, anonymized usage patterns to enhance features, fix bugs, and optimize performance
Provide customer support: Respond to your inquiries and troubleshoot technical issues

3. How We Use & Share Your Data

We use your data strictly for the purposes listed above. We do not sell or rent your personal or fitness data to third parties. We only share your data in specific, limited circumstances:

With Services You Connect

When you explicitly authorize connections to third-party services (Garmin Connect, Apple Health, TrainingPeaks, etc.), we:

Receive data from those services via their APIs (Garmin Health API, Apple HealthKit, etc.)
May send your data back to those services if you enable two-way sync features
You can disconnect these services at any time from your Veer account settings

With Data Processing Partners

We use Terra API (Terra Enabling Developers Ltd.) as our health data aggregation partner. Terra:

Acts as a secure intermediary between Veer and some connected services (Garmin, Apple Health, etc.)
Normalizes health data into a consistent format for processing
Is contractually obligated to protect your data and only use it to provide services to Veer
Does not sell or use your health data for their own purposes
Terra's privacy policy: https://tryterra.co/privacy

With Secure Service Providers

We share data with trusted third-party providers who assist us in delivering our services:

Firebase/Google Cloud Platform: Secure cloud hosting, database services, and authentication
AI Services: Gemini AI (Google) and Perplexity AI for generating training insights and analysis
Analytics Providers: Anonymized usage analytics to improve app performance

These providers are contractually obligated to:

Protect your data with industry-standard security measures
Only use data for the specific services they provide to Veer
Not sell or share your data for their own purposes

As Required by Law

We may disclose your data if legally required:

In response to a valid court order, subpoena, or government request
To protect our rights, property, safety, or that of our users or the public
To enforce our Terms of Service or investigate potential violations
To prevent fraud, security incidents, or illegal activity

We will notify you of such requests unless prohibited by law.

We use your data strictly for the purposes listed above. We do not sell or rent your personal or fitness data to third parties. We only share your data in specific, limited circumstances:

With Services You Connect

When you explicitly authorize connections to third-party services (Garmin Connect, Apple Health, TrainingPeaks, etc.), we:

Receive data from those services via their APIs (Garmin Health API, Apple HealthKit, etc.)
May send your data back to those services if you enable two-way sync features
You can disconnect these services at any time from your Veer account settings

With Data Processing Partners

We use Terra API (Terra Enabling Developers Ltd.) as our health data aggregation partner. Terra:

Acts as a secure intermediary between Veer and some connected services (Garmin, Apple Health, etc.)
Normalizes health data into a consistent format for processing
Is contractually obligated to protect your data and only use it to provide services to Veer
Does not sell or use your health data for their own purposes
Terra's privacy policy: https://tryterra.co/privacy

With Secure Service Providers

We share data with trusted third-party providers who assist us in delivering our services:

Firebase/Google Cloud Platform: Secure cloud hosting, database services, and authentication
AI Services: Gemini AI (Google) and Perplexity AI for generating training insights and analysis
Analytics Providers: Anonymized usage analytics to improve app performance

These providers are contractually obligated to:

Protect your data with industry-standard security measures
Only use data for the specific services they provide to Veer
Not sell or share your data for their own purposes

As Required by Law

We may disclose your data if legally required:

In response to a valid court order, subpoena, or government request
To protect our rights, property, safety, or that of our users or the public
To enforce our Terms of Service or investigate potential violations
To prevent fraud, security incidents, or illegal activity

We will notify you of such requests unless prohibited by law.

