Duon Privacy Policy

Last updated: 26.09.2026

This Privacy Policy explains how Duon collects, uses, stores and protects personal data when you use Duon.

It also explains how we process training data from services you choose to connect to Duon, including Garmin Connect.

1. Who we are

Duon is a digital training and coaching platform that connects athletes and coaches through training programs, feedback, communication and, where available, training data.

Duon is operated by: Duon Performance AS
Organisation number: 938 525 595
Address: Kongens gate 2, 0153 Oslo
Email: tonje@duon.no

For questions about privacy or the use of your personal data, contact: tonje@duon.no

Duon Performance AS is the data controller for the personal data described in this Privacy Policy, unless otherwise stated.

2. Using Duon without connecting training data

You do not need to connect a fitness device or third-party fitness service to create or use a Duon account.

You can choose whether you want to connect services such as Garmin Connect, Strava, Apple Health or other supported services.

If you connect a service, Duon will receive the information you have authorized that service to make available to us.

You can disconnect a connected service at any time.

3. Information we collect

Depending on how you use Duon, we may collect the following types of personal data.

Account information

When you create and use a Duon account, we may collect information such as:

• name;
• email address;
• account and login information;
• profile information;
• sport and training preferences;
• training goals; and
• subscription and payment information.

Training programs and coaching

When you use Duon for training and coaching, we may process information such as:

• your training program;
• planned training sessions;
• completed training sessions;
• changes to your training program;
• feedback you provide about training;
• communication between you and your coach; and
• comments, assessments and adjustments made by your coach.

Connected training data

If you choose to connect a third-party fitness or health service, Duon may receive training, activity, health and fitness data made available through that service.

Depending on the service and the permissions you provide, this may include information such as:

• activities and workouts;
• duration and distance;
• pace and speed;
• heart rate;
• training load;
• recovery information;
• sleep or readiness information; and
• other fitness, activity or recovery metrics.

The exact information available to Duon depends on the connected service and the permissions you provide.

Technical information

When you use Duon, we may also collect technical information necessary to operate and secure the Service, such as device information, IP address, application version, log information and information about how the Service is used.

4. Garmin Connect

Connecting Garmin Connect to Duon is optional.

If you choose to connect your Garmin Connect account, you will be asked to authorize Duon’s access to Garmin device-sourced data.

After you have authorized the connection, Garmin may make data from your Garmin account and compatible Garmin devices available to Duon.

Duon only accesses Garmin device-sourced data after you have authorized the connection and only uses it for the purposes described in this Privacy Policy.

Garmin device-sourced data may be used to:

• display and organize your training activity in Duon;
• identify completed training sessions;
• compare planned training with actual training;
• identify patterns, changes and deviations in training;
• provide relevant information and analysis to your coach;
• support Duon’s analytical and AI-assisted coaching tools; and
• help improve Duon’s training programs, analytical methods and coaching tools by understanding how training is actually followed and completed.

Garmin device-sourced data is not sold or rented by Duon and is not used for advertising purposes.

Data received by Duon from Garmin is processed by Duon. It is not submitted to Garmin for processing on Duon’s behalf, and Garmin is not responsible for Duon’s processing of your personal data.

5. How we use your personal data

We use personal data to provide, operate and improve Duon.

This includes using information to:

• create and manage your account;
• connect athletes and coaches;
• provide training programs;
• record and understand completed training;
• enable communication between athletes and coaches;
• compare planned and completed training;
• provide coaches with relevant information and analysis;
• operate AI-assisted coaching functionality;
• understand how Duon’s training programs are used and followed;
• improve training programs, analytical methods and coaching tools;
• manage subscriptions and payments;
• provide customer support;
• maintain the security and reliability of Duon; and
• comply with applicable legal obligations.

We do not use your personal data for purposes that are incompatible with those described in this Privacy Policy without an appropriate legal basis and, where required, informing you or obtaining your consent.

6. Learning from training activity

An important part of Duon is understanding what happens in actual training, not only what was planned.

For example, Duon may analyze whether a planned session was completed, modified or skipped, whether the completed session differed from the plan, and how training develops over time.

Duon may use information about training activity across the platform to identify patterns and improve its training programs, analytical methods and tools for coaches.

This means that information about how users actually follow and complete training programs may contribute to improving Duon for other users.

We do not sell this information or use it for third-party advertising.

7. AI and automated analysis

Duon may use artificial intelligence and automated systems to analyze training information and support coaches.

These systems may:

• organize and summarize training information;
• identify patterns and deviations;
• compare planned and completed training;
• highlight athletes or sessions that may require attention; and
• provide insights or suggestions to coaches.

At this stage, AI is used to support coaches rather than independently coach athletes.

The coach remains responsible for interpreting the information and deciding how it should influence an athlete’s training.

Information about training behavior and outcomes may also contribute to improving Duon’s analytical methods and coaching support.

