Privacy Policy

Last updated: January 15, 2026

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term "personal data" comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the "controller")?
The data on this website is processed by the operator of the website, whose contact information is available under section "Information about the responsible party (referred to as the "controller" in the GDPR)" in this Privacy Policy.

How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form, registration form, or when you log your workouts and race results.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns and to provide personalized training plans, workout recommendations, and performance tracking specific to HYROX training.

What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

2. Hosting

External Hosting

This website is hosted externally. Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, fitness data, race results, workout logs, and other data generated through a web site.

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

We are using the following host(s):

Vercel Inc.
Service: Frontend hosting and application delivery
Data processed: User interface data, session information
Location: United States
Purpose: Hosts the web application frontend

Supabase Inc.
Service: Database hosting and storage
Data processed: User accounts, fitness data, race results, workout logs, training plans, performance metrics
Location: European servers
Purpose: Primary database for storing all application data

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Information about the responsible party (referred to as the "controller" in the GDPR)

The data processing controller on this website is:

Zenon Technologies AG
Hinterbergstrasse 16
6312 Cham
Schweiz

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods).

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from "http://" to "https://" and also by the appearance of the lock icon in the browser line.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as "cookies." Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies).

Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., login function, workout tracking) or those that are necessary for the optimization of the website, shall be stored on the basis of Art. 6(1)(f) GDPR.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions.

The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR).

Registration on this website

You have the option to register on this website to be able to use additional website functions. We shall use the data you enter only for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise, we shall reject the registration.

The data entered during registration is processed for the purpose of implementing the user relationship established by the registration (Art. 6 (1)(b) GDPR). This includes:

  • Personal identification information (name, email address)
  • Fitness assessment data you provide
  • Race results and performance metrics
  • Workout logs and training history
  • Goal times and target race information
  • Equipment availability preferences

5. Information We Collect and How We Use It

Fitness and Training Data

We collect and process the following types of data to provide our training services:

  • Race Results: Your HYROX race times, splits, and performance data
  • Fitness Assessment: Information about your current fitness level, running pace, strength capabilities
  • Workout Logs: Records of completed workouts, exercise performance, and progress tracking
  • Training Preferences: Your available training days, equipment access, and scheduling constraints
  • Goal Information: Your target race times, goal events, and performance objectives

How We Use Your Data

We use the collected data for the following purposes:

  • To provide and maintain our training service
  • To create personalized training plans based on your fitness level and goals
  • To track your progress and adjust workouts accordingly
  • To analyze your performance and identify areas for improvement
  • To provide benchmark comparisons and performance insights
  • To improve our service and develop new features
  • To communicate with you about your training and service updates

The processing is based on Art. 6(1)(b) GDPR (contract fulfillment) and Art. 6(1)(f) GDPR (legitimate interest in providing effective training services).

6. Your Rights

Right to Access and Data Portability

You have the right to demand information about your archived personal data at any time. You also have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

Right to Rectification and Erasure

You have the right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to Demand Processing Restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time.

7. Analysis Tools

We may use analysis tools to understand how users interact with our website and to improve our services. Any use of such tools will be in accordance with applicable data protection laws and with your consent where required.

8. Medical Disclaimer

The training plans and fitness advice provided by ROXBASE are for informational purposes only. Always consult with a qualified healthcare professional before starting any new exercise program. We are not responsible for any injuries or health issues that may occur from following our training recommendations.

9. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. We will notify users of any material changes via email or through the service. Your continued use of ROXBASE after such modifications constitutes your acknowledgment of the modified privacy policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Zenon Technologies AG
Hinterbergstrasse 16
6312 Cham
Schweiz