Privacy policy

First Published: 1 November 2026

Last Updated: 4 November 2026

Who we are

Compás is a training app for running, cycling, swimming and triathlon, with an online shop at 1compas.co.uk. Both are run by Compas Performance Ltd, trading as Compás ("Compás", "we", "us"), company number 17548025, registered at 5 Tremall Parc, Crellow Hill, Stithians, Cornwall, TR3 7AG. We are the controller of your personal data, which means we decide how it is used. You can contact us at info@1compas.co.uk.

This policy explains what we collect, why, who can see it and what control you have. It applies to the Compás app and our online shop and website. If it conflicts with our terms on personal data, this policy applies.

The app and the shop collect different information, so this policy tells you which applies:

• App only: from "What we collect in the app" to "How long we keep app data". This is where your training, health and recovery data is covered.
• Shop and website only: "Our online shop and website". This covers orders, payments, cookies and advertising.
• Both: "Who we are", "In short", and everything from "International transfers" onwards.

In short

• We use your data to run your training plan.
• We never sell your personal data, and your data from the app is never used for advertising.
• Your data from the app stays within Compás and the providers that run our service, unless you choose to share it.
• Connecting other apps is always your choice, and you can disconnect at any time.
• Using your data to improve Compás is optional and off by default.

Compás is not a medical device and does not give medical advice. Speak to a medical professional before starting a plan, or if anything hurts.

What we collect in the app

• Account: name, email address, password (held securely by our login provider) and sign-up date, which you give us.
• About you: date of birth, gender and agreement to our terms, which you give us. Weight (optional): your body weight, if you choose to add it at sign-up or in Settings. We use it only to estimate the calories you burn in workouts where a connected app or device doesn’t give a figure.
• Profile: photo, level, referral code, friends (amigos) and privacy choices, from you and your use of the app.
• Training plan: goals, race dates, sports, levels, free days, preferences, usual distances and race times, which you give us.
• Workouts: sessions planned, completed or skipped, sport, date, time, distance, pace, calories, cadence or stroke rate, and notes, from you, your device and connected apps.
• Location: GPS route while you record an outdoor run or ride, and your approximate area for weather, from your device and only with your permission.
• How sessions felt: feeling ratings, reasons and flags such as sore, tired, slept badly or pain, which you give us.
• Recovery: sleep, HRV, resting heart rate, recovery scores, strain, stress, Body Battery, skin temperature and VO2 max, from you and connected apps.
• Cycle information: period start dates, cycle length and phase, only if you opt in, from you and later from health apps if you connect them.
• Community: posts, comments, reactions, events and plan shares, which you give us.
• Rewards: points, levels, streaks and leaderboard positions, worked out from your training.
• Support: feedback and messages you send us.
• Technical: device type, app version and error information, from your device.

Health data

Heart rate, HRV, sleep, recovery, pain or injury flags and cycle information can reveal your health, so we treat them as special category data under UK data protection law. We only use them with your explicit consent, and you can withdraw that consent at any time. Your weight, and the calorie estimates worked out from it, are treated as health data too.

Cycle information

Cycle information is optional. We keep it separate from your profile. It is never shown to amigos or on leaderboards, and you can delete it at any time.

Connected apps

Connecting another app is always your choice. Nothing is shared with or from it until you agree, and you can disconnect at any time in Connected Apps. Each company has its own privacy policy, which applies to what it holds. Some connections below may not be available yet.

Data coming into Compás

• Garmin: activities (sport, date, time, distance, pace, heart rate, calories, cadence or stroke rate, route) and health metrics such as sleep, resting heart rate and HRV. We use these for completing sessions, tracking progress, paces and recovery.
• Apple Health: with your permission, workouts, heart rate, resting heart rate, HRV, sleep, VO2 max and, if you opt in, menstrual cycle data. We use these for completing sessions, recovery and readiness, and cycle insights.
• Google Health and Health Connect: with your permission, workouts, heart rate, sleep and, if you opt in, menstrual cycle data. We use these for completing sessions, recovery and readiness, and cycle insights.
• Whoop: recovery score, HRV, resting heart rate, sleep, workouts, strain and basic profile details. We use these for recovery and readiness.
• Oura: daily readiness, sleep, activity, heart rate and basic profile details. We use these for recovery and readiness.

Data from Apple Health and every other connected app is used only for health and fitness features. We don't use it for advertising or sell it.

When you disconnect

We stop receiving data from that app and delete the access permission. We also delete the data we imported from it within 30 days, unless you ask us to keep your own workout history where that app's terms allow it.

How we use your app data

Data protection law requires a legal reason, called a lawful basis, for each use.

