1. Introduction

Effective Date: September 12, 2025

This Privacy Policy describes how Backroads Endurance Company (“we,” “us,” or “our”) collects, uses, stores, and protects personal data and activity data provided by users (“you”) when you connect third-party services such as Garmin Connect and training platforms to our application.

Garmin Connect integration: We integrate with the Garmin Connect™ platform via secure authorization (OAuth 2.0 / PKCE). When you connect your Garmin account, you provide express consent for us to import permitted activity and health data from Garmin Connect into our platform for the purposes described in this policy.

Garmin’s collection and use of your data is also governed by Garmin’s privacy practices. You can review Garmin’s privacy notice here: https://www.garmin.com/privacy/connect

We are committed to protecting your privacy and handling your data responsibly, transparently, and in accordance with applicable data protection laws.

2. Data We Collect

When you explicitly authorize access through a connected service (such as Garmin Connect or a training platform), we may collect the following categories of data, only to the extent permitted by your authorization:

2.a Activity & Training Data

• Workout activities (e.g., runs)
• Distance, duration, pace, and splits
• Heart rate during activity
• Training structure or planned workouts (if provided by a connected platform)

2.b Health & Wellness Data

• Heart rate variability (HRV)
• Resting heart rate
• Sleep duration and sleep quality metrics
• Recovery or readiness-related metrics provided by the connected service
• Daily wellness summaries

2.c User-Provided Data

• Short survey responses you voluntarily submit (e.g., perceived exertion, subjective readiness, notes)
• Feedback or comments related to training sessions

2.d Account & Identifier Data

• Internal user or athlete identifiers
• Team or group association (if applicable)

3. How We Use Your Data

We use collected data solely for the purpose of providing training and recovery insights, including:

• Generating athlete-facing summaries of training sessions
• Providing coach-facing summaries and team-level trends
• Identifying patterns related to training load, recovery, and readiness
• Delivering notifications or reminders related to training feedback
• Improving the accuracy and usefulness of our analysis features

Where our analytics or reports incorporate Garmin device-sourced data, we will identify Garmin as a data source in the user experience and/or exports when applicable.

We do not use your data for advertising, marketing to third parties, or resale.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal or activity data.

Data may be shared only in the following limited circumstances:

• With authorized coaches or staff associated with your team, where you have opted into a team-based experience
• With service providers that support application functionality (e.g., cloud hosting, messaging services), under strict confidentiality and data-processing agreements
• If required by law, regulation, or legal process

All service providers are contractually obligated to protect your data and use it only for the purposes specified by us.

5. Data Storage & Security

We take reasonable and appropriate measures to protect your data, including:

• Encryption of sensitive data at rest and in transit
• Access controls to limit data access to authorized systems and personnel
• Logical separation of personally identifiable information (PII) from analytical processing where feasible
• Secure token-based authentication for third-party integrations

No system is 100% secure, but we continuously work to maintain strong safeguards.

6. Data Retention

We retain personal and activity data only for as long as necessary to provide our services or as required by law.

If you disconnect a third-party integration or request account deletion:

• We stop collecting new data immediately
• Stored data is deleted or anonymized within a reasonable timeframe, unless retention is required for legal or operational purposes

7. User Control & Consent

You are always in control of your data.

You may:

• Grant or revoke access to third-party services (e.g., Garmin Connect) at any time
• Request deletion of your data
• Request information about the data we have collected about you

Revoking access: If you revoke Garmin Connect access through Garmin (or disconnect the integration within our application), we will stop importing new data from Garmin Connect for your account going forward.

Note: You can manage Garmin permissions in your Garmin account settings. Revocation typically takes effect immediately for future data transfers.

8. No Medical Diagnosis Disclaimer

Our application provides informational training and recovery insights only.

We do not provide medical advice, diagnosis, or treatment. Any health-related insights are intended to support training awareness and should not replace consultation with a qualified medical professional.

9. Children’s Privacy

Our services are not directed toward children under the age of 13 without appropriate parental or guardian consent. Where applicable, team-based programs are responsible for ensuring appropriate consent is obtained.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected by updating the “Effective Date” and, where appropriate, notifying users.

11. Contact Information

If you have questions about this Privacy Policy or how your data is handled, you may contact us at:

• Email: admin@backroadsendurance.com
• Company: Backroads Endurance Company
• Website: backroadsendurance.com

Backroads Endurance Company is operated by Blake Dircksen DPT, PT PLLC.