Privacy Policy
Last updated: 23 October 2026
1. Who we are
LT2 (lt2.app) is a platform for analysing and planning sports training. The controller of your data is Carlos Orozco Jiménez. For any privacy question, write to us at:
2. What data we process
- Account: the name, email address and profile picture Google provides when you sign in.
- Profile: the data you add so we can calculate your metrics, such as date of birth, sex, weight, height and maximum and resting heart rate.
- Activities: those you upload as FIT, GPX or TCX files and those you import from the services you connect (Apple Health, Garmin Connect), with their data series (heart rate, pace, speed, cadence, power, altitude) and GPS track.
- Calculated metrics: zones, training load, thresholds, estimated VO2max, predictions and other metrics derived from your activities.
- Planning: planned sessions, saved sessions, goals and competitions, and the comments on your activities.
- Notifications: your preferences and, if you turn on push notifications, your browser or device subscription.
- Technical data: error logs and aggregated usage statistics.
3. Health data
Heart rate, weight and the physiological metrics we calculate are data concerning health, a special category under the GDPR. We only process them to provide the service and on the basis of your explicit consent, which you can withdraw at any time by deleting that data or your account. We do not use them for any other purpose or share them, except with whoever you choose (section 5).
In the iPhone app, if you connect Apple Health, LT2 only reads your workouts: type, date and time, duration, route, the device that recorded them and the series measured during them (heart rate, distance, steps, speed, power, cadence and running dynamics). It imports them into your account like any other activity. It does not read any other Health data or write anything to it. If you send a planned session to your Apple Watch, the app schedules it on the watch. Apple Health data is only used to provide the service: it is not used for advertising, sold or shared with third parties, and it is not stored in iCloud. You can disconnect Apple Health in iPhone Settings and remove what was imported by deleting those activities or your account.
If you connect your Garmin Connect account, Garmin sends us your new activities with their original file (FIT): type, date and time, duration, route, laps and the series recorded by the device (heart rate, pace, power, cadence and running dynamics, among others). We import them into your account like any other activity. If you send a planned session to Garmin, we create it in your Garmin Connect calendar so it reaches your watch. We do not request any other Garmin data, such as sleep or daily health. Garmin data is only used to provide the service: it is not used for advertising, it is not sold or shared with third parties (except with your coach if you choose to, section 5) and it is not processed by artificial intelligence services. You can disconnect Garmin Connect at any time from LT2 or from your Garmin account, and remove what was imported by deleting those activities or your account.
If you connect your Polar Flow account, Polar notifies us of your new workouts and we download them with their original file (FIT): type, date and time, duration, route, laps and the series recorded by the device (heart rate, pace, power, cadence, among others). We import them into your account like any other activity. We only request your workouts: not daily activity, sleep or your physical information. Polar data is only used to provide the service: it is not used for advertising, it is not sold or shared with third parties (except with your coach if you choose to, section 5) and it is not processed by artificial intelligence services. You can disconnect Polar at any time from LT2 or from your Polar account, and remove what was imported by deleting those activities or your account.
4. What we use it for and on what legal basis
- Providing the service (your account, analysis and metrics, importing from the services you connect, calendar and planning): performance of the contract you accept with the Terms of Service.
- Service notifications and emails, such as notices about your activity and your coach, the summary of pending notifications, the Monday weekly summary or measured improvements: performance of the contract. You can choose what you receive, and through which channel, in Settings › Notifications.
- Emails encouraging you to get started or come back: if you signed up and have not uploaded any activity yet, or if you have not trained for one or two weeks. Basis: legitimate interest. Every email includes an unsubscribe link, and you can turn them off in Settings › Notifications › Reminders.
- Error logging and usage statistics, to maintain and improve the service: legitimate interest. We use our own tools hosted on our servers, not third-party ones; analytics use no cookies and build no user profiles.
We do not sell your data, we do not use it for advertising, and we do not make automated decisions about you with legal effects.
5. Coaches and teams
LT2 lets a coach follow their athletes. This feature is available by invitation only. If you accept a coach’s invitation:
- Your coach can see your activities in LT2 and, depending on the permissions you give them, your analysis; they can also change your training settings, plan your sessions or comment on your activities if you allow it.
- You can change those permissions or leave your coach at any time from the app. Once you leave, they can no longer see your data.
- Your coach agrees to use your data only to coach you.
6. Who we share data with
Only with the providers we need to run the service, who process data on our behalf:
- Hetzner (Germany): servers, database and storage of activity files.
- Google: sign-in.
- Resend: sending emails. It may process your email address outside the European Union, with the safeguards the GDPR requires.
- Apple, Google or Mozilla: if you turn on push notifications, the notification service of your browser or operating system delivers the alert to your device.
- Garmin: if you connect your Garmin Connect account, to import your activities and send planned sessions to your watch.
- Polar: if you connect your Polar Flow account, to import your workouts.
Beyond this, we only share data with your coach if you choose to (section 5) or when required by law.
7. How long we keep it
For as long as your account is active. You can delete your activities, or your account with all its data, at any time in Settings. If you cannot, write to us and we will delete it within 30 days at most. If you are or have been a coach, what you wrote or planned in your athletes' data (comments on their activities and the sessions you planned for them) stays in their account without your name or any other data of yours, as “Deleted account”: it is part of their history. If you were responsible for a team, the team closes.
8. Security
Data is stored on servers in the European Union (Hetzner, Germany). Access is protected by authentication and limited to what is necessary. Data is encrypted in transit with HTTPS, and your activity files are stored encrypted: only the app can read them.
9. Cookies
We only use technical cookies: your session and your language. We do not use advertising or tracking cookies.
10. Your rights
You can access, rectify and erase your data, object to or restrict its processing, request its portability and withdraw your consent at any time. Write to us to exercise them. If you think we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
11. Minors
LT2 is not intended for children under 14.
12. Changes to this policy
We may update this policy. If the change is significant, we will let you know in the app before it applies.