Privacy Policy — CrossFit Coach

Last updated: 17 August 2026 · Applies to CrossFit Coach v1.0.0 and later.

This policy applies to CrossFit Coach — both the free Trial and the paid Pro version (they are the same app). Other apps published by BIKINTULIS have their own policies — see the directory.

1. Who we are

BIKINTULIS is an independent developer of Garmin Connect IQ apps. For questions about this policy, use the contact form.

2. Summary in plain language

• CrossFit Coach runs entirely on your watch. It makes no network or web requests and talks to no server — there is no BIKINTULIS server involved at all.
• It counts your reps from the watch's motion sensor and reads your heart rate on the device; those values are processed locally and shown to you.
• Your workout history, saved programs, totals and settings are stored only on the watch.
• Each session is saved as a standard Garmin activity (FIT), which your watch syncs to your own Garmin Connect account just like any built-in workout — under Garmin's own policy (see section 7).
• It asks for no name, email or account, and contains no advertising or analytics.

3. Permissions this app requests

These are the only permissions requested.

4. Data stored locally on the watch

Stored in Garmin's per-app storage sandbox, which only this app can read:

• Your training profile — level, training days, goal, equipment, optional Open date and optional personal records.
• A randomly generated athlete id, created on the watch.
• The plan cache (about two weeks of sessions) so the app works offline.
• Session history and personal bests, kept by score kind.
• The free-edition workout counter (free listing only).

This data stays on the watch and is removed when you uninstall the app.

5. Data sent to a server

Yes — this app has a server, and here is exactly what it sends. Unlike most BIKINTULIS apps, CrossFit Coach builds your plan on a server at bikintulis.de. When it syncs it sends:

• a randomly generated athlete id — created on the watch, not your Garmin ID, and not linked to you;
• your training profile: level, training days, goal, the equipment you ticked, an optional CrossFit Open date and optional personal records;
• the duration and score of sessions you complete, so next week's plan can adapt.

That is all. It sends no name, no email, no account, no location data and no heart-rate data. Your GPS fix, if you enable it, is used only on the watch and written into your Garmin activity.

If the server is unreachable the app keeps working from its two-week cache, and builds its own session if the cache runs dry.

6. What this app does NOT collect or send

• No name, email address, phone number, postal address, or account credential.
• No GPS / location data.
• No data sent to BIKINTULIS — there is no server contact whatsoever.
• No advertising or analytics SDKs of any kind.

7. Garmin Connect & your Garmin account

The app runs inside Garmin's Connect IQ platform and records a standard activity. When your watch syncs, that activity goes to your Garmin Connect account — exactly like any built-in workout. Garmin's own collection and use of data is governed by Garmin's policy at garmin.com/privacy. BIKINTULIS has no access to your Garmin account, your activities, or anything synced to Garmin Connect.

8. The bikintulis.de website

Separate from the app, when you use the bikintulis.de website itself:

• If you leave a comment or review, your name, email, rating and comment text are stored. Your name, rating and comment are published publicly after moderation; your email is never published.
• If you use the contact form, your name, email, subject and message are stored privately and used to reply to you. If you attach a photo or video (optional, up to 20 MB), it is stored on the BIKINTULIS server alongside the message and only viewable by the site owner via an authenticated admin panel. The attachment is deleted when the message is deleted.
• Your IP address is stored in our database only as a salted SHA-256 hash (rate-limiting / spam prevention), never in raw form there. Raw IP addresses do appear in the standard web-server access log, as they do on any website; those logs are kept for up to 30 days and are used only for security and troubleshooting.
• Standard web-server access logs are kept up to 30 days.
• No third-party analytics, no advertising, no tracking pixels. The site sets exactly one cookie in total, and only on the Hyrox workout-builder page if you choose to pair a watch there.

9. Legal basis (GDPR)

Because the app itself collects and sends nothing to BIKINTULIS, the only personal data we process relates to the website: your consent (when you submit a comment or contact message) and legitimate interest (IP hashes and server logs, used solely to keep the site secure and operational).

10. Data retention

• On the watch: kept until you delete a session or uninstall the app. No server copy exists.
• Website comments: retained while CrossFit Coach is listed on this site.
• Contact messages: retained as long as needed to handle your enquiry, then deleted.
• Server access logs: up to 30 days.

11. Your rights

Under the GDPR you can ask to access, correct, or delete data we hold (this only ever concerns website comments/contact messages — the app holds nothing on our side), withdraw consent, object to processing, or lodge a complaint with your data-protection authority. To exercise any right, use the contact form — requests are answered within 30 days.

12. Security

• The app makes no network connections, so there is no app-to-server traffic to secure.
• Any traffic to the bikintulis.de website is over HTTPS.
• No payment data is ever handled by BIKINTULIS — purchases go through the Garmin Connect IQ store.

13. Children

CrossFit Coach is a general-purpose fitness app, is not directed at children under 13, and does not knowingly collect any data from them (indeed, it collects no personal data from anyone).

14. Changes to this policy

This policy may be updated to reflect new features or legal requirements. The "Last updated" date at the top reflects the latest change. Continued use after a change indicates acceptance of the updated policy.

15. Contact

Questions, requests or complaints about this policy: please use the contact form.