ATmetrYX records your heart rate and metrics derived from it. These are health data under Article 9 of the GDPR and receive enhanced protection. They are processed on the basis of your explicit consent, which you may withdraw at any time. This consent is given through a setting in the application, which is switched off by default: until you switch it on, no session data is sent to our servers (see section 4).
In the cockpit, health data (weight, height, resting heart rate, VO2max, and the free-text fields that may mention your body or injuries) are recorded and displayed only with your “health data” consent, given in the cockpit and withdrawable at any time (see section 2.7).
Who is responsible for your data
ATmetrYX is a Studio FP24 project. The data controller is Studio FP24, a French simplified joint-stock company (SAS) with a sole shareholder, with share capital of 3,000 euros, registered with the Nantes Trade and Companies Register (RCS Nantes 108 387 697), represented by its President, Pierre Pougnet Landais.
- Registered office: 5 rue Voltaire, 44000 Nantes, France
- Data protection contact: contact@atmetryx.com
The data controller publishes the ATmetrYX application, the atmetryx.com website and related services. No Data Protection Officer has been appointed, as this is not mandatory in our situation; requests relating to personal data are handled at the address above.
What data is processed
2.1 Activity and health data
When you record a session with the application:
- Heart rate during effort and during recovery
- Metrics derived from heart rate: variability (HRV) and recovery rate (HRR)
- Durations, breakdown of the session into phases and sets, and distances and elevation gain or loss where available
- Start date and time of the session, the watch's time zone offset, session type (competition or training), effort type (run or row) and the category chosen in the application settings (Lite, ATHX or Pro)
- Depending on your watch's sensors: altitude, cadence, speed, power, temperature
- Body Battery and stress level read by the watch at the start of the session, where available
- Profile information sent by the watch when filled in on your Garmin account: year of birth, sex, height, weight, activity level, resting heart rate (including its 7-day average) and maximum heart rate, heart rate zones, estimated VO2max, functional threshold power (FTP) and running power zones
2.2 Technical device data
- A technical installation identifier provided by Garmin
- Watch model reference, its software version and the application version
- Technical transfer information: the date the session was saved and the date it was sent, the number of transfer attempts, and the number of readings obtained from each sensor compared with the number expected
These are used to link your sessions together and to adapt the service to your device's capabilities.
2.3 Email address and communication preference
The application invites you to enter your email address in its settings, from the Garmin Connect app on your phone. This is optional: the application works without it. It allows your sessions to be linked to you over time and lets us send you your session summary.
A separate setting lets you agree to receive commercial information. It is switched off by default and has no effect on how the application works.
2.4 Website data and former plan generator
The website's Smart Plan Generator (plan generation by email from atmetryx.com) ended on 25 October 2026: the website no longer collects this information. Plan generation now takes place in the cockpit (see 2.8). When you subscribe to the newsletter on atmetryx.com, we collect your email address (retention: see section 6).
Data collected before that date — your email address and what you entered in the form (sex, age, competition format, target category, sessions per week, maximum loads, 5 km time, available equipment, event date, goal, page language, optional free-text fields), the generated plan, and the anti-abuse hash of your email address and IP address — remains kept by our host (Netlify) until it is deleted. Your answers had been sent to Anthropic, without your email address, to generate the plan. You can request access to it or its deletion at any time (section 7).
Website audience measurement is carried out with Umami Cloud (hosted in the European Union), a privacy-friendly analytics tool, without cookies and without any persistent identifier. IP addresses are not retained (hashed in memory, not stored). The data collected is aggregated and non-identifying: page views, traffic source (referrer), country, and device or browser type. There is no cross-site tracking and no advertising profiling. No consent banner is required, and these statistics cannot identify you.
2.5 ATmetrYX news list
When you sign up on atmetryx.com to receive ATmetrYX news (information about the Garmin application, the cockpit, Premium and the ATHX format), we collect your email address, the page language, the page the form was on, the date of your sign-up, the record of your consent, and your IP address and browser type, recorded automatically by Netlify. This data is used only to send you these information emails. This processing is based on your consent (Art. 6.1.a), given by ticking the box on the form. Sign-ups are recorded by our host Netlify (Netlify Forms service), established in the United States; this transfer is covered under the conditions described in section 9. They are kept until you unsubscribe. You can unsubscribe at any time by writing to contact@atmetryx.com: your sign-up is then deleted.
People who signed up before 25 October 2026 had consented only to receive an email announcing the opening of the application and the cockpit: their sign-up is used only for that email, then deleted.
