Training app privacy
This notice covers the Last Soul Ultra training app and training.lsu.stacksjs.com. The race website and race-entry accounts are separate. The operator is Last Soul IP GmbH, represented by Kim Gottwald and Alexander Krenzek. Contact mail@lastsoulultra.com about your data.
Updated October 29, 2026. The beta includes fictional review accounts and sample training. Do not treat those samples as an approved personal training prescription.
Data you choose to provide
The service stores your account name, email and a password hash; your training calendar, recorded workouts, effort, feedback and messages; and the profile and membership details needed for the features you use. It stores health measurements only when you enter them or authorize a connection. Device and account settings determine which features are available.
Apple Health and Android Health Connect permissions are optional. Only authorized data is read, such as workouts, heart rate, recovery, sleep, steps and weight. Location is used while you record an outdoor activity, including with the screen locked until recording stops. Voice feedback uses the microphone when you choose to record it.
Purpose and access
This information provides your training, analysis, workout recording, coaching, messages and account controls. Access depends on your account, organization, authorized coaching relationships and any sharing you enable. A coach you authorize can access the training and health information made available by that relationship. Share links expose the categories you select and can be revoked.
The training app has no advertising and does not sell health data or share it with advertisers or data brokers. The beta's sample accounts are synthetic; production HQ athlete records and sessions are not copied into this installation.
This installation and connected services
The application, its independent PostgreSQL database, uploaded files and private speech service run on a Hetzner server in Falkenstein, Germany. LSU uses its own database role, application encryption key and persistent storage. Voice feedback submitted for transcription is processed by this installation's local speech service.
Connections use HTTPS. Passwords are hashed, and stored provider credentials are encrypted by the application. These controls are not a claim that every health record or backup is individually encrypted, or that the service has obtained a security certification.
External health providers, AI services, payment processors and email delivery require their own configuration and authorization; they do not inherit HQ's credentials. If you connect an external service, its processing locations and policies also apply. Primary application storage in Germany does not mean that a service you connect processes all data there. Apple separately processes TestFlight installation, feedback and diagnostics under its own terms.
Your controls
You can disconnect providers, revoke share links, change app permissions in device settings, export supported training and health records, and delete your account in Settings. Disconnecting stops future access and does not itself erase records already imported. Account deletion removes the account's application data; it cannot erase copies another provider already received.
Contact the operator for access, correction, deletion, backup handling or the retention periods applying to your records, including any records the operator must retain. Operational logs may contain request and security information needed to run the service. This notice does not promise immediate deletion from every log, backup or external provider.