We use your data strictly for the purposes listed above. We do not sell or rent your personal or fitness data to third parties. We only share your data in specific, limited circumstances:

With Services You Connect

When you explicitly authorize connections to third-party services (Garmin Connect, Apple Health, TrainingPeaks, etc.), we:

Receive data from those services via their APIs (Garmin Health API, Apple HealthKit, etc.)
May send your data back to those services if you enable two-way sync features
You can disconnect these services at any time from your Veer account settings

With Data Processing Partners

We use Terra API (Terra Enabling Developers Ltd.) as our health data aggregation partner. Terra:

Acts as a secure intermediary between Veer and some connected services (Garmin, Apple Health, etc.)
Normalizes health data into a consistent format for processing
Is contractually obligated to protect your data and only use it to provide services to Veer
Does not sell or use your health data for their own purposes
Terra's privacy policy: https://tryterra.co/privacy

With Secure Service Providers

We share data with trusted third-party providers who assist us in delivering our services:

Firebase/Google Cloud Platform: Secure cloud hosting, database services, and authentication
AI Services: Gemini AI (Google) and Perplexity AI for generating training insights and analysis
Analytics Providers: Anonymized usage analytics to improve app performance

These providers are contractually obligated to:

Protect your data with industry-standard security measures
Only use data for the specific services they provide to Veer
Not sell or share your data for their own purposes

As Required by Law

We may disclose your data if legally required:

In response to a valid court order, subpoena, or government request
To protect our rights, property, safety, or that of our users or the public
To enforce our Terms of Service or investigate potential violations
To prevent fraud, security incidents, or illegal activity

We will notify you of such requests unless prohibited by law.

4. Your Data, Your Control

Health Data Usage Permissions

You have complete control over which health data types Veer can access:

Garmin Connect: Manage permissions in your Garmin Connect account settings or disconnect from Veer's settings
Apple Health: Manage permissions in iOS Settings > Health > Data Access & Devices > Veer
Other Services: Disconnect at any time from Veer's account settings

Data Portability

You can request a machine-readable export of your data:

How to Request:

In-app: Go to Account Management > Export Data
By email: Contact support@goveerfit.com

What You'll Receive:

Complete export of your profile, workout history, training metrics, and recovery data
Delivered in JSON format (machine-readable)
Sent to your registered email address within 48 hours

Compliance: We meet CCPA and GDPR requirements for data portability (30-day maximum response time).

Deletion Rights

You can request permanent deletion of:

Your entire Veer account and all associated data
Specific data types or workout history
Data from specific time periods

Deletion Options:

30-Day Grace Period (Soft Delete):

Your account will be deactivated immediately
All data marked for deletion in 30 days
You can restore your account by signing in during this period
After 30 days, deletion becomes permanent and irreversible

Immediate Deletion (Hard Delete):

All data permanently deleted immediately
Includes profile, workouts, Terra connections, Cloud Storage files, and authentication
Cannot be undone or restored
Cascades across all 25+ data collections

How to Delete Your Account:

In-app: Go to Account Management > Delete Account > Choose deletion type
By email: Contact support@goveerfit.com (we'll process within 30 days)

What Gets Deleted:

User profile and account information
All workout and training data
Recovery metrics and AI-generated insights
Connected service authorizations (Terra OAuth tokens)
Cloud Storage files (profile images, exports)
Session data and device information

What We May Retain:

Anonymized, aggregated analytics (no personally identifiable information)
Data required by law (e.g., financial records for tax purposes)
Data necessary to prevent fraud or enforce Terms of Service

Opt-Out & Disconnect

You can disconnect integrated services at any time:

Go to Veer Settings > Connected Services
Tap the service you want to disconnect
Confirm disconnection

Note: Disconnecting a service stops future data syncing but does not automatically delete previously synced data. To delete historical data, use the deletion request process above.

Health Data Usage Permissions

You have complete control over which health data types Veer can access:

Garmin Connect: Manage permissions in your Garmin Connect account settings or disconnect from Veer's settings
Apple Health: Manage permissions in iOS Settings > Health > Data Access & Devices > Veer
Other Services: Disconnect at any time from Veer's account settings

Data Portability

You can request a machine-readable export of your data:

How to Request:

In-app: Go to Account Management > Export Data
By email: Contact support@goveerfit.com

What You'll Receive:

Complete export of your profile, workout history, training metrics, and recovery data
Delivered in JSON format (machine-readable)
Sent to your registered email address within 48 hours

Compliance: We meet CCPA and GDPR requirements for data portability (30-day maximum response time).