2.6 Cockpit account and profile
The ATmetrYX cockpit is a web application. To use it, you create an account with your email address: we send you an email with a link and a six-digit code; there is no password. The email address and technical sign-in data are handled by our authentication provider (Supabase). In the cockpit, you can enter:
- Your profile: first name (shown in the cockpit) and last name (visible to authorised people at Studio FP24 in the administration tool, to identify the athlete), gender, competition division (male or female, which sets the scoring scale), date of birth (16 to 80 years), default category and goal, training days, session length, available equipment
- Your dated measurements: weight, height, resting heart rate, VO2max (health data); squat, press and deadlift loads (maximum, or a 3- or 5-repetition test); 5 km time (or a range) and 3 km time; time and experience in an ATHX or Hyrox race. They are declared by you or taken from your watch
- Your competitions: date, catalogue competition or the name, city and country you enter, format, target category, goal
- Your planned sessions and your entries: loads, repetitions, results per block, session status, and the link between a planned session and a session recorded by the watch
- Your free-text entries: “Notes for your plan” and “Exercises to avoid” (1,000 characters each), and, after a plan, feedback (satisfied or not, reasons from a closed list) and an optional comment (1,000 characters)
- Your consents: a dated log (type of consent, granted or withdrawn, text version, language)
Sessions recorded by your watch appear in the cockpit only if they carry the email address of your account and you have confirmed the watch in the cockpit. A refused watch no longer shows its sessions; they are kept, hidden, and not deleted.
2.7 Your consents and health data in the cockpit
The cockpit asks for three separate consents, none of which is required to continue: “health data”; “take my profile from my Garmin watch at each synchronised session”; and “plan generation by AI”. Without the “health data” consent, the cockpit does not ask for your weight or height, the health data of the watch profile stay hidden, and your free-text entries (notes, comments) are neither saved nor read.
Withdrawing a consent hides the data concerned; nothing is deleted automatically. The data stay stored, invisible in the cockpit and unused, until you ask for them to be erased (see section 7).
2.8 Plan generation in the cockpit
If you have given the “plan generation by AI” consent, our server builds the request from your profile and sends it to Anthropic (the Claude artificial intelligence model) to generate your plan. The following are sent: your competition division, your age (calculated, not your date of birth), the format, the date and, if it is recognised in the catalogue, the identity of your competition, your category and goal, your training days and session lengths, your equipment, your loads, your times and your race experience and, if you have given the “health data” consent, your weight and your free-text entries. The following are not sent: your email address, your first name, your gender, your date of birth and the name of your competition.
The plan received is checked by automatic controls, then installed in your account (weeks, sessions, blocks). We keep the record of the generation: status, dates, level (Free or Premium), model used, number of calls and the refusal codes of our controls, and a copy of the request without email address or health data. If a generation fails, an internal alert (account identifier and refusal codes, without email or content) is created so that we can deal with the failure. An attempt that does not complete within 20 minutes is marked as failed.
To limit abuse and costs, the number of requests is limited per account over 28 days (see the terms of use). Data sent to Anthropic is automatically deleted from its systems within 30 days of receipt or generation (longer retention is possible in case of a breach of its usage policy or a legal obligation); under its commercial terms, Anthropic may not train its models on this data. See also its retention periods.
After a plan is generated, we create or update your contact record in HubSpot, our tool for managing the relationship with users. HubSpot receives your e-mail address and the plan information (address of your plan in the cockpit, generation date, category, sessions per week, objective and ATHX format). Legal basis: our legitimate interest in managing the relationship with users of the service (Art. 6.1.f). This record is not used to send you commercial information without your consent (see article 2.5). It is deleted on your request (contact@atmetryx.com). HubSpot hosts this data in the European Union (see article 5).
2.9 Premium subscription and payment
If you take out the Premium subscription, payment is made by Stripe on Stripe's payment page: your payment method details are entered with Stripe, and ATmetrYX's code does not process them. To create your customer record at Stripe, we send it your email address and the internal identifier of your account. We keep: the Stripe customer identifier, the identifier, status and price of the subscription, the end date of the period, whether cancellation is scheduled, your level (Free or Premium) and its origin, and a log of the Stripe events processed (identifier, type and result, without content).
2.10 Storage on your device
The cockpit uses no cookie, no audience-measurement tool and no external service for its fonts. It stores in the browser, only in order to work: your sign-in session, your drafts of the welcome screens, your language, the queue of entries waiting to be sent (so that you can enter data offline) and the application cache. You can clear them from your browser settings; your sign-in and any unsent entries would then be lost. Our host Netlify may record technical connection information (technical logs, see section 6).
2.11 Messages to the ATmetrYX team (cockpit Help)
If you write to us from the Help screen of the cockpit, we keep your messages and our replies, linked to your account, in order to answer you and follow up on your request. Please do not send detailed health information there: it is not needed to answer you. When we reply, you may receive an e-mail inviting you to open the cockpit; it does not reproduce the content of the reply. Only authorised people at Studio FP24 have access to the messages. They are kept for 12 months after the last exchange and then deleted; they are deleted with your account and included in the export of your data. Legal basis: carrying out your request (Art. 6.1.b) and our legitimate interest in the security and follow-up of the service (Art. 6.1.f).
