Legal
Privacy Policy
Last updated: 21 May 2026
CatchLab is operated by Aarts Pro Cycling Support, trading as CatchLab, registered with the Dutch Chamber of Commerce under KVK 88070808 and VAT number NL004533858B50. The registered address is Sledemennerstraat 1-4, 9718 BW Groningen, the Netherlands. You can contact us at [email protected].
1. Roles
For club, team, coach, athlete, session, telemetry, and integration data processed inside the CatchLab platform, the club or organisation using CatchLab is normally the controller and CatchLab acts as processor.
CatchLab is controller for its own website, sales, billing, account administration, security, support, and service-improvement data.
2. Personal Data We Process
| Category | Examples |
|---|---|
| Club and coach data | Names, email addresses, roles, club membership, login records, support messages, billing and order details. |
| Athlete profile data | Name, short name, club, tags, notes, date of birth, height, weight, invitation and connection status where a club chooses to store those fields. |
| Rowing performance data | Peach telemetry, raw session archives, stroke data, power, force, stroke rate, boat speed, GPS tracks, session metadata, piece selections, derived analytics, and generated files. |
| Heart-rate data | Optional HR data fetched from connected services or files for previewing, merging, or generating training files where the club or athlete chooses to use that feature. |
| Connected-service data | Intervals.icu athlete IDs, API keys, OAuth tokens or connection metadata for TrainingPeaks or other connected services, activity IDs, sync status, and transfer logs. |
| Website and technical data | IP address, device/browser information, demo/contact form submissions, authentication cookies in the logged-in apps, local/session storage, application logs, error logs, and security events. |
3. Purposes And Lawful Bases
- Providing the CatchLab platform, processing sessions, storing club archives, generating analytics, and syncing files: contract performance and, for club-controlled data, processing on the club's instructions.
- Authentication, licensing, security, abuse prevention, troubleshooting, and service reliability: legitimate interests and contract performance.
- Billing, accounting, and legal compliance: legal obligation and contract performance.
- Support, onboarding, product improvement, and customer communication: contract performance and legitimate interests.
- Sales outreach and marketing: legitimate interests for appropriate business contacts or consent where required.
4. Connected Services
CatchLab can connect to third-party training platforms such as Intervals.icu and, where enabled, TrainingPeaks, Strava, Garmin Connect, or similar platforms. When a club, coach, or athlete asks CatchLab to transfer data to those services, that service processes the data under its own terms and privacy policy. CatchLab is not responsible for how a connected service uses data after it has been transferred.
5. Subprocessors And Recipients
CatchLab uses trusted infrastructure and operational providers to run the service. The current public list is available at Subprocessors. Core platform hosting is designed around EU storage where available, but some providers may process operational data in other countries using their own transfer safeguards.
6. Retention
- Club platform data is kept while the club subscription or pilot is active, unless deleted earlier by the club or under an agreed retention setting.
- Raw Peach archives, generated parquet/session files, GPS files, pieces, and derived analytics are normally retained with the session archive so coaches can reload and compare past sessions.
- After termination, platform data is normally retained for up to 90 days for export, migration, or deletion handling, unless a different period is agreed in writing.
- Security logs, operational logs, backups, billing records, and support records may be retained for longer where needed for security, accounting, dispute handling, or legal compliance.
- Opt-out records may be retained to make sure we do not contact someone again.
7. Your Rights
Depending on your location and the data involved, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. If your data is held by a club using CatchLab, we may refer your request to that club because the club is usually the controller for athlete and team data.
You can contact us at [email protected]. You may also complain to your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
8. Minors
CatchLab is used by clubs and coaches. Clubs are responsible for making sure they have the right authority, notices, and consents where athlete data relates to minors.
9. Security
CatchLab uses account-based access controls, tenant separation, private storage buckets, HTTPS, provider-managed encryption, and restricted administrative access. More detail is available at Security and Data Retention.
10. Not Medical Software
CatchLab is a rowing performance analytics and coaching tool. It is not medical software and is not intended for diagnosis, treatment, health advice, or clinical decision-making.