Privacy Policy — Sense
Sense (“we”, “our”, “us”) operates the Sense application and related digital services. We are committed to protecting your privacy and being transparent about how we handle your information. This Privacy Policy describes what data we collect, how we use it, how we store it, and the rights you have under applicable privacy laws, including the EU General Data Protection Regulation (GDPR).
1. Overview
Sense provides data-driven fitness coaching and insights by analyzing your activity data from Garmin Connect. By creating an account or connecting your Garmin device, you acknowledge and agree to the practices outlined in this Privacy Policy.
2. Data We Collect
We collect personal data in three categories: (A) data you provide directly, (B) data obtained from Garmin Connect (with your consent), and (C) technical/log data.
A. Personal Account Information
When you register for Sense, we collect:
- Email address (via our authentication provider Supabase).
- Password (securely hashed and inaccessible to us).
- Optional profile information if you choose to provide it later.
B. Health & Fitness Data (via Garmin Connect)
With your explicit permission during the Garmin authorization flow, we receive:
- Activity Data — Activity type (running, cycling, etc.), duration, distance, timestamps, and general workout stats.
- Biometric Metrics — Heart rate and HRV data, speed/pace, cadence, elevation, power metrics, and related physiological indicators.
- Location Data — GPS coordinates recorded during activities (used to analyze routes, terrain, and weather context for performance insights and gear recommendations).
C. Technical & Usage Data
We collect basic device and usage information for security and troubleshooting, including:
- IP address
- Browser type & version
- Operating system
- Time of access
- Error logs and performance data
3. How We Use Your Data
We use your data only for the purposes described below:
A. Provide and Improve Coaching Insights
We analyze your activity and biometric metrics to generate personalized performance guidance, recommendations, and summary reports.
B. Generate Gear and Training Recommendations
GPS and intensity data allow us to determine which gear works best for you and under which conditions.
C. Service Quality and Account Management
We use your information to maintain account access, store your preferences, and ensure platform functionality.
D. No Advertising, No Data Sales
We do not:
- Sell your personal data
- Share your personal or health data with advertisers
- Use your data for targeted advertising or behavioral profiling
4. Legal Basis for Processing (GDPR)
We process your data based on the following GDPR grounds:
- Consent — For receiving Garmin Connect data.
- Contractual necessity — To provide you with fitness insights and account functionality.
- Legitimate interest — For platform security, debugging, and service improvement.
You may withdraw consent at any time (see Section 6).
5. Data Storage & Security
A. Storage Provider: Supabase
We use Supabase (PostgreSQL-based) to store account data and processed training data. Supabase provides:
- Encryption at rest and in transit
- Secure password hashing
- Strict access control
B. Security Measures
We implement industry-standard protections, including:
- Role-based database access
- Secure API routes
- HTTPS-only transport
- Monitoring for suspicious login attempts
However, no system is 100% secure. We continuously improve our safeguards.
6. Your Rights & Controls
You have full control over your data.
A. Withdraw Garmin Access
You may disconnect Sense from Garmin Connect at any time via the Garmin settings panel. After disconnection, we no longer receive new data.
B. Data Deletion
You may request deletion of all personal and health data stored by Sense by emailing: driekvandenbeuken@outlook.com. We will delete your data within 30 days and confirm completion.
C. Data Access & Correction
You may request:
- A copy of the data we hold about you
- Corrections to inaccurate information
Contact us at the email below.
7. Data Sharing with Third Parties
We only share data in limited cases:
A. Service Providers (Supabase)
Supabase processes data strictly on our behalf.
B. AI Processing (Anonymized)
To generate coaching text, we may process anonymized metric values through LLMs. We do not send:
- Your email
- Your name
- Direct identifiers
Only raw anonymized metrics (e.g., “avgHR: 152”).
C. Legal Requirements
We may disclose data if required to comply with law enforcement or legal obligations.
8. Data Retention
We retain your personal data only as long as your account is active or as required to provide our services. If you delete your account or revoke Garmin access, related data will be removed from our active systems.
9. Children’s Privacy
Sense is not intended for individuals under 16 years of age. We do not knowingly collect data from children. If we learn that we have inadvertently collected such data, we will immediately delete it.
10. Updates to This Policy
We may update this Privacy Policy periodically. When changes occur, we will:
- Update the “Last Updated” date at the top
- Publish the new version on this page
- Provide additional notice if the changes are significant
11. Contact Information
If you have questions about this Privacy Policy or your data rights, contact:
Sense
Email: driek.vandenbeuken@senseconnects.com
Location: The Netherlands