1. Overview
Lime Dolphin Ltd. (“we,” “our,” “us”) develops the AI Copilot for Tri Coaches and a platform for doctors and athletes of sports teams. Our services connect with fitness platforms such as Garmin Connect, WHOOP, Wahoo and other supported providers. The purposes for which we use connected data depend on the service and data source, as described in Section 3.
We respect your privacy and handle all training data in compliance with applicable data-protection laws (GDPR, CCPA, etc.).
2. Information We Collect
We do not request your name or email address from connected providers, including Garmin Connect, WHOOP and Wahoo.
Depending on the provider and the permissions you authorize, the data available to our application include:
- Workout summaries (type, duration, distance, pace, power, HR, HRV, cadence, calories, sleep, recovery)
- Training timestamps and activity IDs
- Device type and firmware version (for performance context only)
- WHOOP body measurements: height, weight and maximum heart rate
We use this information for the purposes described in Section 3. Training data linked to your profile in our services remains personal data, even when we do not request your name or email address from the provider.
3. Purpose of Data Use
WHOOP data in our platform
After you connect WHOOP and authorize access, our platform synchronizes and displays your WHOOP recovery, sleep, strain and workout metrics and authorized body measurements, together with summaries and trends over time. These data are available to you and, only with your explicit permission, to the coaches, doctors or other team members you authorize.
WHOOP data is used for informational display and trend tracking only. Our platform does not use WHOOP data to generate medical recommendations, diagnose conditions, recommend treatment or make automated clinical decisions.
Garmin data in our platform
Collection and purposes
When you connect Garmin Connect and authorize access, we receive the health metrics and activity records made available under the permissions you grant, together with the timestamps and identifiers needed to synchronize them with your profile. These may include sleep, heart rate, daily health summaries and activity summaries, depending on your device, available data and permissions. We do not request your name or email address from Garmin.
We use Garmin data to display your metrics, summaries and trends to you and to the coaches, doctors or other team professionals you authorize. Garmin data in this platform is used for informational display and trend tracking. It is not used to generate medical recommendations, diagnose conditions, recommend treatment or make automated clinical decisions.
Processing and storage
We process Garmin data on servers we control, hosted by Amazon Web Services (AWS), and store it in MongoDB Atlas. These services provide hosting, computing and managed database infrastructure for our platform. Data is transmitted over encrypted channels and stored encrypted at rest on servers within the EU. Access is restricted to authorized personnel and to the people you authorize to view your data in the platform.
Third-party processing and AI
We do not send Garmin data to external AI services, including for generating reports, summaries or recommendations. Garmin data is not used to train or improve AI models.
AWS and MongoDB Atlas: Garmin data is processed by these infrastructure providers to host the application, run its server-side processing and store its database. Processing on servers we control includes this third-party infrastructure processing.
Telegram: our bot supports the connection and disconnection workflow and sends connection-related messages, including connection status and synchronization timestamps. We do not currently send reports containing Garmin health or activity data through Telegram.
We do not sell Garmin data or share it for advertising or marketing.
Your control and deletion
You can disconnect Garmin in our Telegram bot: open My devices, select Disconnect Garmin and confirm the disconnection. This stops new Garmin data from arriving. Disconnecting Garmin in the bot does not automatically delete your existing history: it remains stored until you request deletion or withdraw consent for its continued processing.
You may request access to your stored data, request deletion or withdraw consent by contacting privacy@limedolphin.com. We permanently erase the associated Garmin data within 30 days of a deletion request or withdrawal of consent. Withdrawal of consent also stops further collection and use for the purposes described above.
You can also revoke access through your Garmin Connect account settings. Upon revocation through Garmin Connect, associated Garmin data is permanently erased within 30 days, as described in Section 6.
For information about how Garmin handles your data in its own services, please see Garmin’s Privacy Policy.
Other connected data sources
Depending on the service and features you use, we process data from providers other than Garmin and WHOOP solely to:
- Generate performance summaries and trend reports
- Provide automated recommendations to coaches, doctors and athletes
- Evaluate training load, recovery, and readiness
For these features, we use AI to generate summaries and recommendations. These AI features do not apply to Garmin or WHOOP data in our platform. Their uses are limited to the informational purposes described in their respective sections above.
Your data, including WHOOP data, is not used to train or improve AI models.
We do not sell, rent, or transfer your data to any third party for marketing or advertising.
4. Data Storage and Security
- All data is transmitted over encrypted channels.
- Stored data is encrypted at rest.
- Access is limited to authorized personnel under strict confidentiality.
- Data retention and deletion are described in Section 6, including what happens when you disconnect a provider or request deletion.
5. Data Sharing
Depending on the services and features you use, your data may be processed by:
- People you authorize in our platform — your Garmin and WHOOP metrics and trends are shared with coaches, doctors or other team members only with your explicit permission.
- Hosting and database service providers — to host our applications and store the data used to provide our services.
- Telegram — for bot interactions and connection-related messages, including Garmin connection status and synchronization timestamps. We do not currently send reports containing Garmin health or activity data through Telegram. In other services that provide reports through Telegram, the content of those reports is transmitted via Telegram.
We also exchange information with the fitness platforms you connect where technically necessary to maintain those integrations.
Aggregated, non-identifiable statistics may be used internally to improve the technical performance of our services, but not to train or improve AI models.
6. Data Retention and Deletion
You can stop new Garmin or WHOOP synchronization in our platform’s Telegram bot: open My devices, select Disconnect Garmin or Disconnect Whoop, and confirm the disconnection. This stops new data arriving from the selected provider. Disconnecting Garmin or WHOOP in the bot does not automatically delete your existing history: it remains stored until you request deletion or withdraw consent for its continued processing.
To request deletion of stored records or withdraw consent for further processing, contact privacy@limedolphin.com. We permanently erase the associated stored health and activity data within 30 days of your request. If you withdraw consent, we also stop collecting and using the data for the purposes described in Section 3.
You can revoke Lime Dolphin’s access to your Garmin Connect, WHOOP, or other connected accounts at any time through the respective provider’s account settings. Upon revocation or deletion request, all associated stored health and activity data are permanently erased from our systems within 30 days.
7. Legal Basis for Processing
We process training data based on your explicit consent for the purposes described in Section 3.
You may withdraw your consent at any time. If you do, we stop collecting and using your training data for those purposes. We delete the associated activity data within 30 days, as described in Section 6.
8. Your Rights
You may request at any time to:
- View a summary of your data processed by Lime Dolphin
- Delete all associated records
- Withdraw consent for data processing
Requests can be sent to privacy@limedolphin.com
9. International Transfers
All data are processed on secure servers within the EU to provide adequate data-protection standards under GDPR.
10. Updates to This Policy
This policy may be updated periodically to reflect service or legal changes.
11. Contact
Lime Dolphin Ltd.
Email: privacy@limedolphin.com