NexRex Privacy Policy

1. Introduction

Welcome to NexRex (“we,” “us,” or “our”). We’re committed to protecting your privacy while helping you achieve your running goals. This Privacy Policy explains how we collect, use, and protect your information when you use the NexRex mobile app and web platform (collectively, the “Platform”).

By using NexRex, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, date of birth, profile photo
• Training Data: Running activities, race goals, training preferences, personal records
• Race Information: Race registrations, race history, race photos you upload
• Communication Data: Messages with coaches and training partners through our platform

2.2 Automatically Collected Information

• Activity Data: Distance, pace, duration, route maps, split times
• Device Information: Device type, operating system, app version, unique device identifiers
• Usage Data: Features used, pages viewed, time spent on Platform, interaction patterns
• Location Data: GPS data during activities (only when you record a run)

2.3 Information from Third-Party Sources

• Wearable Devices: Activity and health metrics from Apple Health, Google Fit, Garmin, and other connected devices
• Social Media: Profile information if you sign in via social media accounts

2.4 Health-related data

Depending on what you record or connect to NexRex, health-related data may include heart rate and heart-rate zones; sleep, recovery and readiness; body metrics; nutrition logs; injury-risk signals; and training load. We use these data to track training, assess recovery and readiness, and provide personalized training insights and recommendations. These categories may also be returned to a connected AI assistant as described in Section 4.6.

3. How We Use Your Information

We use your information to:

• Provide and improve the NexRex Platform
• Generate AI-powered training plans and personalized recommendations
• Track your progress, personal bests, and training analytics
• Enable social features (leaderboards, partner matching, activity sharing)
• Facilitate coach-runner relationships and club management
• Send training reminders, weekly summaries, and platform updates
• Provide customer support
• Detect and prevent fraud or technical issues
• Comply with legal obligations

3.1 AI and Automated Decision-Making

Our AI assistant analyzes your training data to provide:

• Personalized training plan adjustments
• Workout summaries and insights
• Weekly training recommendations
• Performance predictions

You can always manually adjust or ignore AI recommendations.

4. How We Share Your Information

4.1 With Coaches and Club Admins

If you join a training club or work with a coach, they can access:

• Your training activities and timeline
• Your race goals and scheduled workouts
• Your performance metrics and analytics
• Training plan compliance and progress
• Health-related data described in Section 2.4, such as heart rate, sleep and recovery, body metrics, nutrition logs and injury-risk signals

Coaches and club admins CANNOT access:

• Your password or payment information
• Your private messages with other users
• Activities you mark as “private”
• Your account before you join their club

You control this sharing: You can leave a club or disconnect from a coach at any time, which immediately revokes their access to your future data.

A coach may use their own connected AI assistant to read an athlete’s data that the coach can already view in NexRex, including the health-related data described in Section 2.4. This access is limited to the coach’s existing permissions; connecting an assistant does not grant the coach additional access. The athlete does not need to connect an assistant themselves for this coach-mediated sharing to occur.

4.2 With Other Users

• Public Leaderboards: Your name, profile photo, and race performance (you can opt out)
• Training Partners: Activity data you choose to share
• Social Sharing: Content you explicitly choose to share on social media

4.3 With Service Providers

We share information with trusted third parties who help us operate NexRex:

• Cloud hosting providers (data storage)
• AI service providers (training recommendations)
• Payment processors (subscription management)
• Analytics providers (app improvement)
• Email service providers (notifications)
• Customer support chat providers (website support chat messages and AI-assisted replies)

These providers are contractually required to protect your data and use it only for specified services.

4.4 For Legal Reasons

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect the rights and safety of NexRex, our users, or the public
• Detect, prevent, or investigate fraud or security issues

4.5 Business Transfers

If NexRex is involved in a merger, acquisition, or sale of assets, your information may be transferred. We’ll notify you before your information becomes subject to a different privacy policy.

4.6 AI assistant connections

You may choose to connect NexRex to ChatGPT, provided by OpenAI, or Claude, provided by Anthropic. At the direction of the user of the connected account, NexRex sends the information needed to answer their request to that assistant. This may include account and profile information, training activities, plans and goals, performance analytics, and the health-related categories in Section 2.4, within that account’s existing access permissions. For a coach’s connected account, the sharing described in Section 4.1 also applies.

