Privacy

Effective date: 6 October 2026

It is The Next Race's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your device, payment details, and information about how you use our website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy policy does not apply to any of your activities after you leave our website or other sites we own and operate.

Information We Collect

Information we collect falls into one of two categories: (1)"voluntarily provided" and (2)"automatically collected" information.

Voluntarily Provided: Information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.
Automatically Collected: Information refers to any information automatically sent by your devices our third-party integrations in the course of accessing our products and services.

Cookies and Similar Technologies

We use a small number of cookies and similar technologies. You can change your choice about optional cookies at any time with the cookie setting in the footer of our website.

Strictly necessary

Sign-in cookies. When you sign in, our authentication provider, Supabase, sets cookies that keep you signed in to The Next Race. They are removed when you sign out or your session ends. The service cannot work without them, so they are set without asking.
Your cookie choice. We save whether you accepted or declined optional cookies in your browser's local storage, so we don't ask every time you visit.

Analytics, only with your consent

Google Analytics. If you accept analytics cookies, we load Google Analytics, which sets the cookies _ga and _ga_<id> for up to two years to count visits and show how people use the website. We don't load it until you accept. If you later decline, we turn Google Analytics off and delete its cookies. Google processes this data under its own privacy policy.

Without cookies

Vercel Web Analytics counts page views and a few button clicks in aggregate, without cookies and without identifying you.
Cloudflare Turnstile checks, on some forms, that a person rather than a bot is submitting them. Cloudflare processes technical information about your browser for that check.
Settings in your browser. We keep some preferences in your browser's local storage, such as table layouts and banners you have dismissed. They stay on your device.

The Next Race mobile app does not use cookies. It keeps you signed in by storing your session securely on your device.

Copyrights

The Webpages and The Next Race App are copyrighted.

The Next Race grants you a non-exclusive, non-sublicensable and non-transferable right to access and use our services, which right is temporary and can be revoked at any time. A "use" is any permanent or temporary reproduction of the services in the object code by means of storing, loading, executing or displaying for the purpose of running the Services on your devices.

A further use of the services, including the logo, pictures or video material, such as the distribution, modification, transmission, reuse, downloading, reposting, copying, whether in whole or in part, for commercial purposes or for personal gain is not permitted without the explicit written consent of The Next Race.

Consumer Rights, Error Reporting, and Feedback

Should you wish to make a claim for a defect, please reach out to us via contact@thenextrace.app. All claims for defects shall be subject to the limitations set out in section 9.

You may provide information and feedback concerning errors, suggestions for improvements, ideas, problems, complaints, and other matters related to our services ("Feedback") via our website and/or any of our other pages or apps. Feedback can also be provided via contact@thenextrace.app By submitting Feedback, you acknowledge and agree that: (i) you shall not retain, acquire or assert any intellectual property right or other right, title or interest in or to the Feedback; (ii) The Next Race may have development ideas similar to the Feedback; (iii) Feedback does not contain confidential information or proprietary information from you or any third party; and (iv) The Next Race is not under any obligation of confidentiality with respect to the Feedback.

Data Protection

The Next Race processes the data collected through the our website and/or any of our pages or apps, in accordance with applicable laws and regulations, in particular the General Data Protection Regulation, the Federal Data Protection Act and the Telemedia Act.

When you accept a coach's invitation, you choose what that coach can see, one category at a time: your recorded activities, your training plan, your daily health (such as sleep, heart rate variability, resting heart rate and your check-ins), your physiology (thresholds, heart rate zones and body metrics), and your injuries and illnesses. Each category covers that data from every service you have connected. You can change these choices at any time in Settings → Data sharing, and the coach stops seeing that data from then on.

A coach can also read what you share with them through The Next Race's API, including from an AI assistant they connect to their own account, which passes it to that assistant's provider. Data from Fitbit is never available to a coach this way.

A coach can create and change the workouts in training plans they assign to you. If you have connected Garmin Connect or Wahoo, those workouts are sent to your device in the same way as the workouts in your own plans.

Partners & Third-Parties

Users may choose to connect partner-apps, or, third-party apps, such as, but not limited to, Strava, Garmin Connect, Polar, Oura, Fitbit, Wahoo, and Apple Health, to The Next Race. These can be disconnected at any time from your account settings.

