Back to PITLAB

PITLAB Privacy Policy

Last updated: September 2026 · Version 2026-09-v1

Introduction

PITLAB is a driver performance intelligence platform. PITLAB allows drivers to record session information, self-reported performance information and, when explicitly enabled, optional physiological information from supported wearable providers.

PITLAB is an independent project operated solely by an individual natural person acting as the Data Controller. It is not operated by an incorporated company.

The operator is currently the only human operator of PITLAB and the only person with administrative access to PITLAB user data. PITLAB does, however, rely on infrastructure and service providers where necessary to operate the service, such as hosting/backend, authentication and connected wearable providers. These services may technically process information as necessary to provide their services. The operator's home address is not published unless explicitly provided and requested.

Information We Process

PITLAB may process the following categories of personal information:

A. Account information

• Email address
• Nickname
• Authentication and account identifiers
• Onboarding preferences
• Account settings

Authentication is handled by the platform's authentication provider. PITLAB does not store your authentication password directly.

B. Driver-provided performance information

• Focus, Confidence, Pressure, Energy, Consistency, Performance, Recovery
• Pre-session and post-session responses
• Session focus and confidence prediction
• Session context
• Driver-provided explanations or notes
• Other information intentionally submitted by the user

C. Session information

• Session type, date/time, started/finished timestamps and duration
• Historical session records
• PITLAB Session Analysis
• Derived longitudinal patterns and performance trends

D. Optional wearable / physiological information

Only when you explicitly enable and authorize a supported wearable integration. Depending on the provider and permissions granted, information may include:

• Heart rate, average heart rate, maximum heart rate
• Heart-rate zones
• Heart rate variability (HRV) and resting heart rate
• Recovery / readiness information
• Strain / activity information and workout information
• Activity timestamps and physiological session context

The exact information available varies by provider. PITLAB only processes information that the relevant provider actually exposes through its API.

How PITLAB Uses Your Information

PITLAB may process information to:

• Create and maintain your PITLAB account
• Record driver sessions and display session history
• Generate Session Analysis and calculate performance trends
• Identify longitudinal performance patterns
• Personalize PITLAB to your own performance history
• Associate optional wearable information with relevant PITLAB sessions
• Provide physiological context to performance analysis
• Improve the reliability and usefulness of PITLAB features
• Secure the application, diagnose technical problems, and prevent abuse or unauthorized access
• Respond to privacy and support requests

PITLAB does not process personal data for advertising profiling and does not sell personal data.

Legal Basis for Processing

For ordinary account and service data, processing is necessary to provide the PITLAB service you requested and to administer your account. Where appropriate, necessary security and fraud-prevention processing may rely on legitimate interests or applicable legal obligations.

Optional physiological / wearable data. Where wearable information constitutes health-related or other special-category personal data under applicable law, PITLAB processes it only after obtaining your explicit consent for the specified performance-analysis purposes. This consent is separate from general acceptance of this Privacy Policy and is not bundled into account creation or normal use of PITLAB. Merely connecting a wearable provider is not, by itself, the sole PITLAB consent mechanism — an explicit, affirmative consent action is required first.

Optional Nature of Wearable Data

Connecting a wearable is completely optional. You can use PITLAB without connecting WHOOP, Garmin, any smartwatch or any wearable provider. Refusing or withdrawing physiological-data consent does not prevent use of normal PITLAB functionality.

Wearable Data Is Not Medical Diagnosis

PITLAB is designed for performance analysis and performance intelligence. It is not a medical service. PITLAB does not use wearable information to diagnose, treat, prevent or determine the existence of medical or psychological conditions. Heart rate, HRV, recovery and similar information are used only as contextual performance information within the functionality described in this Privacy Policy.

