Your data stays yours.

Last updated: 25 October 2026. The Dutch version of this policy is the leading one.

Who is responsible

Rowing Buddy is a product of Van Rijckevorsel Webdesign, based in the Alkmaar region of the Netherlands and registered with the Dutch Chamber of Commerce (KvK) under number 42027446. Van Rijckevorsel Webdesign is the controller for the processing described below. Questions? Email info@vanrijckevorselwebdesign.nl or call +31 6 57 46 14 45.

This website: rowingbuddy.app

The old address rowingbuddy.nl sends you on to this site. The website runs on Van Rijckevorsel Webdesign's own server in Germany, at Hetzner. Fonts and images come from that same server, so your browser does not connect to Google or anyone else. Only when you use the newsletter form at the bottom of the page does it load a spam check from Cloudflare (see Newsletter).

• No cookies. This website sets no cookies, no tracking or advertising cookies either.
• No third-party analytics. There is no Google Analytics or similar service from another party.
• Server log. Like every web server, ours keeps a technical log: your IP address, the time, the page requested and your browser. That is needed for security and to find errors, and it is deleted automatically after at most 15 days. We do not build profiles from it.

Counting visits

The site counts its own visits, anonymously. That happens without cookies and without other parties: a small script on this site sends a ping to the same server, which ends up in the server log. It records which page you viewed, which site you came from, your screen width and your time zone. We do not link that to your IP address to build profiles. In your browser the script only remembers whether you already viewed a page in this session (sessionStorage) and, if you choose so, that you do not want to be counted. Rather not be counted? Open rowingbuddy.app/?vrw_niet_tellen=1 once.

The app: My Rowing Buddy

The app lives at my.rowingbuddy.nl. You create an account yourself if you are 16 or older, or you join with a personal invitation from your crew. You can also train on your own, without a crew, start a crew yourself, or ask to join a crew with a crew code. The agreements are in the terms.

What the app keeps

• Your account: your name, your email address and your password. Your password is only stored hashed; nobody can read it.
• Your profile: height, weight, age if you enter it, your experience, your 2k time and the equipment in your gym. The app uses these to work out your programme, your starting weights and your zones.
• Your training: your sets (kilos and reps), your erg pieces and tests, your own trainings, your notes, and your heart rate if you enter it.
• Your races and your plan: the races you enter (name, date, distance and priority), and your answer when the app asks which race matters most. Also the training plan the app makes from them, with the changes to it and the earlier versions of your plan (at most 20).
• How often you train: how many trainings a week you can do and how you split them between water, strength and erg. If you set them, also the split per phase of your plan, and the weeks when you are away or can do less.
• How hard a training was: the number from 0 to 10 you give after a training (session RPE), how many minutes the training took and when you filled it in. If you skip the question, the app only keeps that you skipped it.
• No tests: whether you have the No tests setting switched on.
• Your club: the club you pick in Profile, or the name you type yourself under Other club. You do not have to. Only you and the admin of Rowing Buddy see your club, not your crewmates and not your crew's admin. In the Rowing Buddy figures your club only counts as a number.
• Your crew: which crew you belong to and since when, or that you train on your own. What you do in the crew (rower, cox or coach) and whether you are an admin. If filled in, your fixed seat in the boat (stroke, middle or bow) and your side (stroke side, bow side, both or sculling). And whether you have "My coach may see my sessions" switched on.
• A request to join: when you ask to join with a crew code, we keep your name, the crew, when you asked, whether the request is open, admitted, refused or withdrawn, and when and by which admin it was decided.
• Boats and line-ups: your crew's boats (name and type, such as 4+ or 8+) and the line-ups: who sits on which seat and who coxes, a name, whether a line-up is the current one or a possible one, and if set the crew training it belongs to.
• When you create your account: your year of birth (to check that you are 16 or older, or that a parent gave permission), your language, and which version of the terms you accepted and when.
• Premium: whether you have premium, until when, and where it comes from (given by the admin, or bought).

