Legal & Compliance
Privacy Policy
Last Updated: October 21, 2026 · Version 2.0
At ErgVerse (accessible at ergverse.com), your athletic privacy, telemetry integrity, and data ownership are core to our mission. This Privacy Policy details how we handle information when you connect Concept2 ergs, participate in virtual 3D races, and sync workouts with third-party fitness platforms.
1. The Information We Collect
ErgVerse collects only the data necessary to provide authentic real-time 3D racing and performance tracking:
- Concept2 PM5 Telemetry: When you connect via Web Bluetooth (BLE), we read real-time metrics including elapsed time, distance, pace (/500m), stroke rate (SPM), watts, drive length, and heart rate (if an HR monitor is paired to your PM5).
- Athlete Profile: Fictional or chosen display handle, country/nationality code for leaderboards, and boat/ski division.
- Workout Records: Aggregated summary metrics (total time, distance, average pace, average watts, split splits) saved to local IndexedDB storage and optionally synchronized to your Supabase athlete account.
2. Concept2 Online Logbook Integration
ErgVerse provides voluntary one-click synchronization with the official Concept2 Online Logbook (log.concept2.com).
- OAuth2 Authorization: If you choose to link your Concept2 account, authentication is performed directly on Concept2's servers. ErgVerse never sees or stores your Concept2 password.
- Token Security: Concept2 OAuth access tokens are stored securely in your browser's private storage or your encrypted athlete profile, used strictly to execute
POST /api/users/me/results when you tap "Sync to Concept2 Logbook".
- Data Transmitted: Workout date, elapsed time, distance, erg modality (SkiErg / RowErg / BikeErg), average stroke rate, and split times.
3. Strava Integration
ErgVerse supports activity uploads to Strava via the Strava API.
- User Consent: ErgVerse will never upload an activity to your Strava profile without your explicit action (tapping "Sync to Strava" or enabling auto-sync in settings).
- Activity Files (.FIT): Workouts sent to Strava are compiled as standard binary Flexible and Interoperable Data Transfer (
.FIT) files containing power curves, cadence, and split metrics.
- Compliance: ErgVerse strictly adheres to the Strava API Agreement and never uses Strava athlete data for advertising, machine learning training, or commercial resale.
4. Local-First & Data Ownership
ErgVerse operates on a local-first architecture. Your workout logs are stored in your device's browser database (IndexedDB). You retain total ownership of your athletic data and can export standard .FIT activity files or delete your history at any time without restriction.
5. Contact & Inquiries
For privacy questions, account deletion requests, or developer API inquiries, contact us at privacy@ergverse.com.