Privacy policy
Who is responsible
TriQuest is operated by RoxxJazz AB (reg. no. 559612-1805), Sweden, the controller of the processing described here. Send questions about your data to support@triquest.ai.
What we process
- Account: name, email address, language, units and password (the password is stored only as a hash, never in plain text).
- Profile and planning: what you tell us about yourself and your training, such as year of birth, sex, height, weight, experience, sports, races, when you can train, your thresholds (FTP, threshold heart rate, threshold pace, CSS), your gear, nutrition and home location for weather and routes.
- Training: planned and completed workouts with time, distance, power, cadence, speed, laps and GPS tracks, and your feedback, such as perceived exertion, how you felt, perceived sleep, motivation and notes.
- Health data (only with your consent, see Health data): heart rate, HRV, sleep and other daily values from the watches and apps you connect, injuries, illness, pain and photos you record in Body, a training pause because you're ill or injured, and your menstrual cycle if you choose to track it.
- From services you connect: see Connected services.
- Coach: what you write to TriQuest Coach, the pictures and documents (PDF, Word, text) you attach, and what the Coach remembers about you: short facts about you, a diary with a note per day you talked and a searchable form of your messages (so the Coach finds what bears on a question). The Coach keeps it by itself; you see, correct and remove it under Settings › Coach › What the Coach knows about you.
- Human coach: if you connect a coach in TriQuest, your messages, meetings and video calls, and what you give the coach access to. Video calls are not recorded.
- Social: username, profile picture, workouts you share with friends, comments and reactions, and your position during a workout if you choose to show it live.
- Purchases: if you buy a subscription, a random id for your account and the purchase's status (tier, period, renewal, cancellation, refund). We never receive your card details.
- Technical: your phone's push token if you allow notifications (iPhone or Android), and technical request logs (without the content of what you write).
What we use it for, and on what basis
- Providing the service you chose (contract): building, scheduling and adapting your training plan, showing your completed training, calculating your training load, fitness and fatigue, letting TriQuest Coach answer your questions and propose changes – nothing in the plan changes until you approve it – and showing what you choose to share with friends or a coach.
- Health data (your explicit consent): as described under Health data.
- Purchases and bookkeeping (contract and legal obligation): handling your subscription and keeping what Swedish bookkeeping law requires.
- Notifications and email (contract, and your choice): notifications you've allowed, emails about your account and reminders you've turned on. Other email from TriQuest – the welcome email, tips, summaries and news, such as an email a few days after you start – comes until you turn off Email from TriQuest under Settings › Account & security or with the link in the email. Emails about sign-in, security, your account and receipts always come.
- Security and operations (legitimate interest): protecting the account against intrusion and abuse, finding faults and keeping the service available.
Connections to other services, sharing and notifications only happen when you turn them on. We never sell your data and never use it for advertising. No data in TriQuest is used to train AI models, neither by us nor by AIXIA AB.
Health data
Health data is sensitive personal data. TriQuest processes it only with your explicit consent, which we ask for the first time you sign in on the web or in the app. We keep when you answered and which text you answered.
- What it covers: heart rate, HRV, sleep and other daily values from the watches and apps you connect, and the sessions you get from them; heart rate in workouts you record with TriQuest; injuries, illness, pain, photos and check-ins in Body; a training pause because you're ill or injured; and your menstrual cycle if you choose to track it (which also has its own choices for whether it's tracked and whether the Coach may read it). The Coach remembering what you tell it about your health is a consent of its own: without your yes there the Coach remembers nothing about your health, and a no there affects nothing else. If you say no to health data, the Coach doesn't remember your health either.
- For what: planning and following up your training – in Today's form, Recovery, Body and by the Coach – and showing it to a coach you've given access. Today's form and the Coach give training advice, not medical advice.
- If you say no, you can still use your plan and races and log sessions yourself, but TriQuest gets no sessions or health values from connected watches and apps and shows no health data.
- Withdrawing: you can withdraw consent at any time under Settings › Privacy, as easily as you gave it. We then stop getting and using health data; what is already saved stays hidden until you consent again or delete your account.
Connected services
Garmin Connect
You choose whether to connect Garmin Connect, and you approve at Garmin what TriQuest may read and send.
- Workouts to your watch: TriQuest sends your planned sessions to Garmin Connect, with steps and targets, so they are on your Garmin. When a session changes or is removed, the copy in Garmin Connect follows.
