Skip to content
Privacy by default

Data & Consent Center

Last updated: 12 June 2026

Your data is yours. This is the live control room for it — grant or withdraw consent for every distinct use, see exactly what each connected source shares, export or delete everything, and review a full audit trail of every change. Toggles take effect immediately. We never sell your data.

GDPR · CCPA compliantAES-256 encryptedNever sold
On this page
  1. 01 Your consents
  2. 02 Connected data sources
  3. 03 Your data rights
  4. 04 Encryption
  5. 05 Consent history
  6. 06 Cookie preferences
  7. 07 Contact the DPO

01Your consents

Each switch below controls one specific use of your data — independently. Turning one off never affects the others, and never breaks your core energy score. Changes are written to your audit trail instantly and propagate to our pipeline within minutes.

Peer comparison (cohort)

cohort_aggregation

Lets you see how your energy & recovery compares to a k-anonymized cohort of similar athletes (minimum group size enforced, never fewer than 8). Your individual data is never exposed — only aggregate, de-identified statistics. Off by default.

On

Product analytics

product_analytics

Anonymous, aggregated usage telemetry (screens viewed, features used, crash reports) that helps us find rough edges and ship fixes. No health data is ever included in analytics events.

On

Model research & training

model_research

Allows your de-identified data to improve our effect-generator models and energy-attribution science. Used only in aggregate, on a held-out research environment. Genetic and cycle data are always excluded from research, regardless of this setting.

Off

Marketing email

marketing_email

Occasional product news, new-feature announcements and performance tips. Separate from transactional email (security, billing, sync alerts) which you always receive. Unsubscribe in one click from any message.

On

Personalized insights

personalized_insights

Powers pattern detection — “afternoon dips follow late espresso 4 days in 5” — and tailored recommendations computed from your own history. Turning this off keeps your raw score but disables the discovered-pattern feed.

On

02Connected data sources

These are the integrations currently feeding your energy model. Each card shows exactly what that source shares with LockIn90. Disconnect any source at any time — historical data already ingested is retained per your deletion settings until you ask us to purge it.

Oura Ring
CONNECTED · synced 14m ago
  • Sleep stages & duration
  • HRV (ms) & resting HR
  • Readiness & body temp
ActiveManage
Apple Health
CONNECTED · synced 6m ago
  • Steps, workouts & active energy
  • Heart rate & VO₂ max
  • Mindful minutes
ActiveManage
Dexcom CGM
CONNECTED · synced 2m ago
  • Continuous glucose (mg/dL)
  • Glycemic response to meals
  • Time-in-range trends
ActiveManage
Google Calendar
CONNECTED · synced 31m ago
  • Event times & busy/free blocks
  • Meeting load (count, not content)
  • Event titles & attendees never read
ActiveManage

Looking to add another source? Browse the full catalog on the Integrations page.

03Your data rights

You can exercise every right below directly from this page — no support ticket, no waiting room. Sensitive actions require a fresh re-authentication for your protection.

GDPR Art. 15–20 · CCPA

Export my data

Generate a complete machine-readable archive (JSON + CSV) of every score, event, log and metric we hold. Ready in minutes, delivered to your email as a one-time signed link.

Download a copy

Already generated an export? Re-download your most recent archive directly — last built 09 Jun 2026, valid for 7 days. A human-readable PDF summary is included alongside the raw data.

Rectify my data

Spotted something wrong — a mislogged workout, an incorrect baseline, a bad sync? Submit a correction and we'll fix the record and re-run the affected days of your energy model.

Delete my account

Permanently erase your account and all associated data. This cannot be undone. We honor the request within 30 days; backups are purged on their next rotation cycle.

Requires re-authentication. You'll confirm your password and a 6-digit code before deletion begins.

04Encryption

Everything is encrypted in transit (TLS 1.3) and at rest. Your most sensitive categories get an extra layer, and your coach conversations are end-to-end encrypted — we can’t read them.

Genetic & cycle data
AES-256-GCM · per-field

Genetic markers and menstrual-cycle data are encrypted with per-field AES-256-GCM keys, isolated from the rest of your record. They are excluded from analytics and research entirely, regardless of your consent settings.

Coach messages
E2EE · Signal / PQXDH

Direct messages with your coach are end-to-end encrypted using the Signal protocol with post-quantum PQXDH key agreement. Keys live only on your devices — not even LockIn90 can read your conversations.

Read the full technical detail on the Security page.

05Consent history

Every consent change is logged immutably — what changed, when, whether it was granted or withdrawn, and from where. New changes you make on this page appear at the top of the table.

WhatChangeWhenSource
Marketing emailGranted12 Jun 2026 · 09:42web · Safari
Model research & trainingWithdrawn08 Jun 2026 · 21:15ios · app v1.4.0
Peer comparison (cohort)Granted02 Jun 2026 · 07:58web · onboarding
Personalized insightsGranted02 Jun 2026 · 07:58web · onboarding
Product analyticsGranted02 Jun 2026 · 07:57web · onboarding
Marketing emailWithdrawn19 May 2026 · 14:03email · unsubscribe link
Account createdBaseline02 Jun 2026 · 07:55web · sign-up
Showing the 7 most recent of 41 logged events.View full audit log

06Cookie preferences

Control how the marketing site and web app use cookies. Strictly necessary cookies keep you signed in and the site secure, so they can't be turned off. Everything else is your call.

Strictly necessary

Always on

Authentication (httpOnly session cookie), CSRF protection, load balancing and your consent choices. Required for the site to function.

On

Analytics

Privacy-respecting, aggregated metrics about how the site is used so we can improve it. No cross-site tracking, no third-party ad networks.

On

Marketing

Cookies that measure the performance of our campaigns and let us show you relevant content. Off by default.

Off

07Contact the DPO

Talk to a human

Questions about your data?

Reach our Data Protection Officer for anything privacy-related — exercising a right, a question about processing, or a concern. We respond within 30 days, usually far sooner.

Start today

Stop guessing. Start performing.

Connect your wearable and get your first energy score in minutes. Cancel anytime.

No credit card required · 14-day trial