Privacy Policy

1. Data we collect

Depending on how you use Pexplora, we may collect or process the following categories of information:

• Account and profile information: name, email address, date of birth, profile photo, country, timezone, activity preferences, and other profile settings you choose to provide.
• Early-access information: name, email address, country, and primary endurance activity when you register interest through pexplora.com.
• Training and activity information: activity type, timestamps, duration, distance, pace or speed, heart rate, cadence, elevation, calories, power, laps or splits, training load, route or GPS information where available, and related workout/device metadata.
• Mission and endurance-planning information: routes, GPX files, checkpoints, target times, strategy, fueling preferences, race execution information, and other information you submit to plan or execute endurance activities.
• Community information: posts, club information, challenge or leaderboard participation, profile information shown with your contributions, and content you choose to share with other users.
• Connected-service information: identifiers, authorization status, encrypted access/refresh tokens, sync history, and activity data obtained from services you choose to connect, such as COROS, Polar, Health Connect, and other integrations we may support.
• Technical and security information: IP address, browser or app version, device and operating-system information, request timestamps, error logs, and similar diagnostics used to operate, protect, and troubleshoot Pexplora.
• Subscription and transaction information: plan status, transaction identifiers, billing status, and related records. Where a third-party payment processor is used, it processes payment-card details under its own privacy terms; Pexplora does not need to store your full payment-card number.
• Communications: messages and information you send when requesting support, reporting a problem, or otherwise contacting us.

2. Where data comes from

We may receive personal data:

• directly from you when you create an account, edit your profile, upload a route, record or add an activity, join a community feature, subscribe, or contact us;
• from a connected service when you explicitly authorize Pexplora to access that service;
• from Health Connect on your Android device when you grant the requested permissions;
• automatically from the Pexplora website, app, API, and security/diagnostic systems; and
• from analysis performed by Pexplora on information already associated with your account, for example readiness indicators or personalized training insights.

3. How we use data

We use personal data only for purposes reasonably connected to providing, protecting, and improving Pexplora, including to:

• create and maintain your account and profile;
• import, normalize, deduplicate, store, and display your completed training activities;
• provide Training, Readiness, Coach, Insight, Mission, Strategy, Checkpoints, Navigation, Community, and related features;
• generate personalized endurance analysis, readiness indicators, training guidance, race-planning recommendations, and other Athlete Intelligence features;
• connect to services you choose to authorize and maintain those connections;
• process subscriptions, maintain entitlements, and provide customer support;
• detect abuse, protect accounts, investigate technical issues, and maintain service reliability and security;
• communicate important service, security, product, and support messages; and
• comply with applicable legal obligations and enforce our terms.

4. Health Connect

Health Connect is an optional Android integration. If you choose to connect it, Pexplora requests read-only access to selected fitness and exercise information that supports the Training experience. Pexplora does not require Health Connect in order to use the rest of the service.

The current Pexplora Health Connect integration may request read access to:

• exercise sessions;
• distance;
• heart rate;
• speed;
• elevation gained;
• total calories burned;
• steps or cadence-related information where available;
• power; and
• exercise-route/GPS points where the originating app or device provides a route and you grant the required route access.

Pexplora currently does not request Health Connect write access, sleep data, body/physical information, background Health Connect access, or extended historical-data permission. Exercise-route access is separate from normal workout-summary access and may require an additional Android consent step for a specific workout or route. If the originating app or watch did not publish a route to Health Connect, Pexplora cannot reconstruct one from summary metrics.

Health Connect data is used to populate your Pexplora training history and to support readiness, training analysis, coaching insights, and personalized endurance planning. When you choose to import a workout, Pexplora may store a copy of the imported workout on Pexplora servers so that the activity remains available in your Training history and can be used by Pexplora features.

Revoking Pexplora's Health Connect permission stops future Health Connect access but does not automatically delete workout copies already imported into Pexplora. You can delete applicable activities within Pexplora where deletion controls are available, or contact us to request deletion of personal data associated with your account.

5. Connected fitness services

Pexplora may let you connect third-party fitness services such as COROS or Polar. Connection is optional. When you authorize a provider, Pexplora receives the data permitted by your authorization and the provider's API, which may include completed workout details, performance metrics, device metadata, and route information where available.

Pexplora's Training Import Layer may compare provider identifiers, timestamps, duration, distance, and similar characteristics to identify duplicate copies of the same activity. This helps avoid showing the same workout multiple times when it is available through more than one connected source.

When you disconnect a provider, Pexplora will stop using the stored authorization to request new data from that provider. Disconnecting does not automatically remove activities already imported into your Pexplora account unless you also delete those activities or request account/data deletion.

6. Athlete Intelligence, automated analysis, and AI

Pexplora may use software models, statistical methods, rules, and artificial-intelligence services to analyze training, route, mission, and performance information and produce features such as Readiness, coaching guidance, strategy recommendations, course intelligence, and personalized endurance insights.

