Privacy policy

Mindworks Software (Pty) Ltd ("Mindworks", "we") is a software engineering company in Cape Town, South Africa. This policy covers two things: this website, and the applications we build and operate, including applications that connect to a person's Garmin Connect account. We process personal information under South Africa's Protection of Personal Information Act (POPIA) and, where it applies to the people whose data we handle, the EU and UK GDPR.

This website

Visits

The site sets no cookies and runs no tracking scripts in your browser. When a page is served, our server records a page view with PostHog (EU region): the page address, the referring site, your approximate country and city as seen by our hosting provider, and your browser's user-agent string. To tell a returning visit from a new one within a day, it sends a one-way hash of your IP address and browser that changes every day and cannot be linked across days. Your IP address itself is never sent.

The contact form

If you write to us, the form sends your email address, your name if you give it, the options you tick and your message to our inbox, through our email provider Resend. We use it only to reply to you. Your name, email address and message are not sent to our analytics.

Applications we build and operate

Some of the applications we build and run let a person connect an account they hold with another service, such as Garmin Connect. We only receive that data after the person has signed in to that service and agreed to share it with the application. They can withdraw that permission at any time, in the application or in the other service's own settings.

Garmin data

When you connect your Garmin account to an application we operate, we may receive:

• activities you record on your Garmin device, including the activity file (time, distance, heart rate, power, cadence, speed and location);
• daily health summaries, such as resting heart rate, heart-rate variability, sleep, stress and Body Battery;
• and, where the application sends workouts or courses to your device, the details needed to do so.

We use it only to provide the application you connected it to: to show you and the coach you train with what you did and how you recovered, and to plan and send your training. We do not sell Garmin data, use it for advertising, or pass it to anyone other than the people you train with through the application and the service providers below. We do not share it with any other third party without Garmin's written permission and your consent.

When you disconnect your Garmin account, or Garmin tells us you have withdrawn permission, we stop receiving data. You can ask us to delete the Garmin data we already hold at any time, and we delete it within 30 days.

AI and machine learning

We do not use Garmin data, or any other personal information from the applications we operate, to train artificial intelligence or machine-learning models, ours or anyone else's. We do not send Garmin data to third-party AI services. If that ever changes, this policy will say which service, for what purpose, and that you can opt out, before any of your data is sent.

Who processes data for us

• Cloudflare: hosting, network security and delivery of this website.
• PostHog (EU): website and application usage analytics.
• Resend: sending email.
• Google Workspace: our email inbox.

Application data is stored on servers we operate ourselves. Some of these providers process data outside South Africa; where they do, we rely on their contractual and legal safeguards as POPIA requires.

How long we keep it

Website analytics are kept in aggregate for as long as they are useful. Enquiries are kept for as long as the conversation, and any work that follows from it, lasts. Application data is kept while your account is active and deleted when you ask, or when the account is closed.

Your rights

You can ask us what personal information we hold about you, have it corrected or deleted, and object to how it is used. If you are unhappy with our answer you can complain to South Africa's Information Regulator (inforegulator.org.za), or to the data protection authority where you live.

Contact

Our Information Officer is Dario Matonicki. Write to dario@mindworks.software, or use the contact page. Mindworks Software (Pty) Ltd, 41 Fancourt Crescent, Sunningdale, Cape Town.

If we change this policy, we change the date at the top. Material changes to how we use data from a connected account are told to the people using that application before they apply.