Deletion Rights

You can request permanent deletion of:

Your entire Veer account and all associated data
Specific data types or workout history
Data from specific time periods

Deletion Options:

30-Day Grace Period (Soft Delete):

Your account will be deactivated immediately
All data marked for deletion in 30 days
You can restore your account by signing in during this period
After 30 days, deletion becomes permanent and irreversible

Immediate Deletion (Hard Delete):

All data permanently deleted immediately
Includes profile, workouts, Terra connections, Cloud Storage files, and authentication
Cannot be undone or restored
Cascades across all 25+ data collections

How to Delete Your Account:

In-app: Go to Account Management > Delete Account > Choose deletion type
By email: Contact support@goveerfit.com (we'll process within 30 days)

What Gets Deleted:

User profile and account information
All workout and training data
Recovery metrics and AI-generated insights
Connected service authorizations (Terra OAuth tokens)
Cloud Storage files (profile images, exports)
Session data and device information

What We May Retain:

Anonymized, aggregated analytics (no personally identifiable information)
Data required by law (e.g., financial records for tax purposes)
Data necessary to prevent fraud or enforce Terms of Service

Opt-Out & Disconnect

You can disconnect integrated services at any time:

Go to Veer Settings > Connected Services
Tap the service you want to disconnect
Confirm disconnection

Note: Disconnecting a service stops future data syncing but does not automatically delete previously synced data. To delete historical data, use the deletion request process above.

Health Data Usage Permissions

You have complete control over which health data types Veer can access:

Garmin Connect: Manage permissions in your Garmin Connect account settings or disconnect from Veer's settings
Apple Health: Manage permissions in iOS Settings > Health > Data Access & Devices > Veer
Other Services: Disconnect at any time from Veer's account settings

Data Portability

You can request a machine-readable export of your data:

How to Request:

In-app: Go to Account Management > Export Data
By email: Contact support@goveerfit.com

What You'll Receive:

Complete export of your profile, workout history, training metrics, and recovery data
Delivered in JSON format (machine-readable)
Sent to your registered email address within 48 hours

Compliance: We meet CCPA and GDPR requirements for data portability (30-day maximum response time).

Deletion Rights

You can request permanent deletion of:

Your entire Veer account and all associated data
Specific data types or workout history
Data from specific time periods

Deletion Options:

30-Day Grace Period (Soft Delete):

Your account will be deactivated immediately
All data marked for deletion in 30 days
You can restore your account by signing in during this period
After 30 days, deletion becomes permanent and irreversible

Immediate Deletion (Hard Delete):

All data permanently deleted immediately
Includes profile, workouts, Terra connections, Cloud Storage files, and authentication
Cannot be undone or restored
Cascades across all 25+ data collections

How to Delete Your Account:

In-app: Go to Account Management > Delete Account > Choose deletion type
By email: Contact support@goveerfit.com (we'll process within 30 days)

What Gets Deleted:

User profile and account information
All workout and training data
Recovery metrics and AI-generated insights
Connected service authorizations (Terra OAuth tokens)
Cloud Storage files (profile images, exports)
Session data and device information

What We May Retain:

Anonymized, aggregated analytics (no personally identifiable information)
Data required by law (e.g., financial records for tax purposes)
Data necessary to prevent fraud or enforce Terms of Service

Opt-Out & Disconnect

You can disconnect integrated services at any time:

Go to Veer Settings > Connected Services
Tap the service you want to disconnect
Confirm disconnection

Note: Disconnecting a service stops future data syncing but does not automatically delete previously synced data. To delete historical data, use the deletion request process above.

