Privacy policy.

1. Who is responsible

Outset Limited operates outset.co.nz and is developing Outset Training (working name). For privacy questions or requests, contact Pablo at pablo@outset.co.nz.

2. What is available today

This public website describes our studio and products. It does not offer Outset Training accounts, accept activity uploads, or connect to Garmin, Oura or Apple Health. There is no public training-data collection form or connected-account login on this site.

The private training prototype currently contains founder testing records and training notes, stored separately from the public website. It supports manual diary records and report drafts. Garmin and other automatic health integrations are not live. The illustrative interface on the training page contains no real athlete records.

3. Website visits and enquiries

The site is hosted by Vercel. Requests are processed by its infrastructure and may produce technical logs such as IP address, requested URL, browser information, timestamps and error information, for delivery, reliability and security.

The site includes Vercel’s Web Analytics script to help us understand site usage and improve the website. This may process page visits, referring pages, browser and device characteristics, and approximate location derived from a request. See Vercel’s analytics privacy information and privacy policy for its processing details. We do not use this site to sell personal information or run advertising profiles.

If you email us, we receive your address, name if provided, and message contents. We use these to respond, discuss the product and maintain the resulting correspondence. Email links open your own email application; they are not a mailing-list sign-up. Please do not email passwords, account tokens or detailed health records to enquire about the product.

Paper Yeti enquiries and order calculator

To let you resume after refreshing or returning, this browser keeps your calculator answers and progress for up to seven days. Contact form details are not saved in browser storage. Use Start again in the calculator to clear this saved progress; this does not delete responses already submitted to us.

When you complete the calculator, we save your answers, assumptions, fit score and estimated savings, even if you do not provide contact details. If you submit an enquiry, we attach your name, company, email, optional phone and notes to that response and use them to assess the opportunity and respond to you. Qualified calculator enquiries and direct sample enquiries trigger an internal email notification. You can also submit sample orders through Paper Yeti without completing the calculator. For those enquiries, we store your contact details, ERP/system, notes and files, but do not invent calculator answers, a fit score or estimated savings.

Calculator responses are stored in a separate Neon Postgres database. Vercel hosts the page and API; Resend delivers internal enquiry notifications. We record calculator starts, question completions, results, enquiries and the question where a session ends to improve the experience. These analytics events do not contain your contact details. A temporary hashed network identifier helps limit abuse. Lead details are available only through a protected admin interface. If you choose to send sample orders, Paper Yeti uploads the files to private database storage and links them to your enquiry. They are used to assess how your order workflow could be automated. Files are not published as public links; authorised staff can download them through the protected admin interface. Files may be stored before the final enquiry step completes so interrupted submissions can be retried. Sample files are not saved in browser storage.

We retain calculator responses and enquiry correspondence for assessing demand, follow-up and the resulting business relationship; you may request access, correction or deletion at pablo@outset.co.nz. Do not include passwords or access credentials in the notes or sample orders.

4. Intended training data and purposes

For a future beta, we plan to collect only data needed for the features you choose. This may include account/contact details; activity date, type, distance, duration, pace, elevation and heart-rate records; permitted sleep and recovery metrics; and the training plans, perceived effort, recovery, fuelling, niggles and coach notes you enter.

The intended purposes are importing and organising activities, comparing planned and completed training, showing recovery context, and preparing athlete-reviewed coach reports. Source authorisation, available data and provider terms will determine what can actually be imported. We will update this policy with the live integrations and actual processing before inviting users to connect accounts.

5. Authorisation and sharing

The planned Garmin integration will use Garmin’s authorised consent flow if access is approved. We do not collect Garmin passwords on this website. Future account connection, revocation and deletion controls are development commitments, not currently available public features.

Coach sharing is intended to be athlete-directed: you decide which report or data to share. No automatic coach access is available on this website. If an athlete independently sends a report to a coach, the coach’s handling of their copy is separate from Outset’s.

We may use service providers to operate hosting and email, or disclose information when legally required. Providers may process information outside New Zealand. Before the public training service opens, we will identify the services that handle training data and explain applicable transfers and safeguards.

6. AI and sensitive information

Health and training records can be sensitive. Optional AI-assisted summaries are a planned feature, not an active connected-data service on this website. We will not introduce that feature for users without explaining what information is processed, by which services and for what purpose, obtaining the athlete’s consent, and meeting the relevant provider permissions. We will not sell health or training records, use them for targeted advertising, or use them to train AI models. We do not claim Garmin has approved AI processing, cross-provider aggregation or coach access.

7. Storage, retention and security

The founder prototype’s records are separate from the public static site. We intend to retain enquiry correspondence only for as long as needed for the enquiry, an ongoing relationship, or legal and operational obligations. Vercel manages its infrastructure records under its applicable terms.

Before launching training accounts, we plan to implement access separation, protected connection-token storage and user disconnect/deletion controls, with a documented retention and backup-deletion schedule. The exact periods and production controls will be published before third-party athletes provide data. We do not claim a certification or guarantee that every security risk can be eliminated.

8. Your requests

You can contact pablo@outset.co.nz to ask what personal information Outset holds about you, request access or correction, request deletion, or raise a privacy concern. We may need to verify your identity before acting. We will explain if a legal obligation prevents deletion of a particular record.

If a concern is not resolved, you can contact the New Zealand Office of the Privacy Commissioner. External project links on this website lead to services with their own privacy notices.

9. Changes before release

We will revise this policy as the product develops and show the update date here. A future public or closed-beta release will include a policy reflecting its actual data flows, providers, retention and user controls—not just the intentions set out above.