2.12 App installed on the home screen
If you use the cockpit from your phone's home screen, we record that the app was opened that way, the date of the first and of the last opening, and the platform (iOS, Android or other). We do not record any device identifier, IP address or model. This information is deleted with your account and included in the export of your data. Legal basis: our legitimate interest in providing support and ensuring the proper functioning of the service (Art. 6.1.f).
Why, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Record and display your session on the watch | Activity, health, device | Carried out on the watch only, with no transmission to ATmetrYX; explicit consent covers sending to our servers |
| Send your sessions to our servers, keep their history and let you consult it | Activity, health, device, email | Explicit consent (Art. 9(2)(a)) |
| Send you a session summary | Email, session summary | Performance of the requested service (Art. 6(1)(b)) |
| Generate a personalised training plan | Email, form answers | Performance of the requested service (Art. 6(1)(b)) |
| Send you commercial information | Consent, revocable (Art. 6(1)(a)) | |
| Ensure the security and proper operation of the service | Device, technical logs | Legitimate interest (Art. 6(1)(f)) |
| Measure traffic and improve the site | Page views, referrer, country, device type | Legitimate interest (Art. 6(1)(f)) |
| Create your cockpit account and sign you in | Email, technical sign-in data | Performance of the requested service (Art. 6.1.b) |
| Keep your profile, competitions, measurements and entries, and track your preparation in the cockpit | Profile, measurements, competitions, entries; health data for health measurements | Performance of the requested service (Art. 6.1.b); explicit consent (Art. 9.2.a) for health data |
| Generate and install your plan in the cockpit | Profile, measurements, competitions; free-text entries and weight if health consent | Consent to transmission to the AI provider (Art. 6.1.a); performance of the service (Art. 6.1.b); explicit consent (Art. 9.2.a) for health data |
| Limit generation requests and handle failures | Account, generation history, refusal codes | Legitimate interest (Art. 6.1.f) |
| Manage your Premium subscription and payment | Email, subscription identifiers and status | Performance of the contract (Art. 6.1.b); legal obligation (Art. 6.1.c) for supporting documents (kept for 10 years) |
| Reply to your messages (cockpit Help) | Account, messages and replies, language | Performance of your request (Art. 6.1.b); legitimate interest (Art. 6.1.f) |
| Provide support and ensure the proper functioning of the cockpit installed on the home screen | Opening from the home screen, dates of first and last opening, platform | Legitimate interest (Art. 6.1.f) |
| Manage the relationship with users of the service (HubSpot contact record) | E-mail, plan information (category, sessions per week, objective, format) | Legitimate interest (Art. 6.1.f) |
To withdraw your consent to sharing your sessions, switch off the sharing setting in the application settings, from Garmin Connect: no further session is sent (see section 4). You may stop using the application at any time, clear your email address in the settings, or ask us to delete your data. Withdrawal does not affect the lawfulness of processing carried out beforehand. In the cockpit, each consent is withdrawn in My account › My consents; this hides the data concerned without deleting it (see section 2.7).
What happens on your watch
The application records your session locally on the watch. At the end of the session, it prepares a structured summary and keeps it in its storage area until it has been transmitted.
Sending this summary depends on a setting in the application, available from Garmin Connect on your phone: “Share my heart rate and sessions with ATmetrYX (health data)”. This setting is switched off by default: you are the one who switches it on. The application checks it before every transfer; as long as it is off, nothing is sent to our servers. You can switch it off at any time.
Sessions that have not been sent stay on the watch, up to a limit of three: when a new session starts while three sessions are already waiting, the oldest one is erased from the watch. If you switch the setting on, the sessions still waiting can be sent from the application's synchronisation menu.
When the setting is on, this summary is only sent to our servers when your watch has a connection through your phone. You can also trigger the transfer manually from the application's synchronisation menu. Once the transfer is confirmed, the local copy is erased from the watch.
The application also records your session in the standard Garmin format (FIT file), which syncs to your Garmin Connect account through Garmin's usual mechanism. That file is covered by Garmin's own privacy policy, which is separate from ours.
Who has access to the data
Your data is never sold, rented or shared with third parties for advertising purposes. It is accessible to the data controller and to the following technical providers, acting as processors on our instructions:
| Provider | Role | Hosting |
|---|---|---|
| Supabase | Authentication and database (sessions, cockpit) | European Union (Ireland) |
| Netlify | Hosting of the website, the cockpit and server functions | United States |
| Brevo | Email delivery | European Union (France) |
| HubSpot | Contact management | European Union |
| Anthropic | Training plan generation (website and cockpit) | United States |
| OVH | Domain names and email | European Union (France) |
| Stripe | Payment of the Premium subscription | Stripe Payments Europe, Limited (contracting entity for accounts established in France); processing possible outside the European Union, notably in the United States |
We may also be required to disclose data to an administrative or judicial authority where the law requires it.
