Privacy Policy

SummiQ is an endurance training and sports platform operated by DynamIQ Fit B.V., trading as SummiQ.

DynamIQ Fit B.V. is established in Diemen, the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 99233096.

For the purposes of the General Data Protection Regulation ("GDPR"), DynamIQ Fit B.V. is the controller of the personal data described in this Privacy Policy, except where expressly stated otherwise.

You can contact us about privacy or data protection at: support@summiq.eu

In this Privacy Policy, "SummiQ", "we", "us" and "our" refer to DynamIQ Fit B.V.

This Privacy Policy explains how we collect, use, store and share personal data when you use the SummiQ website, applications, training platform, AI coaching functionality and related services.

SummiQ is primarily intended for users in the European Economic Area ("EEA").

You must be at least 16 years old to create and use a SummiQ account.

The personal data we process depends on how you use SummiQ.

Account and profile information

We may process information such as your name, email address, date of birth or age, sex, country or location, profile photograph, height, weight, account settings, subscription tier and account status.

Training and activity information

SummiQ may process information about your completed and planned sporting activities, including workout type, duration, distance, elevation, speed, pace, cadence, power, training load, training zones, route and GPS information, equipment and device information, and training history.

This information may be entered manually, generated by SummiQ, uploaded in activity files such as FIT, TCX or GPX files, or obtained from a third-party service or device that you choose to connect to SummiQ.

Health and physiological information

To provide personalised training analysis and coaching, SummiQ may process information relating to your health, fitness and physiology, including heart rate and heart-rate zones; resting and maximum heart rate; heart-rate variability (HRV); body weight; fitness and performance estimates; FTP and other threshold values; VO2max; recovery and sleep information; training readiness; injuries or medical information that you choose to enter; and other physiological measurements contained in activity files or connected services.

Depending on the information and context, these data may constitute data concerning health and therefore special-category personal data under Article 9 GDPR.

We apply additional safeguards to this information as described below.

Goals and coaching information

We process training goals, sporting events, target races, training preferences, planned workouts and other information you provide to personalise your training.

We may also process your questions to the SummiQ AI coach, relevant training context supplied to the AI system and the resulting AI-generated responses.

Technical and usage information

When you use SummiQ, we may collect limited technical information including IP address, browser and device type, operating system, session information, log data, crash or error information, pages or features used, timestamps and security-related information.

We use privacy-friendly analytics to understand how the service is used and to improve SummiQ.

Communications

If you contact us, we process your contact details and the contents of your communication.

We also record privacy preferences, consent choices, requests to exercise GDPR rights and communication preferences.

Payment information

When paid SummiQ subscriptions become available, payments will be processed through Mollie.

We may receive limited payment-related information such as transaction status, payment reference, subscription status and invoice information.

We do not need to receive or store complete payment-card or bank-account credentials where these are processed directly by Mollie.

Mollie may independently process personal data for payment processing, fraud prevention, regulatory compliance and other purposes for which Mollie determines the means and purposes of processing. Mollie's own privacy statement applies to those activities.

We may receive personal data directly from you, from files that you upload, from sporting devices or services that you choose to connect, from information generated through your use of SummiQ, from our technical infrastructure and, where applicable, from payment providers.

When you connect a third-party service, you instruct that service and SummiQ to exchange the data necessary for the functionality you have requested.

You can disconnect integrations where that functionality is available. Disconnecting an integration stops future collection through that connection but does not automatically delete information already imported into SummiQ.

We only process personal data where we have a legal basis under the GDPR.

Providing SummiQ

We process account, profile, training, activity and related information to create and administer your account, import and analyse workouts, calculate training metrics, create training plans, provide coaching functionality, display your training history and otherwise provide the SummiQ service.

Our legal basis is principally Article 6(1)(b) GDPR - performance of our contract with you.

Where this processing involves health data or other special-category data, we additionally rely on your explicit consent under Article 9(2)(a) GDPR.

AI coaching and personalised training analysis

We process relevant athlete, training and health information to generate personalised training analysis and AI-assisted coaching recommendations.

The ordinary-personal-data processing is necessary to provide the features you request under Article 6(1)(b) GDPR.

Where health data are used, we rely additionally on your explicit consent under Article 9(2)(a) GDPR.

Operating, securing and improving SummiQ

We process limited technical, usage and security information to maintain the platform, prevent abuse, diagnose errors, improve performance and understand how users interact with SummiQ.

Where the processing is not necessary for performance of our contract, we rely on our legitimate interests under Article 6(1)(f) GDPR, including maintaining, securing and improving SummiQ.

We balance those interests against your rights and interests and seek to minimise the information used for these purposes.

We do not rely on legitimate interests to circumvent the special protections applicable to health data.