- Sessions from Garmin: TriQuest reads the activities you record, with summary, data over time (such as heart rate, power, speed and GPS) and laps. We use them like sessions from other connected services: to show your training, mark planned sessions as completed, calculate your training load and adapt your plan.
- Sleep and health: TriQuest reads sleep, HRV, resting heart rate and other daily values from Garmin Connect, and shows them beside your training.
- Menstrual cycle: only if you have turned on Menstrual cycle in TriQuest do we read your periods and symptoms from Garmin Connect.
- Your Garmin account: when you connect, TriQuest reads your user id at Garmin, so that Garmin's notices about new activities can be matched to you.
- Disconnect: when you disconnect Garmin Connect in TriQuest, or remove TriQuest under connected apps in Garmin Connect, the keys are deleted and nothing more is read or sent. What was already read stays in your training until you delete it or your account.
Other training services and apps
You can connect TriQuest to other training services and apps yourself, such as watches and training platforms. Reading sessions and sending sessions are two separate settings, both off by default.
- Get sessions: when you turn it on, TriQuest reads your activities in the service: summary, data recorded over time (such as heart rate, power, speed and GPS), laps, perceived exertion and the gear you used. If you like, your last 7, 30 or 90 days are read as well. We use them to show your training, mark planned sessions as completed, calculate your training load and adapt your plan. Activities read become part of your training in TriQuest and are used like the rest of it.
- Send completed workouts: when you turn it on, TriQuest uploads the sessions you complete to your account in the service. The service applies your own default for who sees them.
- Disconnect: disconnecting the service in TriQuest revokes TriQuest's access there and deletes the keys. You can also revoke it in the service's own settings for connected apps. Activities already read stay in your training until you delete them or your account.
ROUVY
Connecting ROUVY is your choice, and sending workouts and reading rides are two separate settings, both off by default.
- Send workouts to ROUVY: when you turn it on, TriQuest sends your coming bike workouts to your ROUVY account as workouts on their day: their steps, power targets and your FTP. When a workout changes, TriQuest replaces its copy; when it is skipped or cancelled, the copy is removed.
- Get rides from ROUVY: when you turn it on, TriQuest reads the rides you finish in ROUVY: summary, data recorded over time (such as power, heart rate, cadence, speed and the route's position) and laps. If you like, your last 7, 30 or 90 days are read as well. We use them like the sessions from other connected services: to show your training, mark planned sessions as completed, calculate your training load and adapt your plan.
- Your ROUVY account: on connecting, TriQuest also reads your ROUVY user id, so that ROUVY's notifications about a finished ride can be matched to you.
- Disconnect: disconnecting ROUVY in TriQuest revokes TriQuest's access at ROUVY and deletes the keys; revoking it in ROUVY does the same. Rides already read stay in your training until you delete them or your account, and workouts already sent stay in ROUVY.
Intervals.icu
Connecting Intervals.icu is your choice, and sending workouts and reading are two separate settings, both off by default.
- Send workouts to Intervals.icu: when you turn it on, TriQuest puts your coming workouts on your Intervals.icu calendar: name, description, length and – for bike, run and swim workouts – the steps with your own targets (watts, heart rate, pace). When a workout changes TriQuest updates the copy, and when you skip or cancel it the copy is removed. Intervals.icu may in turn send the workouts on to services you connected there.
- Get from Intervals.icu: when you turn it on, TriQuest reads your sessions in Intervals.icu (summary, data recorded over time and laps) and your wellness there: resting heart rate, HRV, sleep, weight, body fat, blood oxygen and steps. If you choose, your last 7, 30 or 90 days are read as well. We use it as the sessions and wellness from other connected services: to show your training and recovery, mark planned workouts done and adapt your plan. Sessions Intervals.icu got from some other services aren't read from it.
- Your Intervals.icu account: on connecting, TriQuest receives your Intervals.icu athlete id, so that Intervals.icu's notifications of a new session can be linked to you.
- Disconnect: disconnecting Intervals.icu in TriQuest revokes TriQuest's access at Intervals.icu and deletes the keys. What was already read stays in your training until you delete it or your account, and workouts already sent stay in Intervals.icu.
Polar
Connecting Polar is your choice, and reading is a separate setting, off by default. TriQuest sends nothing to Polar.
- Connecting: when you connect, TriQuest registers you with Polar AccessLink under an id of its own that reveals nothing about you. Polar only shares data once you have accepted its data-sharing consents, and only what synced after you connected.
