Privacy Policy

Last updated: October 23, 2026

Hybrid Plan Builder ("we", "us") builds training plans and daily workouts for hybrid fitness races. This policy explains what personal information we collect, why, how we protect it and the rights you have. We follow Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, and Canada's PIPEDA.

Person in charge of personal information

Our person in charge of the protection of personal information can be reached at [email protected]. Write to this address for any question, request or complaint about your personal information.

What we collect

Without an account, the plan you build (race date, goal time, division, age group, 5k time, body weight, training days and machines) stays in your browser. It is not sent to us.

With an account, we keep:

• Account details: your email address and a user ID. If you sign in with Google, Google shares your email address and basic profile with us. We never see your Google password.
• Plan details: race date, goal time, division, age group, 5k times, body weight (if you enter it), training days and available machines.
• 5k test results: your 5k test times and, if you choose to enter it, your average heart rate for the test.
• Workout of the Day: your Solo or Team choice.
• Subscriptions: if you subscribe, a Stripe customer reference and the status of your subscriptions.

Nothing you enter is shown to other users. Your account and plan are visible only to you.

Heart-rate data is health-related information, which we treat as sensitive. Entering it is always optional. We only collect it with your express consent, which you give when you create an account and each time you enter a value.

We do not collect your location or your card details, and we do not use advertising or tracking cookies.

Why we use it

• To build your plan and work out your paces and heart-rate zones.
• To save your plan and 5k test results so you can use them on any device.
• To know which subscriptions you have, so the right features are unlocked.
• To show you the daily workout in the version you prefer.
• To answer your questions and keep the service secure.

We use your information only for these purposes. We do not sell or rent it, and we do not use it to make automated decisions about you beyond the training calculations shown on screen.

Where it is stored and who processes it

Your account and saved data are stored with Google Firebase (Firebase Authentication and Cloud Firestore), operated by Google LLC. Google's servers may be located outside Quebec and outside Canada, including in the United States. Before using this provider, we assessed the protection it offers: data is encrypted in transit and at rest, and each user can access only their own records. Information held in another country may be accessible to authorities there under local law.

The site also loads fonts from Google Fonts and the Firebase code from Google's servers. To deliver these, Google receives your IP address and browser details.

Payments are handled by Stripe (Stripe, Inc. and its affiliates), which may process data outside Quebec and Canada. Stripe collects your card details on its own checkout page; we receive only a customer reference, your email address and your subscription status, never your card number.

Cookies and browser storage

We only use storage that is essential for the site to work. You can choose "Essential only" or "Accept" in the bar at the bottom of the page and change your choice at any time with Cookie settings. Optional categories (for example audience measurement) are off unless you accept them. None are in use today.

How long we keep it

We keep your information while your account is open. When you delete your account, your plans, 5k test results and settings are deleted right away. Stripe keeps payment records as the law requires. Google may keep backup copies for a short period (normally up to 30 days) before they are erased. Information you never sent to us stays only in your browser, and you can clear it at any time.

Your rights

• Access and portability: email [email protected] and we will send you a copy of everything we hold, in a structured format (JSON).
• Correction: change your plan details at any time with Edit, or ask us to correct anything else.
• Withdraw consent and deletion: remove heart-rate values by editing a 5k result, delete a plan with Delete, or delete everything with Account → Delete my account.
• Questions and complaints: contact our person in charge at [email protected]. We answer within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec.

Security and incidents

Access to your data is limited to your own signed-in account by security rules on our database. Only our person in charge can access it to handle a support request you make. If a confidentiality incident presents a risk of serious harm, we will notify you and the Commission d'accès à l'information promptly and keep a register of incidents, as the law requires.

Age

The service is meant for people aged 16 and over (see the Terms). We do not knowingly collect information about anyone under 14. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. If the change is important, we will tell you on the site before it takes effect.