Your races, your plan, how often you train, your RPE numbers and minutes and the No tests setting are kept with your other training data in your account, on the same server, and are gone when you delete your account. The app uses them only for you: to make, show and adjust your own plan and advice. They do not go to your crew or your coach, not even when you have "My coach may see my sessions" switched on, and the admin of Rowing Buddy does not see them in the admin site. We do not sell them and do not use them for advertising.

Where it is stored

Accounts and training data are stored with Supabase, in a data centre in the EU (Frankfurt, Germany). Supabase processes that data on our behalf. The app itself, the pages your browser loads, runs on our own server at Hetzner in Germany, like this website. When you ask for a new password, that email is sent through the mail service Resend, and so is the newsletter.

Signing up and spam

The form for creating your own account is protected with Cloudflare Turnstile, so no fake accounts get created. Turnstile briefly checks your browser and connection (without advertising cookies) and only tells us whether you are a human. Cloudflare processes that data on our behalf. Turnstile is not used when you log in.

What your crew sees

• Where you are on the course and how far you are in the erg plan.
• Your erg tests, your strength tests and your erg records.
• Your results in crew trainings, in the leaderboard.
• While you row: your boat on the water, with distance, split, rate and watts. Those live numbers go straight to whoever is watching and are not stored separately.
• Your role (rower, cox or coach), whether you are an admin, and your seat and side if filled in. They show as a label next to your name.

A cox and a coach are not in the leaderboards and the erg records and have no boat on the course. They are in the crew with their role.

Your crew does not see your weight, height, BMI, age, sets, heart rate, notes, your own erg pieces or your private trainings, and neither does the admin. Only if you switch it on yourself does a coach see part of it (see below). The database is set up so that other members can technically only reach the crew part.

What the admin sees

An admin sees what the whole crew sees, and also the member list: for each member the name, email address, role, seat and side, when the account was created and when the member last logged in. An admin can change roles, make someone else an admin, change seat and side, deactivate members and manage the crew code. An admin does not see your weight, BMI, sets, heart rate, notes or nutrition.

What a coach sees

A coach does not see more than the crew by default. A coach can change members' seat and side and set up the boats. If you switch on My coach may see my sessions under Profile > Crew, a coach of your crew sees your last 30 finished sessions from your programme: the date, how long the session took, the exercises with your sets (kilos, reps, time or metres), your RIR and your note for the session. A coach never sees your weight, height, BMI, age, heart rate or nutrition, also not when you switch this on. You can always switch it off yourself. If you move to another crew, it is switched off again.

Starting a crew and joining with a crew code

From 16 you can start a crew yourself; you are then its admin. An admin can switch on a crew code, with a QR code, to have it scanned or put it up on the wall.

• Nobody can be found. There is no search and no list of crews. With a valid code you only see the crew's name, nothing else. The QR code only contains the address with the code, no personal data.
• Always approval. The code only gives the right to ask. Only when the admin lets you in do you see the crew and does the crew see you. Until then you train on your own, and you can withdraw your request.
• Before admission the admin only sees your name and when you asked. No email address and no other data.
• After admission you are a member: the crew sees what is listed above, and the admin sees you in the member list, with your email address. Your sessions and own trainings move to the crew, but stay private as described above.
• How long a code works: 30 days from when it was made. The admin can switch it off sooner or replace it with a new one; the old one then stops working at once.
• Guessing is pointless. To prevent guessing, the server counts wrong codes: at most 10 per quarter of an hour per account, and on the page before logging in per IP address. We only keep that IP address as a hash, not readable. We wipe those counts after a day.
• Under 16 you cannot join with a crew code or start a crew. You then only join through a personal invitation from your crew, with permission from a parent.

Boats and line-ups

The admin and the coach make the crew's boats and set up their line-ups: per boat one current line-up, and as many possible line-ups as they like.

• Admins and coaches see every boat and every line-up, with each member's seat and side as a hint.
• A rower or cox who is not an admin only sees the current line-up of the boat they sit in now, with who is in that boat. They only see a possible line-up if they are in it and the admin or coach made it visible to the crew; by default a possible line-up is for admins and coaches only.
• If you move to another crew, you leave every line-up of your old crew.

