PRIVACY NOTICE

1. Who we are

68 Ventures Ltd ("we", "us", "our"), an Alberta company trading as Road 2 Hybrid, is the data controller for personal data processed through this Service.

2. Data we collect

• Account data: name, email, password hash, profile photo, location (city/region), display name.
• Health & training data you enter: workouts logged, macros, food logs, hypnosis listens, mood, readiness (sleep, HRV, energy), benchmark and race results, progress photos.
• Community content: posts, comments, reactions, messages to coaches.
• Payment metadata: subscription status, plan, and Paddle customer/subscription IDs. Card details are handled by Paddle and never touch our servers.
• Technical data: device, browser, IP address, timestamps, error logs.
• Support communications: emails and in-app messages you send us.

3. Why we use it (purposes & legal basis)

• Provide the Service (contract): create your account, deliver programs, personalize training and macros.
• Payments & account management (contract / legal obligation): billing, invoices, tax compliance, fraud checks.
• Product improvement, security, and support (legitimate interests): debugging, analytics, protecting the Service.
• Marketing emails (consent, where required): only when you opt in. You can unsubscribe at any time.

4. Who we share data with

We share personal data with service providers acting on our instructions, including:

• Paddle.com Market Limited — Merchant of Record for all purchases, subscription management, payments, tax and invoicing.
• Hosting & backend — Supabase / Lovable Cloud for database, authentication, and storage.
• Email delivery — Resend or equivalent transactional email provider.
• AI features — model providers (e.g. Google) that power in-app coaching prompts. Data sent for AI features is scoped to the request.
• Professional advisers — legal, accounting, and tax advisers when necessary.
• Authorities — where required by law, court order, or to protect rights and safety.

We do not sell personal data.

5. International transfers

Our providers may process data in the United States, the European Union, and Canada. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep account and training data for as long as your account is active, plus a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs (typically up to 7 years for financial records). You can request deletion at any time (see below); anonymised or aggregated data may be retained.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also lodge a complaint with your local data-protection authority (in Canada, the Office of the Privacy Commissioner of Canada). To exercise any right, email hello@roadtohybrid.com. We respond within 30 days.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, role-based access controls, and row-level security on our database. No system is 100% secure; we will notify you and regulators of a material breach as required by law.

9. Cookies

We use essential cookies for login and session management. We may use limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings; blocking essential cookies will break login.

10. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from children.

11. Changes

We will update this notice as our practices evolve and post the new "Last updated" date at the top.

12. Contact

68 Ventures Ltd, Springbank, Alberta, Canada. Email: hello@roadtohybrid.com.