Garmin Connect

When you connect your Garmin Connect account, The Next Race uses Garmin's Connect Developer Program APIs to exchange data on your behalf. The scope of that exchange is determined by the permissions you grant on Garmin's consent screen and by the Garmin APIs The Next Race has been approved to use.

Data shared from The Next Race to Garmin (Training API): the title, description, sport, and structured step content (warm-up, intervals, repeats, targets, cooldown) of workouts in training plans where Garmin sync is enabled, including plans a coach has assigned to you. This is pushed to your Garmin Connect workouts library so the workouts can be followed on a compatible Garmin device.

Data shared from Garmin to The Next Race (when granted via the Activity API or related products): completed activities, their summary metrics (such as distance, duration, pace, and in-activity heart rate), and optional FIT files. We use this data to surface your activities and progress within The Next Race.

Identifiers and tokens: in all cases we receive a unique Garmin user identifier, an OAuth access token, and the list of permissions you granted. We also receive notifications from Garmin when you disconnect or change those permissions on Garmin's side.

How Garmin data is processed and stored: Garmin data we receive is stored in our managed database hosted by Supabase, Inc., which acts as a data processor on our behalf. We retain it for as long as your Garmin connection remains active and delete the associated tokens when you disconnect. We do not sell Garmin data or use it for advertising.

Third-party AI and data processors: The Next Race offers an optional Model Context Protocol (MCP) integration that lets you connect third-party AI assistants — such as Anthropic's Claude and Cursor — to your account. If you enable this, data from your account, which can include Garmin device-sourced activities, is transmitted to the AI provider you connect so it can respond to your requests. This happens only when you explicitly authorize a specific AI tool through the connection flow, and you can revoke that authorization at any time. Other than Supabase (hosting and database), any AI assistant you choose to connect yourself, and a coach you share your activities with (including an AI assistant that coach connects, see Sharing with a Coach), we do not share Garmin data with third parties.

Your controls:

Each training plan has a "Sync to Garmin Connect" toggle, set by whoever owns the plan (your coach, for a plan they assigned to you). Turning it off removes that plan's workouts from your Garmin Connect library.
Disconnecting Garmin from Settings → Connectors revokes our access and deletes the stored tokens.
You may also revoke The Next Race's access from your Garmin Connect account settings.
You can disconnect any third-party AI assistant at any time from that tool's connector settings.

Your use of Garmin Connect is also governed by Garmin's own privacy and terms documents, available at garmin.com/en-US/privacy/connect. The Next Race only accesses data you explicitly authorize through Garmin's consent flow.

Fitbit (Google Health)

When you connect Fitbit, The Next Race reads your Fitbit and Pixel Watch data through the Google Health API. You sign in with your Google account and choose what to share on Google's consent screen; you can leave any permission unticked, and we receive only what you allow.

Data shared from Google Health to The Next Race: completed workouts (sport, start time, duration, distance, heart rate, calories and, where the workout recorded them, its GPS route and heart-rate samples), sleep duration and sleep stages, heart rate variability, resting heart rate, blood oxygen (SpO2), breathing rate, skin temperature compared with your baseline, VO2 max, daily steps, and active calories. We use this data to show your workouts in your activity log and training calendar, to analyse them, and to calculate your daily recovery score.

Data shared from The Next Race to Google Health: none. We request read-only access and never write to your Google Health data.

Identifiers and tokens: we receive your Google Health user identifier, OAuth access and refresh tokens, and the list of permissions you granted. Google notifies us when new data is available so we can fetch it; those notifications identify you only by your Google Health user identifier.

How Fitbit data is processed, stored and shared: Fitbit data is stored in our managed database hosted by Supabase, Inc., which acts as a data processor on our behalf. Your OAuth tokens are kept on our servers and are never sent to your devices. Fitbit health data in your account is visible only to you, unless you choose to share it with a coach on The Next Race. A coach you share your activities with can see your Fitbit workouts, and a coach you share your daily health with can also see your sleep, heart rate variability, resting heart rate and other daily health data. You make this choice for each coach and can turn it off at any time (see Sharing with a Coach). If you connect a third-party AI assistant through our Model Context Protocol (MCP) integration, data from your account, which can include Fitbit workouts and the daily health data behind your recovery score, is transmitted to the AI provider you connect so it can respond to your requests. Other than Supabase and any coach or AI assistant you choose to connect yourself, we do not share Fitbit data with anyone.

What we never do with Fitbit data: we do not sell it, use it for advertising, or use it for credit or lending decisions, and nobody at The Next Race reads it unless you ask us to (for example, to help with a support request), it is needed for security, or the law requires it.

Limited Use: The use of information received from Google Health API will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

Your controls and deletion:

The "Automatically fetch new data" toggle in the Fitbit connector settings controls whether new workouts are imported as they happen.
Disconnecting Fitbit from Settings → Connectors stops new imports, revokes our access at Google, and deletes the stored tokens. Data already imported stays in your account so your training history is kept.
You can delete any imported workout from The Next Race at any time.
When you delete your account, all of your data, including everything imported from Fitbit, is permanently deleted within 8 days of your request, and our access at Google is revoked.
You can also remove The Next Race's access from your Google Account at myaccount.google.com/connections.

Your use of Fitbit is also governed by Google's own terms and privacy policy, available at policies.google.com/privacy. The Next Race only accesses data you explicitly authorize through Google's consent flow.

Wahoo

When you connect Wahoo, The Next Race uses the Wahoo Cloud API to read the workouts you record with Wahoo devices and apps, and to send the rides and runs from your training plans to your Wahoo schedule. You sign in with your Wahoo account and approve the access on Wahoo's consent screen.

Data shared from Wahoo to The Next Race: completed workouts recorded with Wahoo devices and apps (sport, start time, duration, distance, elevation, heart rate, power, cadence, speed, calories, training stress score and, where the workout recorded them, its GPS route and per-second samples from its FIT file). We use this data to show your workouts in your activity log and training calendar, to analyse them, and for your training load and best efforts. We also read your Wahoo user identifier, which Wahoo returns with your profile, to match the workouts Wahoo sends us to your account.

Data shared from The Next Race to Wahoo: the title, description, sport and structured steps (warm-up, intervals, repeats, targets and cool-down) of the bike and run workouts in your training plans, including plans a coach has assigned to you, that are scheduled for the coming week, together with the targets they need, such as your FTP and heart-rate zones. This is sent so the workouts can be followed on your Wahoo bike computer, trainer or in the Wahoo app. Data sent to Wahoo may be used by Wahoo, including modified, copied and analysed, for any purpose in accordance with Wahoo's privacy policy.

Identifiers and tokens: we receive your Wahoo user identifier and OAuth access and refresh tokens. Wahoo notifies us when you finish a workout so we can import it; those notifications identify you only by your Wahoo user identifier.

How Wahoo data is processed, stored and shared: Wahoo data is stored in our managed database hosted by Supabase, Inc., which acts as a data processor on our behalf. Your OAuth tokens are kept on our servers and are never sent to your devices. If you share your training with a coach on The Next Race, that coach can see your workouts. If you connect a third-party AI assistant through our Model Context Protocol (MCP) integration, data from your account, which can include Wahoo workouts, is transmitted to the AI provider you connect so it can respond to your requests. Other than Supabase, Wahoo itself, any AI assistant you choose to connect yourself, and a coach you share your activities with (including an AI assistant that coach connects, see Sharing with a Coach), we do not share Wahoo data with anyone. We do not sell it or use it for advertising.

Your controls and deletion:

The "Automatically fetch new activities" toggle in the Wahoo connector settings controls whether new workouts are imported as they happen.
The "Send planned workouts" toggle controls whether workouts from your training plans are sent to Wahoo. Turning it off removes the workouts we sent from your Wahoo schedule.
Disconnecting Wahoo from Settings → Connectors stops new imports and sending, revokes our access at Wahoo, and deletes the stored tokens. Data already imported stays in your account so your training history is kept.
You can delete any imported workout from The Next Race at any time.
When you delete your account, all of your data, including everything imported from Wahoo, is permanently deleted within 8 days of your request, and our access at Wahoo is revoked.
You can also remove The Next Race's access from your Wahoo account.

Your use of Wahoo is also governed by Wahoo's own terms and privacy policy, available at wahoofitness.com/privacy-policy. The Next Race only accesses data you explicitly authorize through Wahoo's consent flow.