The assistant provider processes information it receives under its own privacy policy and the settings of the account using that assistant. This user-directed connection is separate from the service providers operating NexRex described in Section 4.3. Review the provider’s policy before connecting or requesting data.

You can disconnect NexRex in the assistant’s connection settings or revoke the connection in NexRex settings. Revoking a connection stops future access through that connection; it does not delete information already sent to the assistant. Manage that information using the assistant provider’s privacy controls. Athletes can control coach access through their NexRex privacy settings and coach or club relationship, as described in Section 4.1.

OpenAI — ChatGPT

Anthropic — Claude

5. Your Data Rights and Choices

5.1 Access and Control

You can:

• Access and update your account information in app settings
• Delete your account (which permanently removes your data within 30 days)
• Disconnect third-party integrations (wearables, social accounts)

5.2 Communication Preferences

You can control:

• Push notifications (in app settings)
• Email notifications (training summaries, platform updates)
• Marketing communications (opt-out anytime)

5.3 Privacy Settings

You can:

• Make specific activities “private” (visible only to you)
• Hide your profile from public leaderboards
• Control what coaches/club admins can see
• Disable social sharing features

5.4 Regional Rights

For EU/UK Users (GDPR):

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with your data protection authority

For California Users (CCPA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt-out of sale (Note: We do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@nexrex.ai.

6. Data Security

We protect your information using:

• Encryption for data transmission (SSL/TLS)
• Encrypted data storage
• Secure authentication systems
• Regular security audits
• Access controls and monitoring

However, no system is 100% secure. Please use a strong password and enable two-factor authentication when available.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Most data is deleted within 30 days
• Some data may be retained for legal or security purposes (up to 3 years)
• Anonymized/aggregated data may be retained indefinitely for analytics

Connection records, including authorization, access and revocation records, are retained while your account is active and for up to 3 years after account deletion, to operate connections, resolve support requests, and meet security or legal obligations. Disconnecting stops future access but does not itself delete those records or your NexRex account. Copies already received by an assistant provider are subject to that provider’s retention policy.

8. International Data Transfers

NexRex operates globally. Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for these transfers in compliance with GDPR (Standard Contractual Clauses) and other applicable laws.

9. Children’s Privacy

NexRex is not intended for users under 16 years old. We do not knowingly collect information from children under 16. If we become aware of such collection, we will promptly delete the information. Parents who believe their child has provided information to us should contact us immediately.

10. Cookies and Tracking

On this website, Google Analytics 4 and PostHog load only after you select “Accept analytics”. We use them to understand how the website is used and which campaigns lead to sign-ups, and to improve it.

After consent, we send page views, selected interactions such as button clicks and form submissions, campaign tags from the link you arrived through, and the domain of the site that referred you. Page addresses are sent without query strings or fragments, and personal referral, partner and member-card codes are removed. Campaign tags are sent only when they are plain labels, such as utm_source=instagram. For coach applications and workshop sign-ups, we also send the options you chose: coach or club, and the size range of your athletes or students. We never send what you type, such as your name, email address, contact details or messages.

Session recording is off. Google Analytics 4 may also record automatic engagement measurements, such as session starts, engagement time and scroll depth. Advertising storage, ad personalization and Google signals are off.

Your versioned analytics choice is stored in local storage on this browser. Rejection persists across visits. When we widen what analytics collects, we ask again before collecting more. If this preference cannot be read or saved, analytics stays off. After consent, Google Analytics stores first-party _ga cookies to distinguish visits and attribute them to campaigns. PostHog keeps its analytics state in memory only and stores nothing in your browser.

Use “Privacy settings” on any page to change your choice or withdraw consent. Withdrawal stops future website analytics and clears analytics storage we can control in this browser. It does not delete records already sent to providers. Essential website functions and support chat remain available regardless of your analytics choice.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, integrations, or services (e.g., race registration sites, wearable device platforms). We are not responsible for their privacy practices. Please review their privacy policies before providing information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We’ll notify you of material changes via:

• Email to your registered address
• In-app notification
• Notice on our website

Continued use of NexRex after changes indicates your acceptance of the updated policy.

13. Contact Us

For questions, concerns, or to exercise your data rights, contact us:

Email: support@nexrex.ai