Product analytics and improvement

We use privacy-friendly analytics and aggregated statistics to understand how SummiQ performs and which features users find useful.

Where possible, data used for broader product research and improvement are aggregated or anonymised.

Once information has been irreversibly anonymised so that an individual can no longer reasonably be identified, it is no longer personal data under the GDPR and may be used to analyse and improve SummiQ.

We do not use identifiable or pseudonymised health data for unrelated product development without an appropriate legal basis and, where required, separate explicit consent.

Communications necessary to provide the service

We may send account verification messages, password resets, important security information, subscription notices, changes to the service, legally required notices and other operational communications.

These communications are not marketing communications and may be necessary to perform our contract with you or comply with legal obligations.

Newsletters and marketing

We may send newsletters, product news and promotional communications where you have consented to receive them.

Marketing consent is optional and is separate from your consent to processing health data.

You can withdraw your marketing consent at any time, including by using an unsubscribe function in the relevant communication.

Personalised advertising

SummiQ may offer advertising as part of its free service.

Where we use personal data to personalise advertising, we will do so only after obtaining the consent required by applicable privacy and electronic communications laws.

Personalised advertising consent is optional and is separate from your agreement to the SummiQ service, health-data consent and newsletter consent.

We will not use health data, physiological measurements, workout content, injury information, sleep or recovery data, precise GPS routes, AI coaching conversations or similar sensitive training information to create advertising profiles or target advertising.

We will not provide those categories of information to advertisers for advertising purposes.

Where you consent to personalised advertising, we may use or disclose limited non-sensitive information such as an advertising identifier, general geographic region, broad demographic information, device information, interactions with advertising or non-sensitive usage segments where appropriate for advertising delivery and measurement.

We do not present profiling-based personalised advertising to users whom we know to be under 18 years old.

You can withdraw advertising consent at any time through the privacy or cookie controls made available by SummiQ.

Withdrawal will not prevent you from using the core SummiQ service, although you may continue to see non-personalised advertising.

Because personalised endurance coaching necessarily involves physiological and training information, certain SummiQ features require processing of health-related information.

Before we process such information, we will ask you to provide explicit consent.

The consent request will be presented separately from our general terms and other optional consents and will use wording substantially as follows:

"I explicitly consent to SummiQ processing my health and fitness data to provide training analysis, personalised coaching and related features."

Providing this consent is voluntary.

You may withdraw your health-data consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If you withdraw consent, we will stop processing health data based on that consent. Because health and physiological information is necessary for many personalised SummiQ features, withdrawing consent may mean that we can no longer provide those particular features.

Where appropriate, you may instead choose to delete your account and associated information.

We will not use health information for advertising.

SummiQ uses Mistral AI to provide AI-assisted analysis and coaching functionality.

When you use AI coaching, SummiQ may send Mistral AI information that is reasonably necessary to generate a relevant response. This may include elements of your athlete profile, goals, recent and planned training, physiological information and the question or instruction submitted to the AI coach.

We seek to minimise the amount of information sent to the AI service and do not send information merely because it is available.

Mistral AI processes this information on our behalf for the purpose of providing the requested AI functionality.

SummiQ is configured so that information submitted through our production AI implementation is not used to train Mistral AI's models.

We do not intentionally use experimental, preview or other AI functionality under terms that would permit athlete data to be used for third-party model training.

SummiQ AI outputs are recommendations and analytical assistance. They do not make decisions that produce legal effects or similarly significant effects concerning you.

AI-generated coaching is not a substitute for professional medical diagnosis or medical treatment.

At the date of this Privacy Policy, SummiQ does not use identifiable or pseudonymised athlete health data to train its own general AI models.

We may use genuinely anonymised information to research, evaluate or improve algorithms and AI functionality because information that can no longer be related to an identifiable individual is not personal data.

If in the future we intend to use personal data to train a SummiQ AI model for a materially different purpose, we will assess the legal basis before starting that processing, update this Privacy Policy where required and obtain separate consent where required by law.

We will not silently repurpose identifiable health data for AI model training.

SummiQ uses automated calculations and AI to analyse workouts, estimate training characteristics and provide recommendations.

These systems may evaluate aspects of your training, fitness or performance.

SummiQ does not use solely automated processing to make decisions that produce legal effects concerning you or otherwise similarly significantly affect you within the meaning of Article 22 GDPR.

You remain responsible for deciding whether to follow a training or coaching recommendation.

SummiQ uses cookies and similar technologies where necessary to operate its website and applications.

Essential technologies may, for example, be used for authentication, security, session management, user preferences and maintaining the functionality of the service.

Where cookies or analytics technologies have no or only very limited impact on privacy and applicable law permits their use without consent, they may be used to generate privacy-friendly aggregate statistics.

