Privacy Policy

1. Who we are

JustPush (the website justpush.coach and the JustPush mobile and web application) is operated by LSDC Performance, a French single-member limited liability company (EURL) with a share capital of €1,000, registered with the Rodez Trade and Companies Register under number 931 280 655, whose registered office is at 9 Route des Escouders, 12340 Bozouls, France, represented by its manager, Antonin Albouy.

LSDC Performance is the data controller for the personal data described in this policy. For any privacy question or request, contact us at support@justpush.coach.

A French version of this policy is available at justpush.coach/confidentialite. This English version includes the additional disclosures required for our integration with Garmin Connect.

2. Data we collect

2.1 On the justpush.coach website

• Waitlist: email address and sign-up date.

2.2 In the JustPush app

• Account data: email address, password (stored only as a hash), username, first name, date of birth.
• Athlete profile: sex, weight, experience level, declared training history, goals, terrain preferences, weekly availability, declared events, and answers to onboarding and weekly check-ins (fatigue, motivation, possible pain).
• Training data: cycling activities imported from the services you choose to connect (Garmin Connect, Intervals.icu, Strava), planned sessions, and perceived effort (RPE) and feedback you enter after a session.
• Third-party connection data: OAuth access tokens (stored encrypted) and connection status.
• Technical data: server logs (IP address, timestamp) needed for security and for the service to work, and push notification tokens if you enable notifications.

Some of this data (weight, heart rate, perceived effort, pain) may be health data under the GDPR. We process it only to provide the training-planning service, based on the explicit consent you give when creating your profile.

3. Garmin Connect data

3.1 What we receive from Garmin

If, and only if, you connect your Garmin Connect account to JustPush and authorize access on Garmin's consent screen, we receive data about your cycling activities recorded on your Garmin devices:

• activity summaries: date and time, duration, distance, elevation gain, energy (kJ), calories, activity type;
• activity details: power, heart rate and cadence data, and the metrics derived from them (average and normalized power, average and maximum heart rate, power curve, training load).

We do not store GPS tracks or maps from Garmin activities. We do not request sleep, stress, body composition or other wellness data.

If you choose to send a planned workout to your Garmin device from JustPush, we send the structured workout (name, steps, duration and power targets) to your Garmin Connect account. We never send your personal data to Garmin beyond what is needed for that.

3.2 How we use Garmin data

Garmin data is used only to provide the JustPush service to you:

• estimating your critical power and FTP;
• calculating your weekly training load and generating and adapting your training plan;
• matching completed rides to planned sessions and showing your feedback and statistics in the app;
• detecting duplicates when the same ride is imported from several services.

Garmin data is never used for advertising, never used for any purpose other than the service you requested, and never combined with data from other users for any purpose other than operating the service.

3.3 Garmin data is not sold or shared

We do not sell Garmin data, and we do not rent, license, trade or otherwise share it with any third party for their own purposes. The only third parties that receive or process Garmin data are the service providers listed in section 3.4, which act solely on our behalf and under our instructions to run JustPush.

Our Garmin API credentials are issued to LSDC Performance only and are never shared with, transferred to or used by any third party.

3.4 Third parties that receive or process Garmin data

No integration partner, technology vendor, analytics provider, advertising network, or AI or data processing service receives Garmin data. Our email provider (Resend) only receives your email address and the content of service emails, never Garmin data.

If you also connect Intervals.icu, JustPush may receive activities that you previously synced from Garmin Connect to Intervals.icu. That transfer is governed by your settings in Intervals.icu and by its own privacy policy.

3.5 AI Transparency Statement

Garmin data is not processed by any artificial intelligence system.JustPush does not send Garmin data, or anything derived from it, to any AI or machine-learning service (including large language models), and does not use Garmin data or anything derived from it to train, evaluate, fine-tune or improve any AI model, whether ours or a third party's.

JustPush's training plans are calculated with deterministic rules and formulas, not with AI models. If we ever wanted to process Garmin data with an AI system, we would first update this policy with a full AI Transparency Statement, ask for your explicit opt-in consent inside the app, and give you an easy way to withdraw that consent at any time. No processing would happen without your consent.

3.6 Disconnecting Garmin

You can withdraw your consent to the Garmin integration at any time, either from Profile → Services in the JustPush app or from your Garmin Connect account settings (connected apps). When you disconnect, we immediately stop receiving Garmin data, delete your Garmin access tokens, and delete the activities imported from Garmin within 30 days unless you ask us to keep them.

4. Purposes and legal bases

5. All service providers

We do not sell or rent your personal data. It is processed by LSDC Performance and by the following providers, only as far as needed:

• Infomaniak Network SA (Switzerland): hosting of the application, database and backups.
• Resend (United States): sending service emails (account confirmation, password reset, notifications).
• Vercel Inc. (United States): hosting of the justpush.coach website.
• Apple (APNs) and Google (Firebase Cloud Messaging): delivery of push notifications, if you enable them.
• Expo (650 Industries, Inc.) (United States): delivery of app updates.
• Apple App Store / Google Play: app distribution and in-app purchases, where applicable.
• Garmin Connect, Intervals.icu, Strava: only if you choose to connect your account, to import your activities and, where you request it, to send planned workouts.

Switzerland benefits from an adequacy decision of the European Commission. Transfers to the United States are covered by appropriate safeguards under the GDPR (European Commission Standard Contractual Clauses and/or the EU–US Data Privacy Framework).

6. How long we keep data

• Waitlist: until you unsubscribe, and at most 3 years after your last contact.
• Account and training data: for as long as your account exists. If you delete your account, it is deactivated immediately and all data, including Garmin data, is permanently erased within 30 days.
• Garmin data: deleted within 30 days after you disconnect Garmin, delete an activity in Garmin Connect, or delete your JustPush account.
• Third-party connection tokens: deleted (cryptographic erasure) as soon as you disconnect the service or delete your account.
• Technical logs and security events: 24 hours to 90 days depending on their type.
• Billing records: 10 years (legal accounting obligation).

7. Your rights

Under the GDPR and French data protection law, you have the right to access, correct, delete, restrict and object to the processing of your data, to receive a copy of it in a portable format, and to withdraw your consent at any time. Here is how:

• Access and export: email support@justpush.coach from the address linked to your account and we will send you a copy of all your data, including Garmin data, in a machine-readable format (JSON).
• Correction: edit your profile directly in the app, or ask us by email. Activities synced from Garmin reflect your Garmin Connect data; correct or delete them in Garmin Connect and the change will follow.
• Deletion: use the account deletion form or email us. Your account and all associated data are erased within 30 days.
• Withdrawing consent: disconnect Garmin or any other service from Profile → Services in the app or from that service's settings; unsubscribe from emails with the link in each email; or email us to withdraw consent to the processing of your health data (which means we can no longer provide the service).

We answer every request within 30 days at the latest. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

8. Security

We use appropriate technical and organizational measures: encrypted connections (HTTPS), hashed passwords, encrypted third-party access tokens, rate limiting against brute-force attacks, logging of administrator access, and encrypted backups.

9. Cookies

The justpush.coach website does not use advertising cookies or third-party trackers. Only strictly necessary technical cookies or storage may be used, which do not require consent.

10. Children

JustPush is intended for people aged 16 and over. Children under 16 must not create an account without the consent of a parent or legal guardian.

11. Changes

We may update this policy. If we make a substantial change, we will notify you by email or in the app. The date of the latest update is shown at the top of this page.