Privacy Policy
Last updated: 31 October 2026.
This Privacy Policy applies to all of MatchWOD: the matchwod.com website and its waitlist, the phone app (iPhone and Android) and the watch app (Apple Watch), the web app (app.matchwod.com) and the server that connects them.
Summary
- Your health data remains on your phone. Heart rate, sleep and temperature recordings are never transmitted to the MatchWOD server; only your phone's own backup, if you have it enabled, includes them.
- Only a summary of each workout is sent to your account, and only with your consent. If you disable this option, the corresponding data is deleted.
- MatchWOD displays no advertising, uses no analytics tools and does not sell or disclose personal data to third parties.
- The app can be used without an account. An account is required to sync data, use the web app and join a box.
- You may delete your account in the app or on the web, and the data relating to you is deleted with it.
Data controller
The controller of your personal data is Gonçalo Beirão de Mira, who is responsible for MatchWOD. Any questions about your personal data may be sent to privacidade@matchwod.com.
Health data
With your permission, the app reads the following from your phone's health app (Health, on iPhone, or Health Connect, on Android): workouts, including distance, power and the route where available, heart rate (HR), HR variability, resting HR, blood oxygen, VO2 max, sleep, wrist or skin temperature and energy expended. This data is used solely to match each workout to your plan, to analyse the workout and to calculate your morning readiness. On Android, the app only reads from Health Connect and never writes to it. During a workout, the watch reads your HR and records the workout in Health. On outdoor runs, the watch also uses your location to record the route in Health; the route stays on your phone and is never sent to the MatchWOD server.
To keep your plan, the home screen widget and notifications up to date without you opening the app, the app may read this data in the background: on iPhone, when Health notifies it of new data; on Android, approximately every 15 minutes, if you grant Health Connect's background read permission. On the first read, workouts from the previous 120 days are also read (on Android, if you grant Health Connect's history access permission). On Android, the route of a workout is only read when you request it, workout by workout. The widget and notifications are prepared on the phone itself.
This data is processed exclusively on your phone and remains there. HR series, sample times, sleep and temperature data and routes are not transmitted to the MatchWOD server or to any third party, are not sold and are never used for advertising purposes or for credit, insurance or employment decisions. The only exception is your phone's system backup, described under «Workouts, plan and camera». The only values derived from this data that may leave your phone are the summaries described under «Results in your account», and only with your consent.
The use of information received from Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use requirements.
You may withdraw your permission at any time in the settings of Health, on iPhone, or of Health Connect, on Android.
Results in your account (optional)
If you consent, the app sends to your account a summary of each workout and of each of its parts: the result, average HR, HR recovery, work time, repetitions, TRIMP (training load calculated from your HR) and RPE (the rating of perceived exertion you gave the workout). This allows you to view your results on the web and, if you choose to share them, at your box.
Because these figures are derived from your HR, they are treated as health data and are kept only with your explicit consent. You may disable this option in Profile → Account, in which case the data held in your account is deleted immediately.
Account
To create an account, we request your email address, a password and, optionally, your name. Only a hash of the password is stored, from which the password cannot be recovered. If you sign in with Google, Google provides us with your email address, your name and your Google account identifier; your Google password is never disclosed to us. On Android, Google sign-in uses the Google account picker on the phone itself, which provides us with the same data. If you sign in with Apple, Apple provides us with your Apple account identifier and your email address (your real one or, if you choose «Hide My Email», an Apple relay address) and, only the first time, your name if you choose to share it. To comply with Apple's rules, we also keep an Apple code that is used solely to ask Apple to end the connection when the account is deleted. We also record the version of the terms of use in force when you created your account, together with the date.
We also request your sex (female or male), because community results are ranked by division, as in competitions.
To operate your account, we keep your open sessions and the devices on which you have signed in, identified by a label such as «Chrome on macOS», «iOS app» or «Android app» (without the IP address), the app version and the days on which the account was used. For days of use, only the date is kept, in order to count how many people use MatchWOD.
