1. Introduction and Data Controller
Committed to respecting your privacy and protecting your personal data, the Publisher is dedicated to processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.
The data controller is Alexis Sartre, French sole trader (SIRET 108 062 498 00010).
2. Collected Data and Collection Points
We collect different types of personal data when you use the Triday application:
- Account Data: Upon registration, we collect your email address and your name or pseudonym.
- Athletic & Physiological Data (essential to the application): Body weight, heart rate zones, Functional Threshold Power (FTP), target pacing speeds, GPX routes uploaded by the user, and details of scheduled races (distances, elevations).
- Navigation & Technical Data: IP address, browser type, operating system, and connection logs (timestamp, pages visited).
- Payment Data: All financial and bank card details are processed and stored exclusively by our secure payment partner Stripe. No payment card details are collected or stored on our servers.
3. Purposes and Legal Basis of Processing
Your data is processed for the following purposes:
- Performance of a Contract (Legal basis: GDPR Art. 6.1.b): Providing the Triday service (pacing calculation, nutrition and hydration scheduling, logistical check-listing), and managing your user account and subscriptions.
- Legitimate Interest (Legal basis: GDPR Art. 6.1.f): Improving our pacing algorithm and the user experience of the application, and providing customer support and resolving technical issues.
- Consent (Legal basis: GDPR Art. 6.1.a): Sending informational emails (newsletters) or promotional offers if you have explicitly opted in.
4. Data Recipients and Subprocessors
The personal data collected is never sold or rented to third parties. It may be transmitted to our technical service providers for the sole purpose of operating the service:
- Supabase Inc. (USA): Database infrastructure and user authentication services.
- Vercel Inc. (USA): Hosting of the Site and web application source code.
- Stripe Payments Europe, Ltd. (Ireland): Payment transaction processing.
5. Data Retention Period
Your account and athletic data are retained for as long as your user account remains active.
In the event of prolonged account inactivity for more than 3 years, or if you request account deletion, your personal data will be permanently erased from our active databases, except for billing documents that we are legally required to retain for 10 years.
6. Data Security
We implement all necessary technical, physical, and organizational measures to ensure a level of security appropriate to the risks of loss, unauthorized access, disclosure, or alteration of your data (HTTPS encryption, strong authentication for administrators, etc.).
7. Your Rights under GDPR
Under data protection regulations, you have the following rights regarding your personal data:
- Right of Access: Confirm whether your data is being processed and obtain a copy of it.
- Right to Rectification: Request the correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request the deletion of your data under statutory conditions.
- Right to Restriction of Processing: Temporarily freeze the use of your data.
- Right to Data Portability: Receive your account and athletic data in a structured, standard format.
- Right to Object: Object at any time to the processing of your data based on legitimate interests or for direct marketing.
To exercise these rights, you can contact our data protection team at any time at: contact@triday.fr.
If you feel, after contacting us, that your rights are not being respected, you have the right to lodge a complaint with your local data protection authority (such as the CNIL in France).
8. Cookies and Trackers
We use technical and session cookies necessary for the operation of the service (recalling your login state, language preferences).
The marketing website may also use PostHog to measure page views, important clicks, and submitted forms, only after your consent. These measurements help us improve the product and signup funnel. We do not use them for targeted advertising, and session recording is disabled.