At the date of this Privacy Policy, SummiQ does not use Google Analytics or Meta or LinkedIn advertising pixels.

We will ask for consent before using cookies, tracking technologies or similar device-access technologies where consent is legally required, including where such technologies are used for personalised advertising.

Optional technologies will not be activated before the relevant consent has been given.

You can change or withdraw optional cookie choices through the consent-management functionality made available by SummiQ.

We do not make athlete information publicly available unless a feature expressly allows you to do so and you choose to use that feature.

We may disclose personal data to service providers that process information on our behalf where necessary to operate SummiQ.

Our core service providers currently include:

When paid subscriptions are introduced, Mollie B.V. will provide payment services. For relevant payment-processing activities, Mollie may act as an independent controller rather than as our processor.

Where personalised advertising is introduced, limited non-sensitive information may also be shared with advertising partners after the appropriate consent has been obtained.

We require processors handling personal data on our behalf to process it in accordance with applicable data-protection requirements and our documented instructions.

We may also disclose information where required by law, a court, a competent regulatory authority or where reasonably necessary to establish, exercise or defend legal claims.

We do not sell or disclose your health, training or physiological data to advertisers.

We seek to use European infrastructure and European processing locations where reasonably available and appropriate.

However, some of our service providers and their subprocessors operate internationally. Personal data may therefore in certain circumstances be accessed from, or transferred to, countries outside the EEA.

We do not assume that the use of an EU-based service provider means that all processing necessarily takes place exclusively within the EEA.

Where personal data is transferred outside the EEA, we require an appropriate transfer mechanism under Chapter V GDPR.

Depending on the destination and recipient, this may include an adequacy decision of the European Commission, the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, and additional technical, contractual or organisational safeguards where appropriate.

You may contact us at support@summiq.eu if you would like more information about the safeguards applicable to international transfers relating to your personal data.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required by law.

While your SummiQ account remains active, we generally retain the information necessary to provide your account and training history.

If you request deletion of your SummiQ account:

Payment, invoice and accounting information may be retained for the applicable statutory retention period.

Where you withdraw marketing consent, we may retain minimal suppression information necessary to ensure that we respect your opt-out.

Security logs and similar technical information are retained only for a period reasonably necessary for security, fraud prevention, troubleshooting and legal compliance.

Subject to the conditions and exceptions in applicable law, you have the right to request access to personal data we hold about you and receive a copy of that information.

You may request correction of inaccurate or incomplete personal data, deletion of personal data, restriction of processing and, where applicable, data portability.

You may object to processing based on our legitimate interests.

You have an unconditional right to object to the use of your personal data for direct marketing.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Where applicable, you also have rights relating to automated decision-making.

You can exercise your rights by contacting: support@summiq.eu

We may need to verify your identity before completing a request.

We will respond within the period required by applicable data-protection law.

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority for data protection, or another competent supervisory authority in the EEA.

Where account deletion functionality is available within SummiQ, you may use that functionality to request deletion.

You can also contact support@summiq.eu.

Deleting your account will result in the deletion or anonymisation of your personal training and athlete data as described in Section 13.

Deletion cannot always immediately remove information from encrypted backups, financial records or information that we are legally required to retain.

Health and training data can be particularly sensitive. We therefore use technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include, as appropriate, encryption, access controls, authentication controls, data minimisation, logging, infrastructure security, restricted administrative access and contractual protections with processors.

No internet-based service can guarantee absolute security. We continuously assess our security controls and adjust them where appropriate to the nature and risks of the information we process.

If a personal-data breach occurs, we will assess it and notify the competent supervisory authority and affected individuals where required by the GDPR.

SummiQ is not intended for children under 16 years of age.

We do not knowingly permit users under 16 to create accounts.

If we become aware that a person under 16 has created an account or provided personal data contrary to this requirement, we may deactivate the account and delete the relevant information.

Users aged 16 or 17 are permitted to use SummiQ, but we apply additional privacy protections to minors, including not using their personal data for profiling-based personalised advertising.

SummiQ may allow you to connect third-party sports, device, health or other services.

Those third parties may independently process your information under their own privacy policies.

SummiQ is not responsible for processing independently carried out by a third party outside our instructions or control.

Before connecting a third-party account, you should review the privacy information provided by that service.

We may update this Privacy Policy where SummiQ changes, where we introduce new functionality or where legal or regulatory requirements change.

The latest version will be made available through SummiQ and will indicate its effective date.

If a change materially affects how we use your personal data, we will provide appropriate notice before the change takes effect where required by law.

Where the new processing requires consent, updating this Privacy Policy alone will not constitute consent. We will obtain the required consent separately.

For questions about this Privacy Policy, requests concerning your personal data or privacy-related complaints, contact: