Privacy Policy

Last updated: 15/07/2026

Sport Nexus (operated by FAB MANAGEMENT TECHNOLOGY SERVICE JOINT STOCK COMPANY) is a triathlon training platform. This policy explains what data we collect, what we use it for, and how you stay in control.

1. Data we collect

Account information

When you sign up, you provide: email, full name, phone number, year of birth and gender. Email is used to verify your account (OTP code); your phone number lets your coach reach you when needed; year of birth and gender help estimate heart-rate zones and age group for training analysis.

Training data from devices

When you actively link a device account (Garmin Connect, COROS), we receive your sport activity data from that provider, including: type (swim/bike/run…), start time, duration, distance, average heart rate and cumulative elevation when available. This data is sent automatically to Sport Nexus by the provider after each session.

We do not store your device account password. Linking uses the provider's official OAuth authorization; Sport Nexus only holds the access token issued by the provider, and you can revoke it at any time.

Data you enter yourself

You can log a session manually (when your watch runs out of battery, say). This data is marked as self-entered.

Location

If you allow it, Sport Nexus uses your location while the app is open to show a weather forecast for where you train. This location is used on the spot for the weather feature only — never stored or used for tracking. You can decline or revoke location permission at any time in your device Settings. (GPS route coordinates, if any, are part of the session data sent by Garmin/COROS as described above.)

2. How we use data

• Show your training schedule, progress and session analysis.
• Automatically record session completion from real device data.
• Merge and de-duplicate sessions from multiple sources so each one is counted only once.
• Score challenges and leaderboards within your club.
• Let the coaches of the club you belong to see your training progress.

We do not sell your data to third parties, and we do not use health/activity data for advertising.

3. Who can see your data

• You — all of your own data.
• Coaches & managers of the club you belong to — training data and compliance, for coaching purposes.
• Fellow club members — only the public information in leaderboards and challenges (name, session results).

4. Third parties we use

• Garmin Connect, COROS — sources of training data, when you actively link them.
• Anthropic (Claude) — the AI service that drafts the sessions in a training plan and prefills challenge descriptions for coaches. It receives only what you type into those forms. No device data — Garmin or COROS — is sent to it.
• Open-Meteo — weather forecasts. It receives a latitude/longitude and a date range, nothing else.
• Resend — delivers verification (OTP) and account emails; it receives your email address and the contents of that message.
• Server infrastructure located in Vietnam, managed by FAB MANAGEMENT TECHNOLOGY SERVICE JOINT STOCK COMPANY.

5. Garmin Connect data

This section describes, on its own and in full, how Sport Nexus collects, uses, processes, stores and shares data obtained from Garmin Connect. It applies only if you have linked a Garmin account.

How the connection is made

Sport Nexus receives Garmin data only after you link your account yourself in the app and approve the request on Garmin's own authorization page. Authorization uses OAuth — we never see, receive or store your Garmin password. Garmin issues us an access token, which we store encrypted at rest in our database and use solely to identify your account to Garmin. You can revoke it at any time, from the app or from Garmin Connect.

What we receive from Garmin

Once linked, Garmin pushes your activities to our server as you record them. We store the payload Garmin sends us in full and unmodified, which means we receive and retain:

• Activity summaries — activity identifier, sport type, start time, duration, distance, average heart rate, total elevation gain, and the model of the Garmin device that recorded the activity.
• Detailed recordings, where Garmin includes them — per-second samples of heart rate, power, cadence and speed, and any GPS coordinates contained in the activity.
• Your Garmin user identifier, used only to attribute an incoming activity to the right Sport Nexus account.

We do not request or receive your Garmin profile, your Garmin contacts, or any history from before you linked your account.

What we send to Garmin

If you use training plans, Sport Nexus can push structured workouts to your Garmin Connect account so they appear on your watch, and can update, schedule or delete workouts it created. What travels in this direction is the workout itself — not your personal data.

How we use Garmin data

• Showing your training log, your progress, and each session's analysis (heart-rate zones, training load, heart-rate drift).
• Automatically marking an assigned session complete when a matching activity arrives, so you do not have to report it by hand.
• Merging and de-duplicating activities that arrive from more than one source, so a session is counted once.
• Scoring challenges and leaderboards inside your club.
• Showing your training progress to the coaches and managers of the club you belong to, for coaching purposes.

