Privacy policy.

1. Who is responsible

Outset Limited operates outset.co.nz and is developing Outset Training (working name). For privacy questions or requests, contact Pablo Kraus at pablo@outset.co.nz.

2. What is available today

This public website describes our studio and products. It does not offer Outset Training accounts, accept activity uploads, or connect to Garmin, Oura or Apple Health. There is no public training-data collection form or connected-account login on this site.

The private training prototype currently contains founder testing records and training notes, stored separately from the public website. It supports manual diary records and report drafts. Garmin and other automatic health integrations are not live. The illustrative interface on the training page contains no real athlete records.

3. Website visits and enquiries

The site is hosted by Vercel. Requests are processed by its infrastructure and may produce technical logs such as IP address, requested URL, browser information, timestamps and error information, for delivery, reliability and security.

The site includes Vercel’s Web Analytics script to help us understand site usage and improve the website. This may process page visits, referring pages, browser and device characteristics, and approximate location derived from a request. See Vercel’s analytics privacy information and privacy policy for its processing details. We do not use this site to sell personal information or run advertising profiles.

If you email us, we receive your address, name if provided, and message contents. We use these to respond, discuss the product and maintain the resulting correspondence. Email links open your own email application; they are not a mailing-list sign-up. Please do not email passwords, account tokens or detailed health records to enquire about the product.

4. Intended training data and purposes

For a future beta, we plan to collect only data needed for the features you choose. This may include account/contact details; activity date, type, distance, duration, pace, elevation and heart-rate records; permitted sleep and recovery metrics; and the training plans, perceived effort, recovery, fuelling, niggles and coach notes you enter.

The intended purposes are importing and organising activities, comparing planned and completed training, showing recovery context, and preparing athlete-reviewed coach reports. Source authorisation, available data and provider terms will determine what can actually be imported. We will update this policy with the live integrations and actual processing before inviting users to connect accounts.

5. Authorisation and sharing

The planned Garmin integration will use Garmin’s authorised consent flow if access is approved. We do not collect Garmin passwords on this website. Future account connection, revocation and deletion controls are development commitments, not currently available public features.

Coach sharing is intended to be athlete-directed: you decide which report or data to share. No automatic coach access is available on this website. If an athlete independently sends a report to a coach, the coach’s handling of their copy is separate from Outset’s.

We may use service providers to operate hosting and email, or disclose information when legally required. Providers may process information outside New Zealand. Before the public training service opens, we will identify the services that handle training data and explain applicable transfers and safeguards.

6. AI and sensitive information

Health and training records can be sensitive. Optional AI-assisted summaries are a planned feature, not an active connected-data service on this website. We will not introduce that feature for users without explaining what information is processed, by which services and for what purpose, obtaining the athlete’s consent, and meeting the relevant provider permissions. We will not sell health or training records, use them for targeted advertising, or use them to train AI models. We do not claim Garmin has approved AI processing, cross-provider aggregation or coach access.

7. Storage, retention and security

The founder prototype’s records are separate from the public static site. We intend to retain enquiry correspondence only for as long as needed for the enquiry, an ongoing relationship, or legal and operational obligations. Vercel manages its infrastructure records under its applicable terms.

Before launching training accounts, we plan to implement access separation, protected connection-token storage and user disconnect/deletion controls, with a documented retention and backup-deletion schedule. The exact periods and production controls will be published before third-party athletes provide data. We do not claim a certification or guarantee that every security risk can be eliminated.

8. Your requests

You can contact pablo@outset.co.nz to ask what personal information Outset holds about you, request access or correction, request deletion, or raise a privacy concern. We may need to verify your identity before acting. We will explain if a legal obligation prevents deletion of a particular record.

If a concern is not resolved, you can contact the New Zealand Office of the Privacy Commissioner. External project links on this website lead to services with their own privacy notices.

9. Changes before release

We will revise this policy as the product develops and show the update date here. A future public or closed-beta release will include a policy reflecting its actual data flows, providers, retention and user controls—not just the intentions set out above.