1. Who we are
68 Ventures Ltd ("we", "us", "our"), an Alberta company trading as Road 2 Hybrid, is the data controller for personal data processed through this Service.
2. Data we collect
- Account data: name, email, password hash, profile photo, location (city/region), display name.
- Health & training data you enter: workouts and sets logged, macro targets and food logs, hypnosis listens, mood and check-in answers, benchmark and race results, intake and goal answers.
- Photos and voice you upload: food photos, progress photos, community photos and videos, screenshots of your wearable's morning report, and short voice clips when you log a meal by speaking. We do not connect to or sync with any tracker or health app; a wearable screenshot is only read if you upload one.
- Community and coaching content: posts, comments, reactions, stories, live chat, and messages to your coaches.
- Payment metadata: subscription status, plan, and Stripe customer/subscription IDs. Card details are handled by Stripe and never touch our servers. A small number of early members still have records from our previous provider, Paddle.
- Technical data: device, browser, IP address, timestamps, error logs.
- Support communications: emails and in-app messages you send us.
3. Why we use it (purposes & legal basis)
- Provide the Service (contract): create your account, deliver programs, personalize training and macros.
- Payments & account management (contract / legal obligation): billing, invoices, tax compliance, fraud checks.
- Product improvement, security, and support (legitimate interests): debugging, analytics, protecting the Service.
- AI features (consent): only if you turn them on in Settings. See section 5.
- Marketing emails (consent, where required): only when you opt in. You can unsubscribe at any time.
4. Who we share data with
We share personal data with service providers acting on our instructions, including:
- Stripe — payment processing, subscription management, invoicing and the billing portal. Some historic records reference our previous provider, Paddle.com Market Limited.
- Hosting & backend — our cloud backend provider for database, authentication, and storage.
- Email delivery — Resend or equivalent transactional email provider.
- AI providers — see section 5, and only with your permission.
- Professional advisers — legal, accounting, and tax advisers when necessary.
- Authorities — where required by law, court order, or to protect rights and safety.
We do not sell personal data.
5. AI features and your permission
Some features send what you enter to AI companies outside Road 2 Hybrid so they can answer. This is optional and off until you turn it on under Settings → AI features. You can turn it back off at any time, and our servers check your choice before anything is sent, including for automated jobs such as the weekly recap. Turning it off leaves manual food logging, all training and programming, the hypnosis library, community and coach messaging fully usable.
- Food photo and text analysis — the photo or description you submit goes to Google Gemini through the Lovable AI Gateway.
- Voice food logging — the short clip you record goes to the Lovable AI Gateway audio transcription endpoint.
- Wearable screenshot reading — the screenshot you upload goes to Google Gemini through the Lovable AI Gateway.
- Coach chat — your message plus your saved profile, goals, macro targets, recent logs, intake answers, listening history and a summary of the conversation go to the Lovable AI Gateway. Replies are written by AI, not by a person.
- Macro estimates, grocery lists and the weekly recap — the meals, targets, preferences and logged activity involved go to the Lovable AI Gateway.
- Custom hypnosis recordings — if you order one, your intake answers are used to generate a script through the Lovable AI Gateway, and the script is sent to ElevenLabs to produce the voice recording. This only runs if you, the person the recording is for, have AI features turned on. A coach cannot turn that on for you.
We do not make claims here about how those providers train on, retain, or delete what is sent. Their own terms govern that.
6. International transfers
Our providers may process data in the United States, the European Union, and Canada. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
7. Retention and deleting your account
We keep account and training data for as long as your account is active, plus a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs (typically up to 7 years for financial records).
You can delete your account yourself under Settings → Delete account. That removes your uploaded files, your posts, comments, stories and messages, your training, nutrition and check-in records, your profile, and your sign-in, and you get a receipt code. Honest limits: it does not cancel an active subscription (do that in the billing portal or email us first), we keep payment and tax records we are legally required to keep, copies may remain in encrypted backups for a limited period until those expire, and content quoted or replied to by other members may remain visible in that context. Anonymised or aggregated data may be retained.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also lodge a complaint with your local data-protection authority (in Canada, the Office of the Privacy Commissioner of Canada). To exercise any right, email hello@roadtohybrid.com. We respond within 30 days.
9. Security
We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, role-based access controls, and row-level security on our database. No system is 100% secure; we will notify you and regulators of a material breach as required by law.
10. Cookies
We use essential cookies for login and session management. We may use limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings; blocking essential cookies will break login.
11. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from children.
12. Changes
We will update this notice as our practices evolve and post the new "Last updated" date at the top.
13. Contact
68 Ventures Ltd, Springbank, Alberta, Canada. Email: hello@roadtohybrid.com.