Updated on September 10, 2021
PWR Lab, Inc. owns and operates the www.pwrlab.com website and associated sites and applications, including web applications, mobile applications, and APIs that allow a variety of integration with third parties, and also provides data gathering, aggregation, usage and reporting Service to you and to third parties. The Service includes, with your permission, the gathering up of your Data that is recorded by third party hardware devices such as GPS watches with heart rate monitor capabilities, and the aggregation, storage and use of that Data in a variety of ways (along with similar Data of large numbers of other users of ours). This includes, with your consent and when you join certain User Groups, the sharing of your Data, as part of User Content, with Partners.
We collect your data to provide and improve the Service. Our goals in collecting and sharing data are to provide value to individual users like you, to generate new scientific discoveries, and to provide you, by sharing some or all of your data with one or more of our Partners, with access to better events, products, services and experiences. When we share your data with third parties, we always do it with your explicit consent, and with the expectation that this sharing will help achieve one or more of these goals. To the extent that you feel that we are not achieving these goals we encourage you to contact us with your concerns and/or to cease using our Services.
While you are using our Service, with your consent we obtain your data from several sources as follows.
We collect information from the devices and apps you connect to our platform (“Platform Data”) in the course of using the Service. For example, you may connect your smartwatch or mobile phone account to our platform and information from these devices and apps will be passed along to our platform via an API.
We also gather the information that you directly input or share on the Service, including information from features such as Daily Diary comments. To the extent you email us or participate in a survey or other communication we initiate, we gather that information as well.
When you make a payment to us, you may provide payment information such as your payment card or other payment details. Note that we use Payment Card Industry compliant third-party payment services and we do not store your credit card information.
We may collect information related to how you access and use our Service and Supplemental Service ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
We use your data that we collect for a variety of purposes, including to:
We may occasionally give you the opportunity to participate in User Groups that one of our Partners has asked us to establish, in exchange for your sharing your data with your partner.
We may share different types of user data with Partners. For instance, in some instances, we may share data that, on its own, is sufficient to identify you. Examples include your name, your email address, your date of birth, your street address, and so on. We may also share data that consists of everything else you generate individually. Data in this category, on its own, is insufficient to identify you but, combined with other data you provide, may become sufficient to identify you. Examples of data in this category include your age, zip code, gender, and activity data.
Finally, we may aggregate and summarize your data with that of other users to create anonymized pools of data. This type of data cannot be disaggregated and attributed back to individual users.
If you choose to join a User Group to receive the Supplemental Services that are available to members of that User Group, we may ask you for your consent to our sharing different types of data with the relevant Partner, and/or to our aggregation of your data into the data that we share with that Partner. In each instance, the information that we ask you to share will be specified at the time that you consent, and you may modify or terminate your consent at any time by visiting your personal Profile page, which you can find via the link at https://www.pwrlab.com/manage-connections/
At any time, you can review the User Groups in which you have chosen to participate in your PWR Lab profile, and the data that you are sharing with us and with each Partner as a result. In that same PWR Lab profile you can change the User Groups in which you participate and the data you share.
We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used. Service Providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Your Personal Data will not be sold, exchanged, transferred, or given to any third party without your consent, other than for the express purpose of delivering the Service.
We may use Service Providers to monitor and analyze the use of our Service.
The security of your data is important to us, and we work hard to protect your information. We strive to take reasonable and commercially appropriate measures to protect Personal Data from loss and misuse of any kind. Note that no method of transmission over the Internet or method of electronic storage is 100% secure, and that we cannot guarantee absolute security.
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.
If you are located outside of the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there.
We may disclose your Personal Data in the good faith belief that itis necessary to:
Except as detailed elsewhere in this policy, we do not disclose a user’s Personal Data to any third-party for such third-party’s direct marketing purposes.
Our Service may contain links to other websites or services that are not operated by us. Additionally, other users may provide you with links to third party websites or applications. If you click on a third-party link, you will be directed to an external site or service. We have no control over and assume no responsibility for the content, policies, or practices of any third-party sites or services. We strongly advise you to review the policies of every site or service you visit.
As a user of our Service, you may review, alter, or remove your Personal Data in a number of ways.
Our Service is not directed at nor intended for anyone under the age of 13: use of our Service is strictly limited to users that are 13 years of age and older. We do not knowingly collect or store any information or Personal Data for anyone under the age of 13. By accessing or using our Service, you represent that you are at least 13 years of age.
If you are a parent or guardian of a child under age 13 who has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from any child under age 13, we take steps to remove that information from our servers.
As an individual residing in the European Union (EU), you have the following rights associated with our use of your Personal Data under the EU’s (EU) General Data Protection Regulation (GDPR):
Note that exercising these rights may impact the accessibility and functionality of the Service, as many aspects of access and usage are dependent upon the use of Personal Data. If you wish to exercise any of these rights, please contact us via email using the contact information below with the details regarding your specific data request.
We are not a healthcare provider and are not a “covered entity” as that term is defined In the the Health Insurance Portability and Accountability Act of 1996 (HIPAA). As a result, we are not subject to the security and privacy provisions of HIPAA regarding medical information.
Some internet browsers incorporate a “Do Not Track” (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Our Service does not currently register, respond to, or modify its practices when it receives DNT signals.
PWR Lab does not “sell” (as defined in the CCPA) the personal information of PWR Lab users.
The CCPA gives California consumers various rights with respect to the personal information we collect, including the right to (subject to certain limitations):
California users may make a request by contacting us at firstname.lastname@example.org. We will authenticate your request using the email address associated with your PWR Lab account and if necessary, proof of residency.