Privacy notice
Last updated 7 October 2026
Beatboss shows members’ live heart rate on gym screens and records their effort. Because heart rate is health data, we only collect it with your explicit consent, and you can withdraw that consent at any time.
Who we are
Beatboss is a trading name of Maltings Consultancy Ltd, company number [company number], registered office [registered office address]. We are the controller of your personal data and are registered with the Information Commissioner’s Office under number [ICO registration number]. Contact us about your data at [privacy contact email].
What we collect
- Account: your email address, and the date you joined.
- Profile: full name, nickname, date of birth, home gym, and optionally your resting and maximum heart rate.
- Strap: the ID number your ANT+ heart-rate strap broadcasts, and when it was paired to you.
- Heart rate: your average and peak heart rate for each 30 seconds you are near a Beatboss box, and the sessions, zones and beats worked out from them.
- Consent and activity: when you gave or withdrew consent, and a record of significant account changes.
A Beatboss box hears every ANT+ heart-rate strap nearby. Heart-rate readings from straps nobody has paired are deleted within 24 hours and are never linked to a person.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your account and signing you in | Contract: providing the service you signed up for |
| Working out your zones, sessions and beats from your heart rate | Your explicit consent (heart rate is health data) |
| Showing your nickname, heart rate and zone on gym screens | Your consent, given separately |
| Keeping the service secure and preventing abuse | Legitimate interests |
We do not sell your data, use it for advertising, or make automated decisions with legal or similar effects.
Who can see it
- Anyone in a gym can see your nickname, live heart rate and zone colour on the screen, if you have consented to this.
- Gym staff can see the nicknames shown on their screens and manage their own gym’s members. They do not see your date of birth or heart-rate history.
- Our service providers, who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosting the website and app | Runs in London |
| Neon | Database | London |
| Resend | Sending sign-in emails | Ireland |
| Cloudflare | Domain, security checks and remote management of gym boxes | Global network |
Where a provider is based outside the UK, the transfer is protected by UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
| Data | Kept for |
|---|---|
| 30-second heart-rate readings | 12 months, then deleted. Your sessions and beats keep the totals. |
| Sessions and beats | Until you delete your account |
| Readings from unpaired straps | 24 hours |
| Deleted accounts | Removed immediately; gone from backups within 7 days |
| Inactive accounts | Deleted after 2 years with no sessions, with a warning email 30 days before |
| Record of account changes | 2 years |
| Sign-in emails held by our email provider | 30 days |
Your rights
You can, at any time:
- Withdraw consent on your account page. Withdrawing heart-rate consent unpairs your strap and stops capture; withdrawing screen consent hides you from screens.
- Download your data from your account page.
- Correct your details by editing your profile.
- Delete your account from your account page.
- Ask us for access to your data, or object to or restrict how we use it, by contacting [privacy contact email].
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Age
Beatboss is for people aged 18 and over. We do not knowingly collect data from anyone younger.
Cookies
We use one essential cookie to keep you signed in. Cloudflare’s security check may set its own essential cookies. We use no advertising or tracking cookies.
Changes
If we change this notice in a way that matters, we will tell you by email before the change takes effect.