Privacy policy

Last updated 2 November 2026

This policy covers the Float app for iOS and Android (formerly Ludum Ai) and the Float websites: floatrowing.com and coach.ludum.com, where coaches see their squad. Endurance Sports Research Ltd (“we”), a company registered in England and Wales, is the data controller. Questions or requests: [email protected]. See also our terms of use.

What we collect

• Account: your email address and password (or the one-time codes we email you to sign in).
• Profile: name, sex, date of birth, body weight, maximum heart rate, units and display settings. You choose what to fill in.
• Training data: the sessions you row, with stroke-by-stroke data from your rowing machine (pace, rate, power, force curve, stroke length) and heart rate and R-R intervals from your heart-rate strap, plus the workouts you build.
• Check-ins and tests: if you’re in a squad, your daily check-ins (sleep, recovery, legs, hydration, resting heart rate, body mass, notes) and team test results.
• Technical: whether you use iOS or Android, recorded with each session so we can trace problems. Float has no advertising and no third-party analytics or tracking.

Bluetooth is used only to talk to your rowing machine and heart-rate strap. Float doesn’t use your location.

How we use it

• To run the app: record, store, analyse and sync your sessions across devices.
• To work out training scores, records and readiness from your own data.
• To show your results to the coaches of squads you choose to join.
• To send account emails (sign-up and password-reset codes, squad invitations).
• For research and to improve our products, using de-identified data combined across athletes. It never includes your name or contact details, and we don’t try to re-identify anyone. Results may be published, never in a way that identifies you.

We process your data to provide the service you asked for (contract). Heart-rate and wellness data are health data, which we process with your explicit consent, given when you record or enter them. You can withdraw it by deleting the data or your account.

Who sees it

• Your coaches: staff of a squad you join see your sessions, check-ins and test results for as long as you’re a member. Leave the squad in the app to stop sharing.
• Services you connect: if you connect Ludum, Strava or Concept2 Logbook, we send them the sessions you choose. Their own privacy policies then apply.
• Our service providers, who store and process data for us under contract: Supabase (database, sign-in and file storage), Vercel and DigitalOcean (website hosting), Google Cloud (session analysis) and Resend (email).

We don’t sell your data or share it for advertising. Some providers store data outside the UK; where they do, transfers are covered by the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

We keep your data while you have an account. When you delete your account, your profile, sessions, check-ins, squad memberships and connections are deleted straight away. Backups roll off within a few weeks. Sessions you already sent to Ludum, Strava or Concept2 stay with them.

Deleting your account

In the app, go to You → Delete account. Or see how to delete your account.

Your rights

Under UK and EU data-protection law you can ask for a copy of your data, have it corrected or deleted, object to or restrict its use, and take it elsewhere. Email [email protected]. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data-protection authority.

Children

Float isn’t meant for children under 13, and we don’t knowingly collect their data.

Security

Data travels over encrypted connections. Each athlete’s data is protected by access rules in the database, so only you and your squad’s coaches can read it. Sign-in tokens on your phone are kept in the iOS Keychain or Android Keystore.

Changes

If we change this policy we’ll update the date at the top, and tell you in the app if the change matters.