Privacy Policy
Effective 23 September 2026
This policy covers the Hybridlap mobile app, its companion watch app, and hybridlap.com. We use training information to calculate predictions, build plans, record sessions and sync your data across devices. The website has a separate early-access form.
Mobile and watch app
Information you provide and create
The app stores your athlete profile, such as division, category, birth year if supplied, equipment, units and planned race details. It stores benchmark times, predicted times and split targets, training plans, completed sessions, notes, splits, distances, repetitions and penalties. If you use doubles, we store your pairing and the plans or sessions shared with your partner.
A Firebase account is created when you use the app, even if you do not choose a visible sign-in method. If you later connect Apple or Google sign-in, we receive an account identifier and any name or email that provider makes available. We use these details for authentication and account recovery or sync; we do not receive your Apple or Google password.
Health and watch information
If you grant access to Apple Health or Android Health Connect, the app reads heart-rate samples for the time window of a workout and calculates average and maximum heart rate for each split. Those summaries can be stored with the session and synced to our service. The app does not upload the underlying heart-rate sample stream as part of normal session sync. If you leave “Save sessions to Health” enabled, the app also writes completed workout details, including duration and available distance, to your device’s health service. The watch can record race splits and send them to the paired phone; the phone then stores and syncs them. Health access is optional.
Purchases, diagnostics and usage
If you subscribe, Apple or Google processes payment. RevenueCat helps the app show products, check subscription status and restore purchases. We receive subscription and entitlement information; we do not receive your full card details.
Firebase Analytics receives app usage events, such as screen or feature interactions, so we can understand and improve the product. Firebase Crashlytics receives crash reports and technical details needed to diagnose failures. Firebase Auth, App Check and Remote Config support sign-in, abuse protection and app configuration. These services may process identifiers and device or diagnostic information as part of providing those functions.
Storage and sync
Training information is kept in a local database on your device and normally syncs to the Hybridlap API and database so it can be restored and used across your devices. Sync uses your account identifier. The app may retry after an offline period. If you share a doubles plan, session or split, your current partner can access that shared record and a limited projection of your performance needed for the pairing. Other athletes do not get access to your private records through the app.
Website and early-access form
You can enter running and station benchmark times on the website to see a prediction. The calculation happens in your browser. If you submit the early-access form, we store your email address, poll choice, optional race city and date, the benchmark inputs and predicted result, and basic referral information such as referrer, campaign parameters and browser user-agent. We use this to provide the requested breakdown, understand interest in the product and contact you about Hybridlap. Without submitting the form, your typed benchmark values are not saved to our lead database.
The website uses Firebase Analytics when configured to record events such as a prediction, lead submission or share. Those events may include the selected division or category, an approximate predicted time, or the poll choice; the email field is not intentionally sent as an analytics event. If Firebase is not configured for the site, the form saves your submitted details in your browser’s local storage instead of sending them to us. You can clear that browser storage yourself.
Hosting and security providers may process technical request information, such as your IP address, to deliver and protect the website. We do not use the website form to take payment.
Your choices, retention and deletion
Health access can be changed in your device’s Apple Health or Health Connect settings. You can turn off saving completed workouts to Health in Hybridlap Settings. You can decline optional Apple or Google sign-in and you can unsubscribe from launch emails by using any unsubscribe link provided or by contacting us.
To request access to, correction of, or deletion of your account and server-held data, email hello@hybridlap.com. Please identify the account or email you used; we may need to verify ownership before acting. The same address handles requests to delete early-access form submissions. You can also delete data held by Apple Health or Health Connect in those services.
We retain app records while needed to provide the account and sync features, and lead details while needed for the early-access purpose, unless you request deletion sooner. After a verified deletion request, we remove the relevant records from active systems, subject to legal obligations, legitimate security needs and backup retention cycles. Providers may keep limited records under their own retention policies. We will explain any exception when responding to your request.
Security and changes
We use authenticated connections and access controls to protect synced records. No online service can guarantee absolute security. This policy may change as the app and website evolve; the effective date above will be updated when it does.
Contact
Hybridlap is an independent hybrid-racing product. For privacy questions or data requests, email hello@hybridlap.com.