Privacy policy
What we store, why we store it, who else sees it, and how to remove it. Version 2026-09-10.
Who is the data controller
Røssner Productions ApS, CVR 45469883, Njalsgade 21 F, 2., 2300 København S, Denmark, is the data controller for personal data processed in Fast Lane.
For privacy requests, account deletion or data-portability questions, use the support page in the app, or write to nicklas@nicklasrossner.com if you cannot sign in.
What we collect, why, and on what legal basis
Almost everything below exists because it is needed to deliver the service you signed up for, which under the GDPR is performance of our contract with you (art. 6(1)(b)). Where a different basis applies it is named.
- Account and sign-in. Your email address, whether you have set a password, sign-in events, and your record of accepting these terms and the privacy policy. The consent record is kept to document your acceptance and to meet our legal obligations (art. 6(1)(f) and (c)).
- Onboarding and goals. Your answers in the plan builder — experience, weekly volume, longest run, training days, goal race, race date, target time, strength preference and similar — used to build your plan.
- Limiter assessments. The questionnaire answers, the diagnosis and the history of previous assessments, used to focus your plan and to show progress over time.
- Training data. Your generated plans and plan preferences, plan start date, completed workouts, zone tests, training zones and fuelling plans.
- Coaching conversations. Your messages, the coach's replies, proposed plan changes and the flags the coach raises about your training. Your messages and the relevant training context are sent to our AI provider to generate a reply. They are not used to train third-party models.
- Running-form analysis. Your video is measured in your own browser on your device. The video file itself is not uploaded. Only the resulting measurements, an overall score and a small number of still frames from your gait cycle are sent to us and to our AI provider so the analysis can be written and saved to your history.
- Profile photo. If you upload one, it is stored privately against your account and only shown to you.
- Course and library use. Which lessons you have completed, your video playback position, and whether you have library access.
- Connected training service. If you connect intervals.icu we store your athlete ID and either an API key or OAuth access and refresh tokens, plus a synced copy of your activities, laps, wellness entries, heart rate, pace, power, cadence, load and athlete settings. Some of this data originates from a Garmin or other device and reaches us through intervals.icu.
- Support. Your tickets and messages, and the email address you gave for replies.
- Product use. Announcements you have read, when you were last active, and your notification and appearance preferences — used to run the app and keep it working (art. 6(1)(b) and (f)).
- Payments. Your subscription and entitlement records: status, plan, billing period and the customer and subscription references from our payment provider. Card numbers and bank details never reach us — they are handled entirely by the payment provider. Records are also kept to meet accounting and tax obligations (art. 6(1)(c)).
- Marketing emails. If you opt in, your email address is added to our mailing list on the basis of your consent (art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link or by asking us.
- Technical logs. Server and error logs, which can include your IP address, browser and device type, kept to keep the service secure and to fix faults — our legitimate interest (art. 6(1)(f)).
Your intervals.icu connection
You can connect intervals.icu using OAuth or by entering an API key. Tokens and API keys are stored privately against your account and are only ever used server-side to read your calendar and activity data and to write the workouts you approve. Connecting is entirely optional.
You can disconnect at any time from Profile → Integrations, which deletes the stored credentials. When your paid access ends, or when you delete your account, we remove the remaining Fast Lane workouts from your calendar and drop the connection automatically. Your intervals.icu account itself is untouched.
Who we share data with
We do not sell your data and we do not share it for advertising. We use:
- hosting, database and file-storage providers that run the app;
- an AI provider that generates coaching replies and form-analysis text;
- an email provider that sends sign-in, account and notification emails;
- a mailing-list provider, only if you opted in to product emails;
- intervals.icu, only if you connect it;
- Paddle.com, our online reseller and Merchant of Record, for the sale, subscription management, payments, invoicing and tax compliance;
- our accountant and, where needed, legal advisers;
- authorities, where the law requires it.
These providers act on our instructions under data-processing agreements, except Paddle, which is an independent controller for the sale itself.
International transfers
Some of our providers process data outside the EU/EEA, including in the United States. Where that happens we rely on the European Commission's adequacy decisions or on Standard Contractual Clauses together with additional safeguards. You can ask us for details of the safeguards used for any specific provider.
How long we keep it
Account, training, coaching and form-analysis data is kept for as long as your account is active and is deleted when you delete your account. Integration credentials are deleted the moment you disconnect, when access ends, or on account deletion. Support tickets are kept while your account exists so we can follow up. Consent and marketing records are kept for as long as needed to document your choice. Payment, invoicing and accounting records are kept for five years after the end of the financial year, as Danish bookkeeping law requires. Technical logs are kept for a short period and then deleted or anonymised.
Security
Data is encrypted in transit and at rest with our infrastructure provider. Access to your rows is restricted at database level so only you — and, where strictly necessary, an administrator — can reach them. Credentials and tokens are only used server-side and are never exposed in the browser. Access to production systems is limited to those who need it.
Data from your watch and connected services
When you connect intervals.icu, data that originates from your watch or other training device reaches us through that service. We receive it as a recipient of data you have chosen to share, not as the maker of the device.
We use that data only to deliver coaching to you: to build and adapt your plan, to write your zones and fuelling, and to let the coach reason about your training. We do not use it to develop a competing device or connected product, we do not use it to profile you for advertising, and we do not pass it on to anyone beyond the providers listed above without your agreement. It is deleted when you disconnect the service or delete your account.
Getting a copy of your data
You can download everything we hold about you at any time from Profile → Download my data. You get a machine-readable file — your account and consent records, plan builder answers, limiter assessments, plans and completed workouts, zones and fuelling, coaching conversations, form-analysis results, course progress, support tickets, subscription records and synced training data — plus a spreadsheet-friendly file of your workouts. Passwords and connection secrets such as intervals.icu tokens are deliberately left out.
If you cannot sign in, ask us by email and we will send the same copy after verifying who you are.
Your rights
You have the right to access, rectify, erase, restrict and object to processing of your personal data, the right to receive a portable copy, and the right to withdraw consent at any time without affecting processing already carried out. Contact us through the support page or by email and we will respond within one month.
You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby.
Deleting your account
You can delete your account yourself in Profile → Account settings. Deletion is immediate and permanent: your plans, coaching conversations, assessments, zone tests, form analyses, support tickets, preferences and integration credentials are removed, remaining Fast Lane workouts are cleared from a connected calendar, and any active subscription is cancelled first so you are never left deleted but still billed. Published reviews are anonymised rather than removed, and records we must keep by law — such as invoices — are retained for the statutory period.
Children
Fast Lane is for adults. You must be at least 18 years old to create an account, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
We update this policy as the service develops. Material changes are shown in the app or sent to the email address on your account before they take effect.