Privacy Policy
Last updated: 2026-08-28
This is a first solid draft, not a final legal version — it hasn't been reviewed by counsel yet. Review it with an accountant alongside the VAT/sole-proprietorship conversation before it goes live paired with real payments.
Splitsmith ("we", "us") provides AI-generated race-pacing plans. This page explains what data we collect, why, and what rights you have. We are a small, founder-run product — this policy is written in plain language on purpose.
Who is responsible for your data (data controller)
[TO COMPLETE: your business name (sole proprietorship), registered address, NIP tax number]
Contact for any privacy question: privacy@splitsmith.com
Confirm this is the right contact address before launch.
What we collect
- •Waitlist sign-up: your email address, which race page (if any) you signed up from, and your marketing consent choice.
- •Building a pacing plan: the race you select or the GPX file you upload, your target time, any recent race results you type in, your race date and start time, and your unit preferences (km/mi, °C/°F, km/h/mph).
- •Purchases (once Race Pass sales are live): payment is processed entirely by Stripe — we never see or store your card details. We keep a record that a purchase happened, linked to your plan and email.
- •Automatically: we use Plausible Analytics, a privacy-first, cookie-free analytics tool — it does not use cookies and does not collect personal data or track you across sites. We may set one small functional cookie to remember your language/unit preference; this is not used for tracking and does not require consent under EU cookie rules.
Why we collect it (legal basis under GDPR)
- •To generate and deliver the pacing plan you asked for — performance of a contract (Art. 6(1)(b) GDPR).
- •To send you marketing emails (waitlist updates, launch notice) — only with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw anytime via the unsubscribe link in any email.
- •To keep the service secure and prevent abuse — legitimate interest (Art. 6(1)(f) GDPR).
Who else processes your data (subprocessors)
- •Supabase — database and account authentication.
- •Resend — sending transactional and waitlist emails.
- •Vercel — hosting.
- •Stripe — payment processing (once Race Pass sales are live).
- •Plausible — cookie-free website analytics.
Some of these providers may process data outside the EU/EEA; where that happens, we rely on their Standard Contractual Clauses or equivalent safeguards. We do not sell your data to anyone, ever.
How long we keep it
- •Waitlist entries: until you unsubscribe, or until a reasonable period after Race Pass launches.
- •Plan data: for as long as your account exists, so you can return to your plans; you can ask us to delete it anytime.
Your rights
Under GDPR you can ask us to: access the data we hold about you, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Email privacy@splitsmith.com and we'll respond within a reasonable time. If you're unhappy with our response, you can complain to the Polish data protection authority (UODO, uodo.gov.pl) or your local equivalent.
Children
Splitsmith is not directed at children under 16.
Changes to this policy
If this policy changes meaningfully, we'll update the date at the top and, for material changes, notify waitlist subscribers by email.