Workouts, plan and camera
Your plan, workouts, recipes, blocks, notes and settings, such as language, are stored in your account so that they sync between your phone and the web. Without an account, this data remains on your phone only.
When you import a workout from a photo, the text is recognised on the phone itself. The photo is not kept and only leaves your phone if you share it. On Android, recognition is performed by Google's ML Kit, which runs on the phone: the photo and the text are not sent to Google, but ML Kit sends Google technical data about its own operation (the phone model and operating system, the app version, an installation identifier that does not identify you, performance metrics and error codes). The camera is also used for the background of an image you share, and the app only saves to your photos the image you choose to save.
The backup (the .matchwod file) is created by you and remains wherever you save it. It does not pass through the MatchWOD server.
To draw the map of a route, the app downloads the map images (from Apple Maps, on iPhone, and from OpenStreetMap, on Android). That service learns your IP address and the area of the map displayed, but does not receive the route.
If you have your phone's system backup enabled (iCloud Backup, on iPhone, or Google backup, on Android), the data stored by the app, including data read from Health or Health Connect, is included in that backup, which is managed by Apple or Google under their own policies and to which MatchWOD has no access. Your account session is not included in the Android backup. You can turn this backup off in your phone's settings.
Communities (box or club)
In a community, other members can see your name and the results you confirm on the leaderboard, ranked by scale and division. You may opt out of the leaderboard in the community preferences. Coaches have access to the member list and to confirmed results.
The analysis of a workout (the per-block summary, never the HR curve) is only made available to your coach if you share it, which also requires results in your account to be enabled. In comparisons with the class, other members' figures are shown without names, as medians.
Public comments on a workout are visible to community members; private comments only to you and the coach. Reports and blocks you make are kept for moderation purposes. Notifications are delivered in the app and, in the case of invitations or coach comments, also by email.
Shared links
On the web, you may create a read-only link to a workout or to a week of your plan. Anyone holding the link can view that copy without an account, but never has access to results, HR or your account details. You may revoke the link at any time. The link itself is not stored in plain text on the server.
Help and feedback
When you report a problem, send feedback or submit a text to improve the importer, we receive the content you sent, your account, the app version and the language. In a report, if technical information is enabled, we also receive the operating system version, your phone model, the screen you were on and whether you were connected to a network. We use this information solely to fix the app and to respond to you.
If you delete your account, these texts are no longer associated with you. They are deleted one year after the matter is closed; texts submitted to improve the importer that become part of the app's tests are kept.
Access to your data within MatchWOD
Only the person responsible for MatchWOD has administrative access, and uses it to provide support, handle reports and suspend accounts that abuse the service. Every such action is recorded in an audit log. Health data is not held on the server and therefore cannot be accessed; workout summaries are only held there if you have enabled that option.
Waitlist
We keep the information you enter in the form: your email address, whether you intend to use the app as an athlete or a coach, your phone type (iPhone or Android), your interest in Box Premium where you indicate it, the page language and where your sign-up came from (the link or campaign that brought you to the website, when the link says so), together with the dates on which you signed up, confirmed or left.
We use this data solely to invite iPhone users to the beta, to let you create an account with the same email address while the beta is closed (only signed-up, confirmed emails can create an account) and to inform you by email when the app is released on Android and when Box Premium opens. The sign-up source is used only to count how many sign-ups each link brings. You confirm your sign-up through the link in the email and may leave through the «leave the list» link included in every email.
Legal basis
- Performance of a contract (Article 6(1)(b) GDPR): your account, syncing, communities, shared links and responses to your help requests.
- Explicit consent (Article 9(2)(a) GDPR): health data read by the app, workout summaries in your account and sharing your analysis with your coach.
- Consent (Article 6(1)(a) GDPR): the waitlist.
- Legitimate interests (Article 6(1)(f) GDPR): the security of the service, limits against abuse, technical logs, moderation and counting how many people use MatchWOD.
You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
Recipients of your data
- Bluehost: hosting of the server, the database and the daily backups, in Frankfurt, Germany.
- OVHcloud: storage of an encrypted backup of the database, in Paris, France. The decryption key is held exclusively by MatchWOD, so OVHcloud cannot access its contents.