The PM5 and Bluetooth

When you connect your PM5, the monitor's numbers go over Bluetooth straight to the app on your phone. The app only asks for access to the PM5 you pick yourself, and does not use your location.

On your device

The app keeps a copy of your data in your browser, so it is fast and a workout is not lost when the signal drops for a moment. Using a club phone or someone else's? Log out after your training.

Nutrition: health data

Nutrition is coming to the app soon. What you eat, your weight and your nutrition settings are health data. That is why the app asks for your explicit consent when you first open Nutrition. That data stays private, per user: it never goes to your crew or your coach. You can export it and wipe it with one button.

Newsletter

You can sign up for the Rowing Buddy newsletter: a short email with every big update, and at least once a quarter. You do that in the app (under Profile, News, or with the tick box when you create an account) or with the form at the bottom of this website. You only get the newsletter if you choose it yourself: the tick box is never ticked for you, and the app asks existing users once. We only use your address for the newsletter and never send you anything from others.

• What we keep: your email address, the newsletter's language (Dutch or English) and whether you are signed up. As proof of your consent also the date, where you signed up (the app or the website) and which version of the wording you saw. If you unsubscribe, also the date and how.
• Confirm first: if you sign up on the website, you first get an email with a button to confirm your sign-up. Only then do we send the newsletter. If you don't confirm, nothing happens and your address is gone after two days. In the app your address is already confirmed by your account.
• Sent through Resend: the newsletter is sent through the mail service Resend, which keeps your email address and the language for that on our behalf and records whether the email was delivered. We do not track whether you open the newsletter or click its links.
• Unsubscribing: with the link at the bottom of every newsletter (one tap), in the app under Profile, News, or by emailing info@vanrijckevorselwebdesign.nl. After that you get no newsletter any more.
• How long: as long as you are signed up. After you unsubscribe we keep your address and the date for another 12 months, as proof that you unsubscribed. Then everything goes, at Resend too. If you delete your account, your sign-up goes at once, at Resend too.
• Against spam: the form on this website uses Cloudflare Turnstile, like the form for creating an account. Cloudflare's script only loads when you use the form.

What we do not do

• We do not sell your data and do not share it with advertisers.
• We show no advertising.
• We only use your data to make Rowing Buddy work.

Deleting your account and data

You delete your account yourself in the app: Profile > Delete account. Your account, profile, trainings, nutrition data and your place in the leaderboards are then gone at once. Crew trainings you made stay for your crew, with "Former member" as the maker. Your requests to join go too, and you leave the boat line-ups. If you are the last admin of a crew with members, the coach who has been in the crew longest becomes admin. If there is no coach, the rower who has been in it longest, and otherwise the cox. If it does not work in the app, send an email to info@vanrijckevorselwebdesign.nl from your account's email address, asking us to delete your account. We then delete your account, your profile, all your training data and your place in the leaderboards. You get a confirmation once it is done, within one month at the latest.

How long we keep data

We keep your account data and trainings as long as your account exists. After deletion they are gone. A sign-up you do not finish (email address not confirmed) is wiped after 7 days; a confirmed account without a finished sign-up after 30 days. A request to join a crew that stays open is removed 30 days after the request; an admitted, refused or withdrawn request 30 days after that decision. A crew code works for 30 days. The count of wrong crew codes is wiped after a day. On our current plan Supabase makes no daily backups; we only keep our own copy around big app updates, and wipe it within 14 days. The website's server log is wiped after at most 15 days.

Your rights

You may see your data, have it corrected or deleted. You can object, restrict a processing, and ask for your data in a file you can take with you. If you gave consent, for Nutrition for example, you can always withdraw it. Email info@vanrijckevorselwebdesign.nl; you get an answer within one month. If we cannot work it out together, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

The website and the app only use secure connections (https). Passwords are stored hashed, and in the database every user only sees what they are allowed to see.

Changes

When what we keep changes, for example when the iOS app or the Android app arrives, we update this policy. The date at the top shows when that last happened.