Privacy Policy

1. About this Policy

1.1 This Privacy Policy explains how vRRR Limited ("we", "our", "us") collects, uses, shares, and protects personal information when you use the vRRR platform (the "Service").

1.2 If you are in New Zealand, the Privacy Act 2020 and its 13 Information Privacy Principles apply to our handling of your personal information. We also describe additional rights for EU/UK residents under GDPR/UK GDPR. Privacy Commissioner

2. The Information We Collect

2.1 Account and identity. Name, email, authentication data via third-party identity services.

2.2 Subscription and payments. Billing details and status via payment processors; creator payouts via payment service providers.

2.3 Workout data. Speed, pace, distance, elevation, power, cadence, stroke rate, heart rate; timestamps; and GPX/route data.

2.4 Device data. Bluetooth identifiers and telemetry necessary to enable FTMS/BLE features.

2.5 Usage and technical. Device type, OS, browser/app version, IP address, crash/error logs, and in-app events.

2.6 Creator data. Uploaded videos/GPX, encoding/hosting metadata from video processing services, and payout configurations.

2.7 Marketing preferences. Email consent and engagement via marketing automation services.

2.8 Support communications. Messages you send us and related metadata.

3. How We Use Information

3.1 Provide and operate the Service (accounts, sessions, device connectivity, safety prompts, FTMS control).

3.2 Measure and display performance (metrics, session summaries, leaderboards or similar features).

3.3 Enable exports and interoperability (FIT file generation for upload to platforms like Strava, Garmin, TrainingPeaks; future auto-sync if offered).

3.4 Payments and payouts (subscriptions via payment processors; creator payouts via payment service providers).

3.5 Safety and integrity (detect abuse, prevent fraud, protect users and infrastructure).

3.6 Communications (transactional emails; product updates; marketing with your consent).

3.7 Compliance (legal obligations, requests from authorities, dispute resolution).

4. Legal Bases and NZ Privacy Principles

4.1 NZ Privacy Act 2020. We collect, use, store, and disclose personal information in line with the 13 principles (purpose, source, notice, manner, security, access, correction, accuracy, retention limits, use limits, disclosure, overseas disclosure, unique identifiers). Privacy Commissioner

4.2 EEA/UK users. Where GDPR/UK GDPR applies, we rely on: contract necessity (to provide the Service), legitimate interests (safety, improvement, analytics), consent (marketing), and legal obligations (tax/accounting).

5. Sharing Your Information

5.1 We share personal information with trusted service providers strictly to provide the Service, including:

• Authentication and identity services,
• Payment processing and creator payout services,
• Email automation and marketing services,
• Video encoding and processing infrastructure,
• Cloud storage and content delivery services,
• Background image and media services.

5.2 We may share anonymised or aggregated statistics that do not identify you.

6. International Transfers

6.1 We may store or process information in New Zealand, the United States, the EU/UK, or other jurisdictions where our providers operate.

6.2 Where required, we use appropriate safeguards (e.g., standard contractual clauses) for cross-border transfers.

7. Retention

7.1 We keep account, subscription, and workout history while your account remains active.

7.2 On account deletion, we will delete or anonymise personal information within a reasonable period, except where retention is required by law or to resolve disputes.

7.3 Creator Content and related operational metadata may be retained in accordance with the Terms (e.g., caching/backups).

8. Security

8.1 We use technical and organisational measures including encryption in transit, access controls, and secure hosting.

8.2 No system is perfectly secure; transmission of data is at your own risk.

9. Your Rights

9.1 New Zealand. You have the right to request access to and correction of your personal information. Privacy Commissioner

9.2 EEA/UK (where applicable). You may have additional rights (erasure, portability, restriction, objection, and withdrawing consent).

9.3 Exercising rights. Email [email protected]; we will respond within required timeframes.

10. Cookies and Similar Technologies

10.1 We use cookies and similar technologies to remember settings, enable core functions, and analyse usage.

10.2 You can control cookies via your browser/app settings; disabling some cookies may affect functionality.

11. Children

11.1 The Service is not intended for children under 16. If you believe a child has provided personal information, contact us to remove it.

12. Changes to this Policy

12.1 We may update this Policy. We will post changes in-app or on the website and update the "Last updated" date.

12.2 Continued use after the effective date constitutes acceptance.

13. Contact

13.1 vRRR Limited - Email: [email protected]