- Brevo: sending of emails (confirmations, password recovery, invitations, notifications and the waitlist), from France.
- Google and Apple: only if you sign in with Google or Apple, for authentication purposes; when you delete your account, we ask Apple to end the connection.
- Apple and Google, as app stores: distribution of the app and processing of download data under their own policies. For the iPhone beta, we give Apple, in TestFlight, the email address of those who signed up, so that Apple can send them the invite. We do not send them any app data.
- Google, through ML Kit, in the Android app: the technical data about the operation of text recognition described under «Workouts, plan and camera». According to Google, this data is encrypted in transit and is not transferred to third parties.
- OpenStreetMap Foundation, in the United Kingdom, in the Android app, and Apple, in the iPhone app: the map images for a route, as described under «Workouts, plan and camera».
Bluehost, OVHcloud and Brevo process data solely on behalf of MatchWOD and for the purposes stated. Other than in these cases, data is only disclosed to third parties where required by law.
Transfers outside the European Union
The server, the backups and email delivery are located in the European Union. Bluehost belongs to a United States group, but your data remains on the Frankfurt server. Signing in with Google and ML Kit in the Android app involve Google LLC, and signing in with Apple and maps in the iPhone app involve Apple Inc., both in the United States and covered by the EU-US Data Privacy Framework. The OpenStreetMap Foundation is located in the United Kingdom, which is covered by an adequacy decision of the European Commission.
Retention periods
- Account, workouts and plan: for as long as the account exists. Deleting your account deletes this data, together with your comments, leaderboard entries, community memberships, the reports you made and your notifications.
- Workout summaries: until you disable the option or delete your account.
- Sessions and devices: deleted 30 days after they expire or are ended.
- Database backups: on the server, 7 days for daily backups and 30 days for those made before each server update; the encrypted backup held outside the server, up to one year. Data you delete may remain in these backups until that period expires.
- Server technical logs: 14 days.
- Waitlist: for as long as you remain on the list. If you leave, only your email address is kept, marked as «left», so that we do not contact you again unless you ask; you may request its complete deletion. Sign-ups that are not confirmed are deleted automatically after 30 days.
- Communities: the text of a deleted comment is erased 30 days later; invitations 30 days after they expire, are accepted or are cancelled; notifications 90 days after being read, or 180 days after being created.
- Days of use: 90 days, keeping only the last day of use. Handled reports: one year. Administration audit log: two years (one year for views of an account).
- Data stored on your phone, including data read from Health or Health Connect: until you delete it in the app or uninstall the app. Your phone's system backup follows Apple's or Google's rules.
Security
All connections are encrypted (HTTPS). Passwords are stored as hashes, the session on your phone is kept in the Keychain, on iPhone, and encrypted with an Android Keystore key, on Android, and the database is not accessible from the internet. The data the app stores on your phone is kept in the app's private storage, protected by the phone's own encryption. Administrative access is logged.
Cookies, notifications and technical logs
The matchwod.com website uses no cookies, analytics tools or content from other websites: fonts and images are served by the website itself. The web app only uses the cookie required to keep you signed in. The apps contain no advertising, usage analytics or third-party crash reporting services; the only exception is the technical data that ML Kit sends to Google in the Android app, described under «Workouts, plan and camera».
App reminders and notifications, as well as the widget's content, are created and scheduled on the phone itself. Push notifications are not used.
To protect the service from abuse, the server counts the requests from each IP address over a period of a few minutes. The server's technical logs retain the IP address of requests for 14 days.
Your rights
You have the right to access, rectify and erase your data, to receive it in a file and to object to its processing. Many of these rights can be exercised directly in the app or on the web, where you can correct your account details, disable results in your account and delete your account; the backup provides your workouts in a file. Any other requests should be sent to privacidade@matchwod.com.
If you consider that your data has not been handled properly, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).
Minimum age
MatchWOD is intended for people aged 16 and over.
Changes to this policy
If this policy is amended, the date at the top will be updated. Material changes will be notified in the app or by email before they take effect.