Data & access

Privacy policy

Effective November 5, 2026

PM5 Workout Archive is personal-use software operated by Xander North. It reads workout data from a Concept2 PM5 through an owner-operated Raspberry Pi and uploads private archive files to the owner's Google Drive. There is no public signup service.

Data the app handles

The collector saves raw Bluetooth workout samples and available metadata. These may include workout times, elapsed time, distance, power, stroke rate, pace, and interval or rest metrics. The exact fields depend on what the PM5 makes available during the workout.

The uploader uses Google OAuth authorization credentials and tokens to upload archive files. Tokens are stored on the owner's Pi or in private setup files used to configure the uploader. They are not intended for publication on this website or in the public source files.

Google Drive access

The app requests the https://www.googleapis.com/auth/drive.file scope. This permission covers files created by the app and files the owner explicitly selects for use with the app; it does not grant general access to all Drive files. The app uses this access to create and manage its private archive uploads.

Google stores uploaded files in the owner's Google Drive and processes them under Google's own terms and privacy policy. The app does not make workout files public or provide public workout sharing.

Use and disclosure

Workout data and Google authorization are used to collect, preserve, and upload the owner's workout archive. The app does not sell personal data, use it for advertising, or include third-party analytics. It does not transfer workout data to another service beyond the owner's configured Google Drive destination.

Retention and deletion

Local records and Drive uploads are retained until the owner deletes them. Deleting an uploaded file from Drive does not delete the local record or other backup copies. To remove the archive fully, delete the relevant local files, Drive files, and any separate backups. Google Drive trash and retention behavior may affect when deleted uploads are permanently removed.

Revoking authorization

The owner can revoke the app's Google access through Google Account connections. Revocation stops future authorized Drive operations once access is no longer valid; it does not delete existing uploads or local records. Local authorization files can also be removed from the Pi and any private setup copies.

This website

This static website has no signup form, advertising, third-party analytics, or embedded third-party scripts. Hosting providers may process ordinary request information, such as an IP address and browser details, to deliver and protect the website.

Questions and changes

Contact xander.j.north@gmail.com with questions about data handling. Changes to this policy will be posted here with an updated effective date.