5. Data Storage & Security

Security Measures

We employ industry-standard security practices to protect your data:

Encryption: Data encrypted at rest (AES-256) and in transit (TLS 1.3)
Access Controls: Role-based access limits for Veer team members
Authentication: Secure OAuth 2.0 flows for third-party integrations
Infrastructure: Hosting on Google Cloud Platform with SOC 2 compliance
Monitoring: Automated security alerts and regular security audits
Secure Development: Code reviews, vulnerability scanning, and penetration testing

Data Storage Locations

Your data is stored on secure servers in:

United States: Google Cloud Platform (Firebase Firestore, Cloud Functions)
Health Data Processor: Terra API servers (compliant with GDPR, HIPAA frameworks)

Data Retention

We retain your data only as long as necessary:

Active Accounts: While your account is active and for legitimate business purposes
Deleted Accounts: Permanently deleted within 90 days of account deletion request (or immediately for hard delete)
Legal Requirements: May retain certain data longer if required by law (e.g., financial records, fraud prevention)
Anonymized Data: May retain anonymized, aggregated data indefinitely for research and product improvement

Security Measures

We employ industry-standard security practices to protect your data:

Encryption: Data encrypted at rest (AES-256) and in transit (TLS 1.3)
Access Controls: Role-based access limits for Veer team members
Authentication: Secure OAuth 2.0 flows for third-party integrations
Infrastructure: Hosting on Google Cloud Platform with SOC 2 compliance
Monitoring: Automated security alerts and regular security audits
Secure Development: Code reviews, vulnerability scanning, and penetration testing

Data Storage Locations

Your data is stored on secure servers in:

United States: Google Cloud Platform (Firebase Firestore, Cloud Functions)
Health Data Processor: Terra API servers (compliant with GDPR, HIPAA frameworks)

Data Retention

We retain your data only as long as necessary:

Active Accounts: While your account is active and for legitimate business purposes
Deleted Accounts: Permanently deleted within 90 days of account deletion request (or immediately for hard delete)
Legal Requirements: May retain certain data longer if required by law (e.g., financial records, fraud prevention)
Anonymized Data: May retain anonymized, aggregated data indefinitely for research and product improvement

Security Measures

We employ industry-standard security practices to protect your data:

Encryption: Data encrypted at rest (AES-256) and in transit (TLS 1.3)
Access Controls: Role-based access limits for Veer team members
Authentication: Secure OAuth 2.0 flows for third-party integrations
Infrastructure: Hosting on Google Cloud Platform with SOC 2 compliance
Monitoring: Automated security alerts and regular security audits
Secure Development: Code reviews, vulnerability scanning, and penetration testing

Data Storage Locations

Your data is stored on secure servers in:

United States: Google Cloud Platform (Firebase Firestore, Cloud Functions)
Health Data Processor: Terra API servers (compliant with GDPR, HIPAA frameworks)

Data Retention

We retain your data only as long as necessary:

Active Accounts: While your account is active and for legitimate business purposes
Deleted Accounts: Permanently deleted within 90 days of account deletion request (or immediately for hard delete)
Legal Requirements: May retain certain data longer if required by law (e.g., financial records, fraud prevention)
Anonymized Data: May retain anonymized, aggregated data indefinitely for research and product improvement

6. Third-Party Service Privacy Policies

When you connect third-party services to Veer, those services' privacy policies also apply:

Garmin Connect: https://www.garmin.com/privacy/
Apple Health: https://www.apple.com/legal/privacy/
TrainingPeaks: https://www.trainingpeaks.com/privacy-policy/
Terra API: https://tryterra.co/privacy

We encourage you to review these policies to understand how your data is handled by these services.

When you connect third-party services to Veer, those services' privacy policies also apply:

Garmin Connect: https://www.garmin.com/privacy/
Apple Health: https://www.apple.com/legal/privacy/
TrainingPeaks: https://www.trainingpeaks.com/privacy-policy/
Terra API: https://tryterra.co/privacy

We encourage you to review these policies to understand how your data is handled by these services.

When you connect third-party services to Veer, those services' privacy policies also apply:

Garmin Connect: https://www.garmin.com/privacy/
Apple Health: https://www.apple.com/legal/privacy/
TrainingPeaks: https://www.trainingpeaks.com/privacy-policy/
Terra API: https://tryterra.co/privacy

We encourage you to review these policies to understand how your data is handled by these services.