• Create your account and provide the app: contract.
• Build, adapt and explain your training plan: contract, and explicit consent for health data.
• Show recovery and readiness from connected apps: contract, and explicit consent for health data. Estimate calories from your weight: explicit consent, which you give by choosing to add your weight.
• Offer cycle insights: explicit consent.
• Record routes with GPS: contract, with your device permission.
• Show amigos, leaderboards and community features: legitimate interests, and your choices in the app.
• Run points, levels, referrals and rewards: contract.
• Send you service messages: contract.
• Keep Compás secure and fix problems: legitimate interests.
• Improve Compás plans: your optional consent.
• Meet legal obligations, such as tax records for subscriptions: legal obligation.
• Send marketing: your consent, only if you opt in.

Your two consents

We ask for these separately:

1. Required: using your health and training data to run your plan. Compás can't build or adapt your plan without it.
2. Optional and off by default: using your data to improve Compás plans. You can use Compás fully without it.

You can withdraw either at any time in the app. Withdrawing doesn't affect what we did before. If you withdraw the first, we can't keep running your plan, and you can delete your account.

Automated decisions

Compás uses rules to build and adjust your plan, such as spacing hard sessions and limiting weekly increases. It may suggest changes, and you stay in control of whether to accept them. These decisions don't have legal or similarly significant effects on you.

Marketing

We only send marketing, such as offers, merchandise news or newsletters, if you opt in. You can opt out at any time in the app or from any marketing message. Service messages about your account or plan aren't marketing. We advertise Compás on other platforms, such as Instagram, Facebook, Google and TikTok, but we don't give them your personal data from the app.

How data improves Compás

Plans learn in two ways.

For you. Your feedback, completed sessions and progress shape your own plan, such as changing your paces or easing a week. This is part of running your plan.

For everyone, if you opt in. With your optional consent, we study anonymised patterns across users, such as how beginners get on with a type of week. We use these to improve our plans, rules and session library. We remove anything that identifies you first, and only look at groups of people, not individuals. Your data stays within Compás and the providers that run our service. We never sell it, and it is not used by outside companies to train their AI models.

Data from connected apps is only included where that app's terms allow it. 

AI features

Compás doesn't send your data to outside AI services. Your plan is built by our own training rules. If we add AI features, we will update this policy and tell you first, and ask for your explicit consent where the law or a connected app's rules require it.

What others can see in the app

Compás has social features. Here is who can see what.

Other Compás users can see:

• Your name and photo
• Your posts, comments and events

Amigos can also see:

• Your level, points and leaderboard position
• Your current plan name and progress
• Workouts recorded in Compás and personal bests
• Estimated calories on your workouts
  

Only you can see:

• Data from connected apps
• Recovery, sleep and heart data
• Cycle information
• Date of birth, gender, weight, and email address
• Feeling ratings, pain flags and notes

Amigos see a limited version of your workouts: title, sport, date, distance, time and estimated calories, plus personal bests and the sessions you have planned. They never see your notes, heart rate, feelings, routes or weight.

Amigos are people you add, or whose request you accept. You can remove an amigo at any time. Leaderboards only show you and your amigos.

If you share a plan with an amigo, they see the plan and your points in that shared challenge.

Think before posting anything personal, because others can see it. Amigos could also share what they see.

Who we share app data with

Your data from the app stays within Compás and the companies that help us run it, unless you choose to share it. Our online shop and website section explains how shop data is shared. These providers only act on our instructions.

• Google (Firebase and Cloud): login, database, file storage and server functions.
• Expo: delivers app updates.
• Apple and Google: app stores, subscriptions and in-app purchases.
• RevenueCat: manages subscriptions and your subscription status.
• Open-Meteo: weather forecasts, using your approximate area only.
• Shopify: runs our online shop.

We may also share data if the law requires it, to protect people's safety or our legal rights, or if Compás is sold or restructured. We would tell you if that changed how your data is used.

What we never do

• Sell your personal data
• Use your health data for advertising or marketing
• Share your health data with advertisers or data brokers
• Let outside companies use your data to train their AI models

How long we keep app data

• Account, plans and workouts: while your account is active.
• After you delete your account: removed within 30 days, and from backups within 90 days.
• Data from a connected app: until you disconnect it, or sooner if that app's terms require.
• Cycle information: until you delete it or your account.
• Support messages: 2 years.
• Reasons you give when deleting your account: may be kept, without your name or account details.
• Subscription and tax records: 6 years, as the law requires.
• Anonymised patterns: may be kept, because they can no longer identify you.

Our online shop and website

This section covers the shop and website at 1compas.co.uk. Your training and health data from the app is never used for the shop.

What we collect

• Contact details: your name, email address and phone number, which you give us.
• Delivery and billing: your delivery and billing addresses, which you give us.
• Orders: items bought, returned, exchanged or cancelled, and your order history.
• Payment: your payment method, transaction details and confirmation that you paid, from you and our payment providers.
• Shop account: login details and preferences, if you create an account.
• Browsing: items you view and add to your basket or wishlist, and how and when you use the shop.
• Device: device, browser and network details, IP address and cookie identifiers, from your device.
• Messages: questions, support messages and any reviews you send us.
• From other companies: details from our service providers and partners when they work for us.