How long it is kept
| Data | Retention |
|---|---|
| Sessions, activity and health data | For as long as your account is active; deleted on request |
| Email address and preferences | For as long as your account is active; deleted on request |
| Newsletter contacts | Until unsubscribed, then 3 years maximum |
| ATmetrYX news list | Until you unsubscribe |
| Technical logs | 12 months maximum |
| Session summary on the watch | Erased as soon as the transfer is confirmed, or at the start of a new session if three sessions are already waiting |
| Cockpit account: profile, measurements, competitions, entries, plans, feedback, consents, app-installed signal | For as long as your account exists; deleted on request |
| Plan generation records (status, dates, refusal codes, copy of the request without email or health data) | For as long as your account exists; deleted on request |
| HubSpot contact record (e-mail, plan information) | Deleted on your request (contact@atmetryx.com); not deleted automatically with the cockpit account |
| Generation request in progress | Until the generation ends; an attempt is marked as failed after 20 minutes without a result |
| Premium subscription (Stripe identifiers and status, event log) | For as long as your account exists; payment records: 10 years |
| Messages from the cockpit Help (conversation) | 12 months after the last exchange, then deleted automatically; deleted with your account |
| Database backups | Automatic daily backups, kept for 7 days (Supabase Pro plan): deleted data may remain in backups during that period |
Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:
- Access — obtain a copy of the data concerning you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restriction — request that processing be suspended
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on our legitimate interest
- Withdrawal of consent — at any time, for processing that relies on it
To exercise these rights, write to contact@atmetryx.com. We respond within one month, extendable by two months for complex requests. Proof of identity may be requested in the event of reasonable doubt.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr, or with the supervisory authority of your country of residence.
In the cockpit, exporting your data and deleting your account are not yet done with a button: write to contact@atmetryx.com from the email address of your account. We reply within one month (Art. 12.3 GDPR), after verifying your identity through the email address of your account. Deleting the account erases your profile, measurements, competitions, plans and entries, feedback, consents and the subscription data held by us. Sessions recorded by your watch are linked to your email address, not to your account: they are erased on your express request. Deletion of your data at Stripe, Netlify and Anthropic is carried out on request, within the limits of legal retention obligations.
Withdrawing a consent in the cockpit (My account › My consents) hides the data concerned without erasing it; to have it erased, ask us.
Security
- All communications between the watch, the website and our servers are encrypted (HTTPS/TLS)
- Database access is restricted and protected by secret keys that are never publicly exposed
- Data is hosted in professional data centres with contractual security guarantees
- Access to production data is limited to those who need it
As no system is infallible, in the event of a data breach presenting a risk to your rights we undertake to notify the CNIL within 72 hours and to inform you where the law requires it.
Transfers outside the European Union
Your session data is hosted in the European Union. Some of the providers listed in section 5 are established in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses or by the EU — US Data Privacy Framework, together with additional technical measures such as encryption in transit.
Stripe and Anthropic, which act for the cockpit, may process data outside the European Union (these transfers are governed by the data processing agreements (DPAs) incorporated into the terms of Stripe, stripe.com/legal/dpa, and of Anthropic, anthropic.com/legal/data-processing-addendum, which rely on the European Commission’s standard contractual clauses).
Minors
ATmetrYX is not intended for people under 16 and we do not knowingly collect their data. If you hold parental authority and find that a minor has provided us with data, please write to us and we will delete it.
The cockpit profile asks for a date of birth and accepts only ages from 16 to 80.
Relationship with Garmin
ATmetrYX is an independent application distributed through the Connect IQ store. It is not affiliated with, sponsored by or endorsed by Garmin. Garmin's use of your data, in particular through Garmin Connect and FIT activity files, is governed by Garmin's own privacy policy, which we encourage you to read.
ATHX is a trademark belonging to its respective owners. It is mentioned for informational purposes to identify the competition format. We have no affiliation or partnership with ATHX Games.
Changes
This policy may change as the service evolves. The version date at the top of the page indicates the most recent update. If a substantial change affects your rights, we will inform you by email where we have your address, or through a visible notice on the website.
Contact
ATmetrYX — Studio FP24
Represented by its President, Pierre Pougnet Landais
5 rue Voltaire, 44000 Nantes, France
contact@atmetryx.com
ATmetrYX is a Studio FP24 project, a SAS with share capital of 3,000 euros,
RCS Nantes 108 387 697, 5 rue Voltaire, 44000 Nantes, France.
Privacy policy version 1.7, effective November 3, 2026.
Legal notice