Menago App Privacy Policy

This policy applies to the Menago mobile app (app ID pl.menago.zawodnik), whose website is biegkreta.pl/menago. The app transfers and stores data on menago.smolec.pl. Last updated: 31 October 2026.

1. Data Controller

The controller of personal data is Radosław Puchała (an individual, owner and operator of the Menago app). For privacy matters, contact radek@smolec.pl.

2. About the App

Menago is a training app for runners. Athletes sign in using an access code (purchased through biegkreta.pl), complete their profile, receive training plans and exchange messages with a coach. The app communicates with menago.smolec.pl over an encrypted HTTPS connection.

Menago also plans to offer an optional Garmin Connect integration for automatically importing completed activities and sending planned workouts to Garmin Connect.

3. Data We Process

• Authentication: the access code (token) entered in the app.
• Profile data: first and last name, email address, gender and year of birth.
• Training, fitness and health data: weekly running distance, longest completed run, pace, heart-rate values and zones, available training days, target time, goal race, preparation races, self-assessed training characteristics and reports of issues such as injury, infection or fatigue.
• Communication: messages exchanged with a coach in the app.
• Training completion: records of completed, partially completed and missed workouts.
• Garmin Connect (optional, once integration is launched): completed activity data, including duration, distance, pace, heart rate, elevation gain, GPS route and other available training metrics. We will also process information needed to authorise and maintain synchronisation.

The app does not track the phone’s location or access contacts, photos or advertising identifiers. GPS data may be received from activities shared through Garmin Connect. Menago does not display advertisements or use third-party analytics or tracking tools.

4. Purposes and Legal Bases

• Providing the service: creating and delivering training plans, analysing workouts, communication with a coach and account management — Article 6(1)(b) GDPR.
• Health-related data: heart rate, injuries, infections and other health-related information — the athlete’s explicit consent under Article 9(2)(a) GDPR.
• Garmin Connect integration: synchronising workouts and using shared data to provide training features — Article 6(1)(b) GDPR, and explicit consent under Article 9(2)(a) GDPR where health-related data is involved.
• Handling enquiries and communication: our legitimate interests under Article 6(1)(f) GDPR.

Providing health data and connecting Garmin Connect are optional. Without this information, some personalisation features may be limited.

Training analysis uses Menago’s own algorithms. Data obtained from Garmin Connect will not be transferred to external artificial intelligence (AI) platforms or used to train, test or develop AI models.

5. Data Recipients

Athlete data is accessible to the assigned coach to the extent necessary to provide the Menago service. We do not sell personal data or share it for advertising or marketing purposes.

Menago uses the following infrastructure providers:

• cyber_Folks — hosting of the app, menago.smolec.pl server and training database.
• SEOHOST Sp. z o.o. — hosting of the biegkreta.pl portal and its database used to manage access to the service.

Once the optional integration is launched, training data may be exchanged with Garmin Connect with the user’s authorisation. Garmin acts as an independent controller of data processed through its services. Garmin Privacy Policy: https://www.garmin.com/privacy/connect.

6. Where and How Long We Store Data

• On the Menago server: data is retained while the service is being used, and no longer than necessary for its purposes, subject to applicable legal requirements.
• On the phone: an access token and a local copy of the plan and profile so the app can work offline. The local copy is deleted when the access code changes; app data is removed when the app is uninstalled.
• Garmin Connect data: once integration is launched, imported data will be stored under the same rules as other training data. Disconnecting the account will stop future synchronisation. Users may request deletion of data previously imported.

We delete data following a valid user request or withdrawal of consent where no other legal basis permits continued processing. Exceptions apply where retention is required by law.

7. Your Rights

Subject to the conditions set out in the GDPR, you have the right to access, rectify or erase your data, restrict processing, object to processing and receive your data in a portable format.

You may withdraw your consent to the processing of health-related data at any time. Once the integration is launched, you will also be able to disconnect Garmin Connect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, including requesting deletion, contact radek@smolec.pl. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl).

8. Security

Connections between the app and server are encrypted using HTTPS. Access to athlete data is protected by an individual access code.

Garmin Connect integration will use Garmin’s authorisation mechanism. Menago will not request or store users’ Garmin account passwords.

Access to data is restricted to people and systems necessary to provide the service.

9. Children

The app is not directed at children. Where an athlete is under 16, processing that requires consent is carried out with the consent or authorisation of a parent or legal guardian, as required by applicable law.

10. Changes to This Policy

We may update this policy. The latest version will be published at the same address, with an updated date shown above.

11. Contact

For questions about privacy, consent, Garmin Connect integration or data deletion, contact radek@smolec.pl.