Payments are handled by Shopify and its payment providers. We don't receive your full card number.

How we use it, and the lawful basis

• Take payment, deliver orders and handle returns and exchanges: contract.
• Run your shop account: contract.
• Answer your questions: contract, or legitimate interests.
• Remember your preferences and recommend products: legitimate interests.
• Keep the shop secure, prevent fraud and fix problems: legitimate interests.
• Enforce our terms and deal with legal claims: legitimate interests, or legal obligation.
• Understand how the shop is used and improve it: your consent, through cookie preferences.
• Send marketing: your consent, or legitimate interests for similar products if you have bought from us.
• Show adverts and measure how they perform: your consent, through cookie preferences.
• Keep tax and accounting records: legal obligation.

If you create a shop account, please keep your login details safe and don't share them.

Who we share it with

• Shopify: hosts the shop, checkout and customer accounts.
• Payment providers: take payment and help prevent fraud.
• Delivery companies: deliver your order, using your name, address and contact details.
• Software providers: help us run the shop, such as IT, analytics, cloud storage, email and customer support tools.
• Printful: makes and ships your order, using your name, address, contact details and what you ordered.
• Replo: builds pages in our shop and helps us see how visitors use them.
• Meta (Instagram and Facebook), Google and TikTok: show adverts for the shop and the Compás app and measure how they perform, only if you agree to advertising cookies.
• Others you choose: for example, if you use a social media sharing or login feature.

Shopify has its own Consumer Privacy Policy, which also applies if you use Shop Pay. You can also use Shopify's Privacy Portal for requests about data Shopify holds.

We also use Shopify Network Intelligence. Shopify combines data about how you use our shop with its other data, to improve products, target adverts and personalise the shop. For this, Shopify is responsible for your data, including answering requests about your rights through its Privacy Portal. Other shops can't see your data, and data from the app is never included.

Cookies and advertising

Cookies are small files stored on your device. The shop needs some of them to work, such as those that keep items in your basket and run the checkout.

If you agree, we also use analytics cookies to track how visitors use the shop, such as the pages they view and how they found us. We don't use these unless you agree. You can change your choice at any time using the Cookie preferences link at the bottom of the website.

If you agree to advertising cookies, Meta (Instagram and Facebook), Google and TikTok may receive the pages you viewed, what you bought, and cookie and device identifiers. They use these to show adverts for the shop and the Compás app, and to measure them. Their own privacy policies explain how they handle this data.

Shop marketing

We only send shop marketing, such as offers and new products by email, text or post, if you opt in or have bought from us and didn't opt out. You can unsubscribe at any time from any marketing message. Messages about your order aren't marketing. We also promote the Compás app in the shop itself, which doesn't use your personal data.

How long we keep shop data

• Orders and tax records: 6 years, as the law requires.
• Shop account: until you ask us to delete it, except records we must keep by law.
• Support messages: 2 years.
• Marketing details: until you unsubscribe, then a note so we don't contact you again.
• Cookies: as shown in Cookie preferences.

Links to other websites

The shop may link to other websites and social networks. Their own privacy policies apply, and we aren't responsible for them. Anything you post publicly on social networks can be seen by others.

International transfers

The app's main database is stored in London. Shop data is hosted by Shopify in the European Union. Some providers and our server functions process data outside the UK, including in the United States. When they do, we use the safeguards UK law requires, such as UK adequacy regulations, the UK Addendum, the International Data Transfer Agreement or the EU Standard Contractual Clauses. Contact us for details.

Keeping data secure

We use encrypted connections, access controls and restricted access to sensitive data. No online service is completely secure. If a breach is likely to put you at high risk, we will tell you and report it where the law requires.

Your rights

Under UK data protection law, you can ask us to:

• Confirm what we hold and give you a copy
• Correct anything wrong
• Delete your data
• Limit how we use it
• Send your data to you or another provider
• Stop using it where we rely on legitimate interests
• Stop using it where you gave consent

You can delete your account in the app under Profile > Delete account, or email info@1compas.co.uk. We reply within one month, and this is normally free. We may need to confirm who you are first. Someone else can ask for you if they show you gave permission. We won't treat you less fairly for using your rights.

You can download a copy of your data in the app under Profile > Settings > Privacy and data.

You can change or remove your weight at any time in Profile > Settings > Weight.

You can also change your device permissions at any time in your phone's settings.

Complaints

Please contact us first so we can try to put things right. You can also complain to the UK regulator, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113. If you live in the European Economic Area, you can complain to your local data protection authority.

Children

You must be at least 16 to use the Compás app, and we don't knowingly collect app data from anyone younger. The shop isn't aimed at children, so anyone under 18 should ask a parent or guardian before buying. If you think a child has given us their data, contact us and we will delete it.

Changes to this policy

We will update this policy when our data use changes, and show the new date at the top. We will tell you in the app about important changes, and ask for your consent again where the law requires it.

Contact us

Email: info@1compas.co.uk