Privacy Policy

1. Personal data we collect

Depending on the Pexplora features you use, we may collect or process:

• Account and profile data: name, email address, date of birth, profile photo, country, timezone, preferences and account settings.
• Training and fitness data: activity type, time, duration, distance, pace or speed, heart rate, cadence, elevation, calories, power, splits, route/GPS data where available, and related device or workout metadata.
• Mission data: GPX files, routes, checkpoints, target time, strategy, fueling plan, navigation state and execution events such as checkpoint or fueling confirmations.
• Connected-service data: provider identifiers, authorization status, encrypted credentials/tokens where applicable, sync history and data received from services you connect, including supported COROS, Polar and Health Connect integrations.
• Race Beacon and event data: event identifier, bib/participant association, GPS position, position timestamp, course progress, connectivity state, telemetry source, race status and related operational metadata when you activate event tracking.
• Community data: posts, clubs, profile image, challenges, leaderboard participation and other content you choose to publish.
• Technical and security data: IP address, app/browser version, device and operating-system information, timestamps, diagnostic logs and security events.
• Subscription, support and communications data: plan/entitlement status, transaction references, support requests and messages you send to us.

2. Where data comes from

We receive data directly from you, from Pexplora apps and services as you use them, from devices and connected services you authorize, from an event organizer when they import participant information for an event, and from analysis Pexplora performs on information already associated with your account or event participation.

3. Required and optional information

Some information is required to create an account, secure the service, process a requested feature or participate in a tracked event. Other information, including most profile fields, connected-service access and Race Relay participation, is optional. If you do not provide information required for a particular feature, that feature may not work or may provide reduced functionality. We request permissions separately where a device platform requires consent.

4. How we use personal data

We use personal data to provide, personalize, secure and improve Pexplora. This includes account management; importing and displaying training; Readiness, Coach and Athlete Intelligence; Mission, Route, Strategy, Checkpoints and Navigation; Race Companion; Race Beacon and Race Control; community features; subscriptions; support; fraud/security prevention; diagnostics; service communications; and compliance with legal obligations.

5. Health Connect

Health Connect is optional. When you grant permission, Pexplora may read exercise sessions, distance, heart rate, speed, elevation gained, total calories burned, step/cadence-related information, power and exercise-route/GPS points where the originating source provides them and Android grants the required route consent.

Pexplora does not currently request Health Connect write access, sleep data, body/physical information, background Health Connect access or extended historical-data permission. Exercise-route access can require a separate consent step for a specific workout. If the source app or device did not publish a route, Pexplora cannot reconstruct it from summary metrics alone.

6. Connected training services

When you connect a supported provider, you direct Pexplora to receive the permitted activity data from that provider. We normalize and deduplicate imported activities so Training, Readiness, Coach and Athlete Intelligence can work from one activity history. You can disconnect a provider through available Pexplora controls or the provider's own authorization settings.

7. Race Beacon, Race Control and BLE Race Relay

Race tracking is event-specific. When you activate Race Beacon for a participating event, Pexplora may collect your live or recent location and race progress so authorized event organizers and staff can operate the event, view runner progress, manage checkpoints, identify exceptions and support safety-related decisions.

Race Relay is optional. If you enable it, your latest encrypted Beacon position may be carried by a nearby Pexplora runner's Android phone when mobile coverage is unavailable. The relay phone stores an opaque encrypted packet and is not provided the source runner's name, bib or coordinates. Phase 3 currently uses single-hop store-carry-forward delivery. The original position timestamp remains authoritative.

Race Relay can improve telemetry delivery but does not guarantee continuous coverage, emergency response or real-time tracking. Mobile, Bluetooth, battery, terrain and device restrictions can delay or prevent delivery.

8. Athlete Intelligence and automated analysis

Pexplora may analyze training, mission and execution data to generate readiness indicators, training observations, route/strategy explanations, guidance and other personalized outputs. These features support endurance planning and are not medical diagnosis or emergency decision systems. We aim to keep authoritative measurements such as route geometry, distance, elevation and recorded GPS data separate from interpretive outputs.

9. How personal data is disclosed

We do not sell personal data. We may disclose personal data to:

• Service providers that support hosting, databases, email delivery, payments, security, diagnostics, customer support or processing infrastructure;
• Connected services when you direct or authorize an integration;
• Authorized event organizers and checkpoint staff for an event you join when the relevant Race Beacon/Race Control features require operational access;
• Other Pexplora users for information you intentionally publish through community features;
• Authorities or other parties where reasonably necessary to comply with law, legal process, safety obligations, fraud/security investigations or protection of rights; and
• A successor operator if the Pexplora business is reorganized or transferred, subject to applicable law and continued protection of personal data.

We do not disclose Health Connect information to advertising platforms, data brokers, or parties seeking to use it for advertising, credit, insurance, employment or unrelated profiling.

10. Security

We use reasonable technical and organizational measures appropriate to the data we process, including encrypted network connections, access controls, authentication, protected credentials, logging and monitoring. BLE Race Relay packets are designed to be encrypted and authenticated before being carried by peer devices. No system can be guaranteed completely secure.

11. Retention and deletion

We retain personal data only as long as reasonably necessary for the purposes described here, operation and security of the service, legal obligations and dispute resolution. Account and activity data generally remain while your account is active unless you delete them. Connected-service credentials are retained only while needed for the connection. Operational logs and backups may remain for limited periods under normal security and backup cycles.

You can use available in-app deletion controls or contact hello@pexplora.com to request account or personal-data deletion. We may retain limited information where required for legal, security, fraud-prevention, transaction or dispute purposes.

12. Your choices and rights

Subject to applicable law, you may request access to and correction of personal data, withdraw consent where applicable, request deletion or restriction where available, disconnect connected providers, revoke Health Connect permissions, disable Race Relay, and contact us with privacy inquiries or complaints.

13. International processing

Pexplora uses online infrastructure and service providers that may process data outside Malaysia. Where personal data is transferred internationally, we take reasonable steps intended to ensure the transfer is permitted and appropriate protections apply under Malaysian law.

14. Children and fitness information

Pexplora is designed for endurance and outdoor-sport use and is not specifically directed to children. We do not knowingly seek personal data from a child where parental or guardian consent is required by law. Pexplora is also not a medical device or healthcare provider; readiness, heart-rate analysis, training recommendations and other insights are for fitness and informational purposes.

15. Changes and contact

We may update this policy when Pexplora features, integrations, data practices or legal requirements change. We will publish the updated version here and change the “Last updated” date. For privacy questions, access/correction requests, withdrawal of consent, deletion requests or complaints, contact Pexplora Technologies, Malaysia at hello@pexplora.com.