We do not use Garmin data for advertising or profiling, and we never sell it.

Where Garmin data is processed and stored

Every computation performed on Garmin data — de-duplication, session grading, the analysis figures — runs in Sport Nexus's own code on our own servers. Garmin data is stored in a PostgreSQL database operated by FAB MANAGEMENT TECHNOLOGY SERVICE JOINT STOCK COMPANY on infrastructure located in Vietnam, with restricted access; connections to the app use HTTPS. Garmin data is kept until you delete it: there is no time-based expiry. The database is backed up automatically once a day; those backups are held on the same infrastructure in Vietnam for roughly seven days before being overwritten, and no copy is sent anywhere else. Data you delete therefore also disappears from the backups within about seven days of deletion.

Third parties, including AI services

No Garmin data is shared with, sold to, or processed by any third party. It is not sent to any third-party AI or data-processing service. In particular:

• Anthropic (Claude), the AI service behind our training-plan and challenge-draft features, receives no Garmin data of any kind — not the raw payload, not the per-second samples, not the summarized activity figures. What is sent is limited to what you type into the plan form (age, resting heart rate, a recent race distance and time you report yourself, your goal, race date, training method and the weekdays you can train) and the figures Sport Nexus computes from those entries. For challenge drafts, only the coach's own typed description, the club's sports and its currency code are sent.
• Open-Meteo receives a latitude/longitude and a date range to return a forecast. No Garmin data reaches it.
• Resend, our email delivery provider, receives your email address and the message. No Garmin data is sent by email.
• Meta (Facebook App Events SDK) — used only to measure app installs and app-open sessions so we can attribute them to our own advertising campaigns. It receives no Garmin, health, activity or location data whatsoever: it sees only the install/app-open event and the device's advertising identifier. You can turn this attribution off in your phone's privacy settings (enable “Limit Ad Tracking” on iOS, or reset/delete the advertising ID on Android).

Other than the Meta install-measurement SDK described above — which receives only the install/app-open event and never any Garmin data — we have no analytics, advertising, crash-reporting or data-broker integrations that receive Garmin data.

Disconnecting, and deleting Garmin data

• Disconnect in the app (Profile → Device Connections → Garmin). The link and our stored tokens are removed immediately, we stop receiving anything new, and we call Garmin's API to end the registration on Garmin's side too.
• You choose what happens to what we already synced. You can keep those sessions in your training log, or ask us to delete them. Deletion is scheduled with a 30-day grace period: the data stays visible during that window, and reconnecting the same Garmin account within it cancels the deletion. After 30 days the Garmin activities and everything derived from them are deleted from the live system, and they disappear from our daily backups within about seven days after that.
• If you revoke access from Garmin Connect instead, Garmin notifies us and we end the link the same way — but since we cannot ask you what you want, your already-synced sessions are kept by default. You can ask for them to be deleted at any time in the app, on the same 30-day schedule.
• Deleting your Sport Nexus account deletes everything we hold about you from the live system, including all Garmin data, the connection and the tokens; the daily backups that still contain it are overwritten within about seven days. You can also request deletion by emailing sportnexus@fab.vn.

6. Data retention & deletion

Data is kept for as long as your account is active. The database is backed up automatically once a day; those backups stay on the same infrastructure for roughly seven days and are not copied anywhere else, so data you delete also disappears from the backups within about seven days. You can:

• Unlink a device at any time under Device Connections — we stop receiving new data from that source, and you choose whether the sessions already synced are kept or deleted (see section 5 for Garmin).
• Request account deletion and all related data by contacting sportnexus@fab.vn. When you revoke access on the Garmin/COROS side, we are notified too and stop processing the corresponding data.

7. Security

Passwords are one-way hashed. Device access tokens are stored encrypted at rest in our database, with restricted access. All connections to the app use HTTPS.

8. Policy changes

When we make significant changes, we will update the date at the top of the page and notify you in the app if needed.

9. Contact

Any privacy questions: sportnexus@fab.vn.