Terms and Conditions

These terms are the agreement between you and Sweatkraft AS (the company behind SweatStack) for using SweatStack. We've tried to keep them short and plain. If anything is unclear, email [email protected].

Part A applies to everyone with a SweatStack account, free or paid. Part B additionally applies if you build on the SweatStack API.

What SweatStack provides¶

• A web application for sports data analysis and management.
• APIs, SDKs, and AI tooling for building on top of your data.
• Integrations with wearable platforms and devices.
• Any other tools or services included in your plan.

---

Part A: for everyone¶

Account eligibility¶

You need to be at least 16 years old to use SweatStack. By creating an account you confirm you meet that bar and that the information you give us is accurate. An account someone manages for a younger athlete is covered under Accounts you manage for someone else.

How you can use SweatStack¶

You can:

• Access, analyze, manage, and export your sports data.
• Share data with other users, organizations, and third-party applications you authorize.
• Build applications using our API (see Part B).

We ask that you:

• Only access data you have permission to view.
• Use the service responsibly and don't try to disrupt it for others.
• Don't use SweatStack for anything illegal.
• Use the API responsibly and within any fair-use limits we communicate; if you need higher volume, let us know.

If you violate these, we may suspend or terminate your account, or suspend apps. Where possible we'll tell you first.

Your data¶

You stay in control of your data:

• Choose what to share, with whom, and through which apps.
• Disconnect apps, export your data, or delete your account whenever you want.
• See our Privacy Policy for what we collect and why.

Accounts you manage for someone else¶

You can create and manage SweatStack accounts for other people, for example the athletes you coach or your child. For those accounts:

• You need the person's permission to manage their data. If they are under 16, you need to be their parent or guardian, or have their parent's or guardian's permission.
• You are responsible for their data: what you collect, who you share it with, and answering their questions and requests about it. SweatStack processes it on your behalf, under our Data Processing Agreement.

Not medical advice¶

SweatStack is a tool for training insight, not a medical device. The data, analyses, and recommendations you see, whether produced by SweatStack or by third-party apps built on SweatStack, are not medical, diagnostic, or clinical advice. Don't rely on them to diagnose, treat, or make decisions about a medical condition, and don't rely on SweatStack where your health or safety depends on it. If you have a health question, talk to a qualified professional.

Connected platforms¶

SweatStack connects to platforms run by other companies, like Garmin Connect. They decide what data they share with us and on what terms, and they can change or end our access at any time. If that happens, we may have to change or remove an integration. We'll tell you as soon as we know.

Data already in your account stays yours, and you can always export it. If a change removes or significantly limits a feature you pay for, you can cancel and get a refund for the rest of the period.

These platforms aren't parties to these terms and aren't responsible to you for SweatStack or for apps built on it.

Free and paid tiers¶

These terms apply to both free and paid use. If you have a paid plan, billing is handled by Stripe under the plan you selected. You can cancel anytime; cancellation stops future billing but does not refund the current period unless we agree otherwise or local consumer law requires it.

Ending your account¶

You can delete your account anytime from the app. We'll remove your data on the timeline described in the Privacy Policy. We may also terminate or suspend your account if you materially violate these terms or if continuing to provide service to you would expose us to legal risk; in non-urgent cases we'll give you reasonable notice and a chance to export your data first.

Service quality¶

We aim to keep SweatStack reliable and to communicate clearly when things break. The service is provided "as-is" without warranties beyond what local law requires.

Liability¶

To the maximum extent permitted by law, our liability for any claim arising out of these terms or your use of SweatStack is limited to the fees you paid us in the 12 months before the claim. We're not liable for indirect, incidental, or consequential damages.

Nothing in this section limits liability that can't be excluded under applicable law, including mandatory consumer protections in your country of residence.

Changes to these terms¶

We may update these terms when the service changes or when we need to. For a change that reduces your rights or adds to your obligations, we'll notify account holders by email or in-app at least 30 days before it takes effect, so you have time to review and, if you disagree, close your account. Other changes, such as a new feature, clearer wording or a change the law requires, take effect when we publish them. Every version stays available at its own address, with the date it took effect.

Legal framework¶

• Governed by Norwegian law.
• Disputes resolved through good-faith negotiation first, then the courts of Norway. If you are a consumer, mandatory consumer protections of your country of residence still apply, and you may also bring claims in your local courts.
• You retain ownership of your data; we own the platform and its intellectual property.

---

Part B: additionally for developers¶

This part applies if you create a SweatStack application, generate an API key, or call the SweatStack API. By doing any of these you accept it on behalf of yourself or the legal entity you represent. Where these terms refer to "you" in Part B, they mean the developer of the app.

Your role and responsibilities for user data¶

When an end user authorizes your app, you receive a copy of the data they grant access to. From that moment, you are an independent controller of that data under GDPR (and an equivalent role under other applicable laws). That means:

• You need your own privacy policy that clearly tells your users what your app does with their data, including whether and how you use AI on it.
• You handle data subject requests (access, correction, deletion, etc.) within your product.
• You comply with applicable data protection law independently, on your side.

SweatStack acts as your processor for:

• data you store back into SweatStack through our app-metadata feature (or any other developer-controlled storage we offer);
• accounts that belong to your app rather than to the athlete, and all their data. For those you are the controller, as for data you hold yourself, and you need a lawful basis to have SweatStack process it.