Where Garmin device-sourced data contributes to analysis or derived insights, Duon will identify Garmin as a contributing data source where required by Garmin’s applicable guidelines.

8. Sharing information with your coach

If you connect with a coach through Duon, the coach may receive access to personal data relevant to coaching you.

Depending on how you use Duon, this may include:

• your training program;
• planned and completed activities;
• training metrics;
• recovery information;
• feedback you provide;
• training history;
• progress; and
• analysis and insights generated by Duon.

This access is provided so that your coach can understand your training, provide feedback and adjust your training program.

Coaches are required to use information available through Duon for legitimate coaching purposes and not for unrelated purposes.

When your coaching relationship ends, the coach’s access through Duon will end in accordance with our applicable access and retention rules.

9. Legal basis for processing

Where the GDPR applies, Duon processes personal data only where we have a valid legal basis.

Depending on the processing activity, this may include:

Performance of a contract

Where processing is necessary to provide the Duon Service you have requested.

Consent

Where you have chosen to connect a third-party service or where consent is otherwise required for a particular type of processing.

Legitimate interests

Where processing is necessary to operate, secure and improve Duon, provided those interests are not overridden by your rights and interests.

Legal obligations

Where we need to process information to comply with applicable law.

Some fitness and health information may constitute special category personal data under applicable data protection law. Where required, Duon will obtain your explicit consent or rely on another legally permitted basis before processing such information.

10. Who we share personal data with

We do not sell your personal data.

We may share personal data where necessary with:

• your coach, where you have established a coaching relationship through Duon;
• technology and hosting providers that help us operate Duon;
• payment providers that process subscriptions and payments;
• analytics, security and infrastructure providers;
• professional advisers where necessary; and
• public authorities where disclosure is required by law.

Service providers processing personal data on our behalf are required to protect the information and process it only in accordance with our instructions and applicable law.

11. International data transfers

Some of the service providers used to operate Duon may process personal data outside Norway or the European Economic Area.

Where personal data is transferred internationally, Duon will use appropriate safeguards as required by applicable data protection law, such as an adequacy decision or approved standard contractual clauses.

More information about applicable safeguards can be requested by contacting us.

12. How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

Different types of information may have different retention periods.

Data received from connected services, including Garmin device-sourced data, will not be retained for longer than necessary for the reasonable operation of Duon unless you have expressly consented to longer retention or another lawful basis permits or requires it.

When information is no longer required, we will delete it or otherwise process it in accordance with applicable data protection requirements.

13. Disconnecting Garmin and other services

You can disconnect Garmin Connect or another connected service at any time.

When you disconnect a service, Duon will stop collecting new data through that connection.

If you withdraw your consent to Duon’s processing of Garmin device-sourced data or ask us to delete that data, we will delete the applicable Garmin data in accordance with Garmin’s requirements and applicable law.

You may also request deletion by contacting tonje@duon.no.

14. Deleting your Duon account

You can request deletion of your Duon account at any time by contacting tonje@duon.no.

When your account is deleted, we will delete or otherwise process personal data associated with your account in accordance with applicable data protection requirements.

Certain information may need to be retained for a limited period where required by law or where necessary to establish, exercise or defend legal claims.

15. Your rights

Depending on where you live, you may have rights regarding your personal data.

Under the GDPR, these may include the right to:

• access personal data we hold about you;
• correct inaccurate or incomplete information;
• request deletion of your personal data;
• restrict certain processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• receive certain personal data in a portable format; and
• lodge a complaint with a data protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact us at tonje@duon.no.

If you are in Norway, you also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

16. Security

We use appropriate technical and organizational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorized disclosure or access.

Access to personal data is limited to people and service providers who need it for legitimate purposes related to operating Duon.

No digital service can guarantee absolute security, but we continuously work to protect the information entrusted to us.

17. Children and young athletes

Duon may be used by athletes aged 13 and above.

If you are under 18, a parent or legal guardian must approve your use of Duon. This includes approving the creation of your account and accepting these Terms on your behalf.

Duon may ask for information needed to obtain and document this approval.

We take additional care when processing personal data relating to young athletes. Information will be provided in clear and age-appropriate language, and we will apply appropriate safeguards to the collection, use and sharing of personal data.

Users under 13 may not create a Duon account.

18. Changes to this Privacy Policy

Duon will continue to develop, and the way we process personal data may change as the Service develops.

We may update this Privacy Policy when necessary.

If we make material changes to how we collect or use personal data, we will provide appropriate notice and obtain consent where required.

The current version of this Privacy Policy will always be available at this URL.

19. Contact

If you have questions about this Privacy Policy, how Duon processes personal data or want to exercise your privacy rights, contact:

Duon Performance AS
Organisation number: 938 525 595
Address: Kongens gate 2, 0153 Oslo
Email: tonje@duon.no