Where external technology providers assist with this processing, we may send only information reasonably necessary to provide the requested feature and use contractual or technical controls appropriate to the service. We do not use Athlete Intelligence to make decisions about credit, employment, insurance, or other decisions that produce comparable legal or significant effects on you.

Recommendations are informational and may be incomplete or inaccurate. You remain responsible for deciding whether and how to act on them.

7. How data is shared

We do not sell personal data. We may disclose personal data only in the following circumstances:

• Service providers: companies that help us provide hosting, databases, email, payments, security, diagnostics, customer support, or AI/processing infrastructure. They receive information only as reasonably necessary to provide services to Pexplora.
• Connected services at your direction: when an integration requires data to be sent to or received from a service you choose to connect.
• Community features: information you intentionally publish or share may be visible to other Pexplora users according to the feature's design and your settings.
• Legal and safety reasons: when reasonably necessary to comply with law, legal process, protect users, investigate fraud or abuse, or protect Pexplora's rights and security.
• Business transition: if Pexplora later becomes operated by a company, or if all or part of the service is reorganized or transferred, relevant personal data may move to the successor operator subject to applicable law and continued privacy protections.

We do not disclose Health Connect data to advertising platforms, data brokers, or parties seeking to use it for advertising, credit, insurance, employment, or unrelated profiling.

8. Security

We use reasonable technical and organizational safeguards appropriate to the nature of the data we process. These may include encrypted HTTPS connections, restricted access, authentication controls, protected infrastructure, encrypted or otherwise protected connected-service credentials, logging, and monitoring. No system can be guaranteed completely secure, and you should protect your account credentials and promptly report suspected unauthorized access.

9. Data retention, deactivation, and deletion

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, to maintain the service, resolve disputes, protect security, and meet legal obligations.

• Account/profile data is generally retained while your account remains active and for a limited period afterward where needed for security, recovery, legal, or administrative purposes.
• Imported training activities remain in your Pexplora training history until deleted, your account is deleted, or they are otherwise removed under our retention practices.
• Connected-service tokens are retained only while needed to maintain the connection and are removed or invalidated when the connection or account is deleted, subject to provider behavior and backup/security retention.
• Operational logs may be retained for shorter periods appropriate to security, troubleshooting, and reliability needs.
• Backups may contain residual copies for a limited period until they are overwritten under normal backup cycles.

If your account is deactivated, Pexplora may restrict access while retaining the minimum information necessary to administer the deactivation, security, or legal obligations. If your account is deleted, we will delete or anonymize personal data associated with the account within a reasonable period, except information we must retain for legal, security, fraud-prevention, transaction, or dispute purposes.

To request account or personal-data deletion when an in-app control is not available, contact [email protected] from the email address associated with your account.

10. Your choices and privacy rights

Subject to applicable law, you may have rights to be informed about our processing, access personal data held about you, correct inaccurate data, withdraw consent where processing is based on consent, and request deletion or other restrictions on processing.

You can also:

• edit available profile information inside Pexplora;
• disconnect COROS, Polar, Health Connect, or another supported provider;
• change or revoke Health Connect permissions in Android's Health Connect settings;
• delete activities where Pexplora provides an activity-deletion control;
• leave or remove content from community features where those controls are available; and
• contact us to request access, correction, withdrawal of consent, or deletion.

As Pexplora is currently operated in Malaysia, we aim to handle personal data consistently with Malaysia's Personal Data Protection Act 2010 and applicable amendments, including principles relating to notice and choice, disclosure, security, retention, data integrity, and access.

11. International processing and transfers

Pexplora uses online infrastructure and service providers that may process information in countries outside Malaysia. Where personal data is transferred or processed internationally, we take reasonable steps intended to ensure that the transfer is permitted and that appropriate protections apply under applicable law.

12. Children

Pexplora is designed for endurance and outdoor-sport users and is not directed specifically to children. We do not knowingly seek to collect personal data from a child where parental or guardian consent is required by applicable law. If you believe a child has provided personal data to Pexplora without the required consent, contact us so we can review and take appropriate action.

13. Fitness information, not medical care

Pexplora is an endurance training and planning service, not a medical device or healthcare provider. Readiness, heart-rate analysis, training recommendations, AI-generated guidance, and other insights are provided for fitness and informational purposes and are not intended to diagnose, treat, cure, prevent, or manage a disease or medical condition. Seek appropriate professional advice for medical concerns.

14. Changes to this Privacy Policy

We may update this Privacy Policy when Pexplora changes, when we add new integrations or data uses, or when legal requirements change. We will publish the updated policy on this page and change the “Last updated” date. If a change materially affects how we use sensitive data, we may provide additional notice or seek consent where required.