Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

As the data controller, Peek Dynamics determines the purposes and means of processing your personal data and is responsible for ensuring your data is handled in compliance with applicable data protection legislation.

2. Data We Collect

Account Information

• Email address
• Name (optional)

Fitness Data from Garmin Connect

• Activities (running, cycling, climbing, gym sessions)
• Performance metrics (heart rate, pace, power, distance, duration)
• Training status and recovery metrics
• Historical activity data

Usage Data

• Conversations with the AI coach
• Training plans and calendar data
• App preferences and settings

3. How We Use Your Data & Legal Basis

We process your personal data only when we have a valid legal basis under GDPR. Below is an overview of our processing activities and their legal basis:

Contract Performance (Article 6(1)(b) GDPR)

We process the following data because it is necessary to provide you with the CrossLoad service:

• Account information (email, name) — to create and manage your account
• Fitness data from Garmin — to provide personalized training recommendations
• Training plans and calendar data — to generate and adjust your training schedule
• Syncing workouts to your Garmin device — to deliver planned workouts

Consent (Article 6(1)(a) GDPR)

We process the following data based on your explicit consent:

• Conversations with the AI coach — when you use the chat feature, you consent to your messages and relevant activity data being processed by Anthropic's Claude API

You may withdraw your consent at any time by discontinuing use of the AI chat feature or by contacting us.

Legitimate Interest (Article 6(1)(f) GDPR)

We process the following data based on our legitimate interest to improve our services:

• Aggregated and anonymized usage patterns — to improve our coaching algorithms
• App preferences and settings — to enhance user experience

You have the right to object to processing based on legitimate interest.

4. AI Processing

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following categories of recipients (data processors):

• Garmin International, Inc. (USA) — to sync activities and workouts via the Garmin Connect API. Garmin acts as an independent data controller for data within their platform.
• Anthropic, PBC (USA) — to provide AI coaching features via the Claude API. Data transfers to the USA are protected by Standard Contractual Clauses (SCCs). Anthropic does not use your data to train their models.
• Infrastructure providers (EU) — for hosting and data storage within the European Union.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), specifically in the United States. For these transfers, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Assessment of the legal framework in the recipient country
• Additional technical and organizational measures where necessary

6. Data Storage & Security

Your data is stored on secure servers within the European Union. We implement the following security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest
• Access limited to essential operations only
• Regular security reviews

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at info@crossload.eu. We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where we are legally required to retain it.

9. Cookies

CrossLoad uses only essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of CrossLoad after changes constitutes acceptance of the updated policy.