Sprint Companion — privacy information

Private preview · 23 September 2026. This page explains the current private test. The privacy notice is still being completed before public launch.

Who is responsible

HansenSprint operates Sprint Companion. We are a Danish sole proprietorship, CVR 46631838, at Ceresbyen 61, 2.3, 8000 Aarhus C, Denmark. Contact simon@hansensprint.com with privacy questions or requests.

Training records on your device

Your session plans, results, split times, personal bests, notes, warm-up details, preferences and optional athlete name and club are stored in your browser. Optional session feedback may include readiness, perceived exertion, soreness and discomfort.

Companion calculates its training reports on your device. Its training functions do not upload your training history for analysis. This version has no public training profile or social feed. Parent billing does not provide access to an athlete’s training records.

Your local records are not a cloud backup or a separately encrypted vault. Protect access to your device and browser. Clearing site data, changing browsers or site addresses, or losing your device may make records unavailable. Download a backup from Settings if you want to keep a separate copy.

Information used online

We use your email address and account identifier to provide verified sign-in. Account records also include your declared age group, trial dates and access status. We collect an age-group declaration, not your date of birth; this is not independent age verification.

If a parent or guardian pays, we record the invitation and the link between payer and athlete so that payment grants access to the intended athlete. The payer verifies their own email address and confirms their role.

Stripe processes checkout and card information. Our billing integration uses customer and subscription identifiers, payment status and paid-access dates. Withdrawal notices include the payer’s name, verified email, agreement reference, declaration and submission time. The planned purchase-confirmation email also retains the agreement version and delivery evidence; it is not yet enabled in this preview. Payment details are entered on Stripe’s checkout; they are not entered into Companion’s training forms.

Hosting, sign-in, payment and email providers also process technical information to deliver and protect their services. This may include IP addresses, request information and service logs. Local training storage does not mean that no personal information is processed online.

Why information is used

Account sign-in, trial access and billing administration are used to provide the service you request. For an adult purchaser, necessary contract administration relies on GDPR Article 6(1)(b). For a younger athlete whose guardian arranges payment, we also assess the legitimate interests in providing that requested access while keeping payer and athlete records separate. Security and abuse prevention rely on the legitimate interest in protecting accounts and the service (Article 6(1)(f)); access is limited to what is needed for those purposes.

Support necessary to provide the service forms part of contract administration. Other enquiries and proportionate evidence needed to resolve disputes are handled for our legitimate interests in responding and establishing or defending claims. Records required by law are retained for that obligation (Article 6(1)(c)). We do not use a privacy-policy acceptance box as consent to all processing.

Optional recovery, soreness, discomfort and related feedback may reveal health information. We rely on your consent for that optional feature (Articles 6(1)(a) and 9(2)(a)). The feedback form explains the local storage and report use before you press Save. You can skip it and still log performance results. Use Remove optional feedback in the session summary to withdraw that permission and remove the session’s check-in and feedback from this device while keeping times and distances. This does not delete copies you previously downloaded or shared, and does not affect the lawfulness of earlier processing. Existing feedback is not retrospectively labelled as newly consented. Do not include health details in ordinary support messages.

You need an email address to sign in and the relevant account information to establish trial or paid access. Optional profile and training-feedback fields are not required for an account. Your training reports are local calculations for your review; they do not decide your legal rights or automatically change your training plan.

Providers

Supabase’s primary project database is hosted in Ireland. Resend sends our transactional email from Ireland, but stores email content and delivery logs in the United States. Resend’s data-processing terms include Standard Contractual Clauses for relevant international transfers. Its current Free plan retains email content and logs for 30 days and backups for 7 days. Sending from Ireland does not mean email data is stored only in the EU.

Provider roles can differ by activity. Stripe also processes information for its own fraud prevention and legal obligations; its privacy information explains those uses. Google processes support-mail customer data under its Cloud Data Processing Addendum. Squarespace’s Data Processing Addendum applies to relevant processing for our separate marketing website. These providers may process information outside the EEA, using applicable transfer safeguards such as Standard Contractual Clauses or adequacy arrangements. We do not claim that all online data stays in Denmark or the EU. Contact us for information about applicable safeguards. Sites does not provide a data-residency commitment for deployed sites and logs. The application is hosted on Sites; payment-card details are entered only on Stripe-hosted checkout pages.

Downloads and support

PDF reports and JSON backups are generated on your device. They can contain athlete details, results, notes and optional feedback. You choose where to save or share them. Deleting a record in Companion does not remove files you downloaded or sent elsewhere.

When you contact us, we receive your email, message and any attachments. Please avoid sending payment-card information, sign-in codes, health details or your entire training backup. Describe the issue first so we can identify what is needed.

Routine support conversations are kept for 12 months after resolution. Provider deletion and recovery periods can mean restricted backup copies remain temporarily after we delete a message. Material needed for an ongoing dispute is kept separately and reviewed when that dispute ends.

Storage and deletion

Companion uses browser storage for training records, preferences and account access, and an offline cache for application files. The separate parent billing page uses its own tab-session storage. Online sign-in and payment checks require an internet connection.

Local training records have no automatic expiry. You can delete individual sessions and personal bests or use the separate clear-training-data control. Download a backup first if you want to keep a copy.

Deleting an online account stops linked subscriptions and removes the account through our account-deletion process. It does not clear local training records or automatically refund payments. Records tied to a deleted athlete account are not automatically reassigned to a new account. Download a backup before closing that account.

Deleting a parent account does not delete the athlete’s account or training records. Account and access records remain while the account is open. Guardian invitations are valid for 24 hours; expiry stops their use but is not an automatic deletion promise. Payment history, delivery evidence, withdrawal notices, provider backups and support correspondence are not all erased by account deletion. Subscription agreement records and purchase-email delivery evidence are retained for three years after the subscription ends. They may be kept longer where needed for an unresolved dispute or a specific legal requirement; those exceptions are reviewed and the records are deleted when the reason no longer applies. Retained agreement or dispute evidence is restricted to handling outstanding obligations and claims. The remaining operational deletion schedule, including other record types, is still being completed before public launch; it is not a claim of indefinite retention. We cannot remotely erase your downloaded files or another device’s local records.

Your rights

For personal information HansenSprint processes, you can contact us to request access, correction, erasure, restriction, portability where applicable, or to object where applicable. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights are subject to legal conditions, and we may need to verify your identity proportionately. Do not send passwords or sign-in codes.

You may complain to Datatilsynet, the Danish Data Protection Agency, or another competent supervisory authority.

Age and changes

Companion is for athletes aged 16 and over. Athletes aged 16–17 use a separately verified adult parent or legal guardian for payment. Contact us to correct an age group or change the payer arrangement when an athlete turns 18.

We will update this information when our practices change and explain material changes appropriately.