Privacy Policy

Last updated: January 13, 2026

1. Introduction

NoClue Group Limited ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, waitlist, and services (collectively, the "Services").

By using NoClue, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

When you join our waitlist or use NoClue, you may provide:

• Contact Information: Email address, name
• Profile Information: Age, gender, location, running goals, experience level
• Training Data: Running history, race times, preferred training volume, availability
• Health Information: Injury history, medical conditions relevant to training (optional but recommended)
• Feedback: Voice messages, text inputs describing your training experience, injuries, fatigue, etc.

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

• Device Information: Device type, operating system, browser type, IP address
• Usage Information: Pages viewed, features used, time spent, click patterns
• Analytics Data: Aggregated statistics about how users interact with NoClue

2.3 Information from Third-Party Integrations

If you connect third-party services to NoClue, we may collect:

• Strava: Activity data (runs, distance, pace, heart rate, elevation)
• Wearables: Sleep data, HRV, resting heart rate, recovery metrics (from devices like Whoop, Garmin, Apple Watch, etc.)

You control these integrations and can disconnect them at any time. We only access data you explicitly authorize.

3. How We Use Your Information

3.1 To Provide the Services

• Generate personalized AI-powered running plans
• Adapt your training based on feedback, injuries, and life circumstances
• Analyze your training data to optimize recommendations
• Process voice and text inputs to understand your training context

3.2 To Communicate With You

• Send waitlist updates and product launch notifications
• Provide customer support and respond to inquiries
• Share training tips, feature updates, and educational content (you can opt out)

3.3 To Improve Our Services

• Analyze usage patterns to enhance the AI coaching algorithms
• Identify and fix bugs or technical issues
• Develop new features based on user needs
• Conduct research to improve training recommendations

3.4 For Legal and Security Purposes

• Comply with legal obligations and requests from authorities
• Enforce our Terms & Conditions
• Protect against fraud, abuse, and security threats
• Defend our rights in legal proceedings

4. How We Share Your Information

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who help us operate NoClue:

• Cloud Hosting: AWS, Google Cloud, or similar (data storage and computing)
• Email Services: Mailchimp, SendGrid, or similar (waitlist and transactional emails)
• Analytics: Google Analytics, Mixpanel, or similar (usage statistics)
• Payment Processors: Stripe (when we begin charging for services)
• AI Services: OpenAI, Anthropic, or similar (AI model infrastructure)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4.4 Business Transfers

If NoClue is acquired or merged with another company, your information may be transferred to the new owner. We will notify you of any such change.

5. Data Retention

5.1 Waitlist Data

We retain waitlist email addresses until you request removal or until one year after our product launches, whichever comes first.

5.2 Active User Data

While you use NoClue, we retain your data to provide the Services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are legally required to retain it.

5.3 Aggregated Data

We may retain anonymized, aggregated data indefinitely for research and service improvement purposes. This data cannot be used to identify you personally.

6. Your Rights and Choices

6.1 Access and Correction

You have the right to access and update your personal information at any time through your account settings or by contacting us.

6.2 Data Portability

You can request a copy of your data in a machine-readable format.

6.3 Deletion

You can request deletion of your account and personal data. We will comply within 30 days, subject to legal retention requirements.

6.4 Opt-Out of Marketing

You can unsubscribe from marketing emails at any time using the link in the email footer or by contacting us.

6.5 Third-Party Integrations

You can disconnect Strava, wearables, or other integrations at any time through your account settings.

6.6 UK/EU Data Rights (GDPR)

If you are in the UK or EU, you have additional rights under GDPR, including:

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with the Information Commissioner's Office (ICO)

7. Data Security

7.1 How We Protect Your Data

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure cloud infrastructure with access controls
• Regular security audits and vulnerability testing
• Limited employee access to personal data (need-to-know basis)

7.2 Your Responsibility

You are responsible for keeping your account credentials secure. Do not share your password with anyone.

7.3 No Absolute Security

While we strive to protect your data, no system is completely secure. We cannot guarantee absolute security, and you use NoClue at your own risk.

8. Children's Privacy

NoClue is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries outside the UK, including the United States. These countries may have different data protection laws than your home country.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK/EU
• Adequacy decisions by the UK Information Commissioner's Office
• Compliance with GDPR and UK data protection laws

10. Cookies and Tracking

10.1 What We Use

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your login session
• Analyze website traffic and user behavior
• Improve performance and user experience

10.2 Types of Cookies

Type	Purpose	Duration
Essential	Required for the Services to function (e.g., login)	Session or persistent
Analytics	Track usage patterns (Google Analytics)	Up to 2 years
Preferences	Remember your settings and choices	Up to 1 year

10.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of NoClue.

11. Third-Party Links

Our Services may contain links to third-party websites (e.g., Strava, social media). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do:

• We will update the "Last updated" date at the top of this page
• We will notify you via email if the changes are material
• Your continued use of NoClue after changes take effect constitutes acceptance

13. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent (e.g., joining the waitlist)
• Contract: Processing is necessary to provide the Services you requested
• Legitimate Interests: We have a legitimate interest in improving our Services and preventing fraud
• Legal Obligation: We are required by law to process certain data

14. UK Information Commissioner's Office (ICO)

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF, United Kingdom
Website: ico.org.uk
Helpline: 0303 123 1113