The terms for that are in our Data Processing Agreement, which applies automatically when you register an application.

Scopes and purpose¶

• Request only the scopes your app genuinely needs.
• Use the data only for the purposes you disclosed to the user.
• Don't sell user data, and don't enrich or combine it with other datasets in ways the user wouldn't reasonably expect.

AI models¶

These rules are the same for data from every source. Here, an "AI model" is a general-purpose AI model as the EU AI Act defines it: a large model like GPT, Claude, Gemini or Llama, whether a provider runs it or you do.

• Before you put a user's data into an AI model, get their explicit consent, and tell them what the AI does and which provider runs it. Let them withdraw that consent at any time.
• Use only AI providers whose terms forbid them to train on the data you send.
• Don't train, fine-tune or evaluate an AI model on SweatStack-sourced data, and don't put the data in a dataset for one, even de-identified or aggregated. The only exception is a model that serves just the user the data came from.
• Don't put one user's data into an AI model's context for another user, for example through a shared retrieval index, unless the user shared it with that person through SweatStack.

Models you build for a specific task in your own product, like a regression or a classifier, are ordinary processing under the purposes you disclosed. Don't sell, license or share them.

These rules don't apply to accounts your app manages (see Your role and responsibilities for user data). For those you are the controller, and your own privacy policy and your agreements with the data sources govern how you use AI.

Security¶

• Protect your client_secret and any tokens you receive. Treat them as production credentials.
• Use TLS for all transit, and reasonable security practices on your side.
• If you discover a breach affecting SweatStack-sourced data, tell us at [email protected] without undue delay, and in any case within 72 hours of becoming aware. We may need that to meet our own obligations.

Deletion when users revoke¶

If a user revokes your app's access, or deletes their SweatStack account, delete the data you hold about them within 30 days, including copies in training sets and AI context such as retrieval indexes. Routine backup retention is fine as long as deleted data isn't restored into production.

No re-sharing¶

Don't pass SweatStack-sourced data to further third parties unless you have a lawful basis and have bound them to equivalent obligations.

Conditions from data sources¶

Some data sources set conditions on how their data is used. Garmin, for example, requires attribution when you display data from its devices, following its brand guidelines. You can identify the source from the device information in the activity data. We list these conditions on the data provenance page and tell you when they change. Your app must follow them.

Your own platform keys, and data from other platforms¶

Your app can connect a platform with its own keys (for example its own Garmin consumer key) instead of ours, or send SweatStack data it received from a platform itself. If it does:

• You remain that platform's licensee and responsible for following your agreement with it.
• Before you register your keys with SweatStack or send it a platform's data, make sure that agreement allows SweatStack to process the data on your behalf. Some platforms require their written permission first, or require you to name SweatStack as your service provider. Our setup guide for each platform says what we know; your agreement with the platform is what counts.
• We use your keys only to run your app's connections, keep them confidential, and delete them when you remove them or your app.
• An athlete who connects with your keys gets an account that belongs to your app, and SweatStack is your processor for it (see Your role and responsibilities for user data).
• If the platform suspends or revokes your keys, the connections that use them stop.

Suspending apps¶

We may suspend an app that doesn't respect these terms, for example an app that misleads users, requests excessive scopes, ignores security obligations, or harms the SweatStack ecosystem. For non-urgent issues we'll tell you first and give you a chance to fix things. For security or abuse issues we may act immediately.

Rate limits and fair use¶

We don't publish hard rate limits. Use the API responsibly, and we won't throttle you unless your usage affects other applications, in which case we'll contact you first. If you have a legitimate need for high volume, email us and we'll work something out.

API stability¶

We give at least 12 months notice before breaking changes to the API. A breaking change is one that would cause a working integration to break or silently misbehave: removal of an endpoint, removal or rename of a field, or a change in the semantics of an existing field. Additive changes (new endpoints, new optional fields) are not breaking and may ship at any time.

This notice covers the SweatStack API. Whether a connected platform keeps providing data is up to that platform; see Connected platforms.

Endpoints not covered by this notice period are explicitly labelled "beta" in both the developer documentation and the interactive API reference. They may change or be removed with shorter notice.

App-metadata¶

If you use our app-metadata feature to store data alongside a user's SweatStack account, you remain in control of what you store. Don't put data in there that the user wouldn't expect you to store on their behalf. See the DPA for the processor terms that apply.

License and IP¶

We grant you a non-exclusive, revocable, royalty-free license to use the SweatStack SDKs, CLI, AI skills, and similar tooling for the purpose of building applications on SweatStack. We don't claim any IP in the apps you build. SweatStack's name, logo, and brand belong to us; see the SweatStack brand guidelines for what's okay.

Liability and indemnity¶

Each party is responsible for its own product. To the extent permitted by law, you'll indemnify Sweatkraft AS against third-party claims arising from your app (for example, claims by your users about what your app did with their data), except where the claim is caused by SweatStack.

---

Contact¶

To report abuse or a problem with an app built on SweatStack, email [email protected].

Sweatkraft AS Email: [email protected] Address: Laukelandsvegen 247, 6977 Bygstad, Norway