WHOOP Integration

When an eligible user chooses to connect WHOOP:

• PITLAB redirects you to WHOOP's authorization process, where you choose whether to authorize PITLAB.
• PITLAB accesses only information permitted by the authorized WHOOP scopes.
• PITLAB uses WHOOP information only for the purposes described in this Privacy Policy.
• PITLAB does not sell WHOOP data and does not use WHOOP data for advertising.
• PITLAB does not imply endorsement by WHOOP.
• You can disconnect the integration through Settings → Connected Devices.

WHOOP itself operates under WHOOP's own privacy terms when processing information within the WHOOP platform. Similar provider-specific sections may be added for other supported wearable providers, such as Garmin, when required by the provider or applicable law.

Service Providers

The PITLAB operator is currently the only human operator of PITLAB. However, PITLAB may rely on technical service providers that process data where necessary to provide infrastructure or connected services. This may include categories such as application hosting/backend infrastructure, database infrastructure, authentication providers, email/service communications, and connected wearable providers. These providers are not PITLAB employees or members of PITLAB. Specific companies are identified here only when PITLAB actually uses them and their role is known.

PITLAB does not sell users' personal or physiological information.

No Internal Team / Internal Sharing

PITLAB currently has no employees, contractors or internal team members with access to user personal information. The project is operated solely by its individual operator. Technical service providers may process information as required for the operation of the service, as separately described above. This statement is intended to be easy to update if PITLAB later grows into a team or company.

Data Security

PITLAB uses reasonable technical and organizational measures to protect personal information. For wearable and API data, the architecture uses HTTPS/encryption in transit, secure server-side credentials, access controls, protected OAuth tokens, and restricted backend access. No system can be guaranteed to be completely secure, and PITLAB does not claim that data is "100% secure" or that breaches can never occur.

Data Retention

PITLAB retains personal information only for as long as reasonably necessary to provide PITLAB, maintain requested session history, fulfill the purposes described in this Privacy Policy, and comply with applicable legal and security requirements. You may request deletion of your personal data. Wearable-derived information is capable of being removed when required by withdrawal or deletion request, provider requirements, or applicable law.

Your Rights

Depending on applicable law, you may have rights including access, correction, deletion, restriction, objection where applicable, data portability, withdrawal of consent, and lodging a complaint with a competent supervisory authority. For EU/EEA users, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Because PITLAB is operated from Italy, you may also have the right to lodge a complaint with the Garante per la protezione dei dati personali.

Privacy Request Contact

For any privacy request — including access, correction, deletion, portability, wearable consent withdrawal, or other privacy questions — contact: privacy.pitlab.argue455@aleeas.com

Children / Age

For the current beta, wearable/physiological integration is available only to users who confirm that they are at least 18 years old. An otherwise permitted younger user may still use ordinary PITLAB functionality even if they cannot enable wearable processing.

Future AI / Personalization Disclosure

PITLAB may use the information you provide and optional wearable-derived information to generate personalized performance analysis, identify patterns across your sessions, and develop or improve performance-analysis features. PITLAB does not diagnose your mental state, and no claim is made here that automated Focus/Energy models already exist if they are not currently active.

Automated Decision-Making

PITLAB performance analysis is informational and intended to support your own review of your performance. It does not make legal, medical, employment, insurance or similarly significant decisions about you, and PITLAB does not create automated decisions producing legal or similarly significant effects.

Analytics / Cookies

PITLAB uses only technically necessary storage required for authentication, security and session persistence. PITLAB does not use non-essential analytics, advertising, tracking cookies or third-party behavioral trackers. If that changes, an appropriate consent mechanism will be implemented before those technologies activate.

No Sale / No Advertising Use

PITLAB does not sell personal data. PITLAB does not sell physiological or wearable data. WHOOP-derived information is not used for third-party advertising. Advertising or marketing uses of physiological data would require a separate future legal/privacy review and, where required, additional consent.

Privacy Policy Changes

This Privacy Policy may be updated as PITLAB evolves. When material changes affect physiological-data processing or the purposes for which explicit consent was obtained, PITLAB will not automatically assume old consent covers materially new purposes and will request new consent where legally required. The current "Last updated" date is shown at the top of this page.