- Read from Polar: when you turn it on, TriQuest reads your sessions in Polar Flow (summary, data recorded over time, route and laps) and your health data there: sleep with its stages, HRV, heart rate and breathing during the night (Nightly Recharge), steps and weight. If you want, your last 7 or 30 days are read too. We use it like the sessions and health data from other connected services: to show your training and recovery, mark planned workouts as done and adapt your plan.
- Disconnecting: when you disconnect Polar in TriQuest, your registration with Polar is deleted, which revokes TriQuest's access, and the keys are erased. Sessions and health data already read stay in TriQuest until you delete them or your account.
Apple Health
The TriQuest iPhone app reads only the Apple Health data types you allow, such as workouts with heart rate and routes, sleep and resting heart rate, and sends them to your TriQuest account. You can change the permission in your iPhone's settings at any time. Data from Apple Health is used only for your training in TriQuest, never for advertising, and is never disclosed to anyone else.
Health Connect
The TriQuest Android app likewise reads only the Health Connect data types you allow, and sends them to your TriQuest account. You change the permission in Health Connect at any time.
Who receives data
- Operations: TriQuest, its database, pictures and files and video calls run on servers we manage ourselves. Email is sent from our own email server.
- AIXIA AB, which hosts the AI behind TriQuest Coach on servers in Sweden (Gothenburg and Falkenberg): when you use the Coach, your question, attached pictures and documents and what the Coach reads in TriQuest for the answer are sent – which can be anything TriQuest has about you: your name, your profile and home address, your settings, sessions and everything synced with them, gear, your TriQuest plan and your coach. Never your email address or password, and health data only with your consent. The provider processes it only to produce the answer, on our behalf.
- Apple and RevenueCat for purchases in the iPhone app, and Google and RevenueCat for purchases in the Android app: Apple or Google takes the payment, and RevenueCat passes the purchase's status to us. They get a random id for your account, never your name or email from us.
- RevenueCat and Stripe for purchases on the web: the checkout is RevenueCat's and the payment is handled by Stripe, which receives your card details – we never do. They get a random id for your account and the email address in the checkout (prefilled with the account's, for receipts).
- Garmin, ROUVY, Intervals.icu and other training services and apps you've connected yourself, when you've chosen to send workouts there. They are responsible for what they receive under their own terms.
- Apple and Google for notifications to your phone.
- Maps and weather: map images load from MapTiler, and forecasts are fetched from the Norwegian Meteorological Institute for a location, without your identity.
- Other TriQuest users, only what you share: workouts with friends, your live position during a workout, or what you give a coach access to.
Providers that process data on our behalf do so under agreements and only for us. Some recipients, such as Apple, Google, RevenueCat and Stripe, may process data outside the EU/EEA, mainly in the United States. This happens with the safeguards the GDPR requires: the European Commission's decision on the EU–US Data Privacy Framework for companies certified under it, and otherwise the Commission's standard contractual clauses.
How long we keep it
We keep your data for as long as you have an account. Delete a workout, a picture or a memory and it is gone. Delete your account and everything that belongs to it is removed: profile, plan, training, health data, Body, feedback, Coach conversations and memory, social content, pictures and connections. What Swedish bookkeeping law requires about purchases we keep for seven years. Technical logs are kept for six months. Your support tickets (what you wrote, attachments and the answers) are kept for 24 months after the ticket is closed and are deleted with your account. A log of the email we've sent you (when, which kind, its subject, its text with the links' keys hidden, and whether it went through) is kept for twelve months, for support and troubleshooting. The system is backed up daily, and backups are kept for 30 days and then overwritten; a deleted account therefore disappears from them within 30 days.
Security
Traffic to TriQuest is encrypted, passwords are stored only as hashes, keys to connected services are stored encrypted, and sensitive pictures, such as pictures in Body, are sealed before they're stored. Only the people who run TriQuest have access to the servers. Should something happen that affects your data, we report it to the Swedish Authority for Privacy Protection and tell you when the law requires it.
Age
You must be at least 16 years old to create a TriQuest account.
Your rights
You have the right to know what data we hold about you, to have errors corrected, to have your data erased, to receive it in a machine-readable format, to restrict processing, to object to processing based on our legitimate interest and to withdraw a consent. Write to support@triquest.ai and we'll help you within a month. You delete your account yourself under Settings › Profile › Delete account, on the web and in the app.
If you're unhappy with how we process your data, you can complain to the Swedish Authority for Privacy Protection (imy.se).
Changes
If the policy changes, we update this page and the date above. We tell you about larger changes in TriQuest.