Privacy Policy

Defynr is currently an unincorporated early-stage software venture operated from the United Arab Emirates. For the purposes of this Privacy Policy, references to “Defynr”, “we”, “us” or “our” refer to the operator of the Defynr service.

At Defynr™, physiological data is deeply personal. We do not sell your data. We build intelligence from it.

We apply data-minimization and access-control practices when operating the service.

1. Data We Collect

A. Account Information: Name, Email, Authentication credentials.

B. Performance & Device Data: When you connect an available supported service, we may collect Heart Rate, Heart Rate Variability (HRV), Sleep data, Power (Watts), Pace, Cadence, GPS and activity data.

C. Interaction & Usage Data: Feature usage, page interactions, feedback and support submissions.

2. How We Use Your Data

We use your data to generate personalized training recommendations, provide recovery and performance insights, improve system accuracy and reliability, and maintain platform functionality.

Personal data obtained through connected services is used only to provide, operate, secure and improve the Defynr service in accordance with your authorization and the applicable connected-service terms. Defynr does not use identifiable connected-service data to train third-party or public foundation models.

We do not sell personal or physiological data.

3. Data Architecture & Separation

Your data is handled using a layered architecture:

• ✓ Identity Layer (PII): name, email, account data
• ✓ Performance Layer: physiological and activity data
• ✓ Analytics Layer: anonymized interaction data

These layers are logically separated and access-controlled.

4. Consent & User Control

You can choose whether to connect available supported services and authorize the data they share with Defynr.

We may introduce more granular controls over time to provide additional flexibility.

5. Zero-Trust Access Model

Access to personal and physiological data is limited to personnel and systems that need it to operate and support the service.

6. Data Retention & Deletion

The current account-deletion process schedules deletion of the account's personally identifiable information (PII) after a three-hour cancellation window.

• ✓ Before Completion: You may cancel a deletion request before the scheduled deletion is completed.
• ✓ After Completion: The service removes the PII record and deactivates the associated pseudonymous account record.

Anonymized Data Retention: Certain activity and performance data may be retained in a fully anonymized and non-identifiable form for internal service improvement and aggregated insights only. This data cannot be linked back to any individual, contains no personal identifiers, and is processed in accordance with applicable data protection laws.

Defynr does not attempt to re-identify anonymized data.

7. Analytics & Tracking

With your Analytics consent, we collect limited usage analytics such as page visits, clicks, and feature usage to improve product experience.

8. AI & Model Usage

CereBro™ and VideoBro™ use machine learning to generate insights. We do not use identifiable connected-service data to train third-party or public foundation models, nor do we expose individual-level physiological data externally.

Where external service providers are used to operate features, their applicable terms and data practices may also apply.

9. Third-Party Integrations

Where integrations are made available, we only access the data that you explicitly authorize.

10. Data Security

We use administrative, technical, and access safeguards designed to protect the data we process.

11. Your Rights

Depending on your jurisdiction, you may have the right to access your data, correct inaccuracies, request deletion, or export your data.

To exercise these rights, contact: privacy@defynr.com

12. International Users

Defynr's primary application data infrastructure is configured in Frankfurt, Germany. Processing locations may change as the service evolves.

13. Policy Updates

We may update this Privacy Policy periodically. Where changes are material, we will provide appropriate notice as required by applicable law. The effective date shown at the top of this Privacy Policy indicates when the latest version took effect.