Privacy Notice

Last Updated On: 14th May 2026

My Whoosh Technology Services LLC (hereinafter referred to as “we”, “us”, “our”, “company”, “MyWhoosh”), based in Abu Dhabi, UAE is a limited liability company and the ‘data controller’ in respect of your personal information. We specialize in developing and maintaining a virtual cycle platform (MyWhoosh) through our applications (Apple, Android, Windows and MacOS) and website. Our services encompass the application, its services, features, etcetera (collectively referred to as “Services“, “App”) and www.mywhoosh.com (“Site”).We are committed to protecting your privacy and handling your personal data in compliance with applicable data protection and privacy laws in the jurisdictions where we operate and where you are located, including but not limited to General Data Protection Regulation (GDPR) where applicable. By using our Services, you agree to the collection and use of your information as described in this Privacy Notice.

We understand the importance of protecting the personal information of our customers (hereinafter referred to as “Customer”, “you”, “user”, “Data Subject”). This Privacy Notice outlines how we process any personal information collected from you, third parties, or provided by you. We encourage you to read this Privacy Notice thoroughly so that you are familiar with our practices concerning your personal information, privacy, and security while using MyWhoosh.

For general queries, please use the “Contact Us” section of the website or App and concerns related to data privacy, please reach out to the MyWhoosh Data Protection Office at privacy@mywhoosh.com.

WHAT PERSONAL INFORMATION WE COLLECT

We collect the following categories of personal information:

HOW AND WHEN WE COLLECT YOUR PERSONAL INFORMATION

We collect your personal information when you:

Participate in an event, programme, investigation, verification process, or Anti-Doping / Integrity Testing process in connection with MyWhoosh racing. We may also collect information about you from third-party sources, such as from your use of other websites/applications, the use of devices and hardware to access and use the services and application, from tracking and rider profile platforms (e.g., Strava), and from social media platforms (e.g., Instagram, Facebook, and any social rider communities and events.) In such cases, we ensure that the proper legal basis and/or prior consent is in place before collecting such information. It is important to note that you have control over your access and consent for each of these platforms and companies. You can revoke consent at any time if you choose not to have the data controller process and share your information.

WHY WE COLLECT YOUR PERSONAL INFORMATION

MyWhoosh uses the data collected from the users and visitors as well as other relevant individuals to maintain our website and supply relevant support and services to them.

The personal information we gather and/or otherwise receive is processed for the following purposes:

We may also match personal information that you provide to us directly with other information about you obtained from or held by third-party sources (such as social media, training, and fitness platforms). This may include your contact details, demographic data, your social media interactions, preferences, geographic location, and age or age range. We may use this personal information to predict and analyze your performance or to tailor and show advertisements more relevant to you either on our website and/or application or on third-party websites (including social media platforms).

Automated Decision-Making: MyWhoosh may use automated processing and artificial intelligence (AI) in limited ways to operate and enhance the Services; For participants in MyWhoosh Cycling Esports event, MyWhoosh may use AI-assisted system which analyses historical performance data, which may include heart rate, weight, and race history collected over time to assess performance capabilities, assign race categories, and support results validation. These assessments may have a significant effect on your competition eligibility, categorization, and results. In general, automated decisions that could significantly affect you (such as banning an account for misuse) involve human review or are made under our Terms of Service enforcement framework.

No Legal or Profound Impact without Human Oversight: We do not make solely automated decisions that produce legal effects or similarly significant impacts on you without human involvement, unless such processing is necessary as part of the Service you request (like participating in an event to identify and monitor your participation) or we have your explicit consent, consistent with applicable data protection laws in your jurisdiction. This means any decision significantly affecting your rights including but not limited to participating in events, height and weight verification, will involve appropriate human review. You also have the right to object to any automated decision-making or profiling that you feel is unjustified (see Your Rights below).

LEGAL BASIS FOR COLLECTING AND PROCESSING YOUR PERSONAL INFORMATION

We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:

For example, we may need to process your personal information to provide you with medical assistance in an emergency.

We will always take steps to ensure that the processing of your personal information is fair and lawful, and that it does not unduly affect your privacy. You have a number of rights in relation to your personal information, including the right to access, correct, and delete your personal information. You can exercise these rights by contacting MyWhoosh Data Protection Office at privacy@mywhoosh.com.

HOW LONG WE STORE YOUR PERSONAL INFORMATION

We take diligent measures to ensure that the personal information you provide to us is retained only for as long as necessary for the purpose for which it was collected.

 Where applicable, certain testing-related records may also be retained, by MyWhoosh or by the Service Provider on MyWhoosh’s behalf, in accordance with the retention periods set out in the WADA International Standard for the Protection of Privacy and Personal Information (ISPPPI) in force at the time, contractual obligations, or other legal requirements.

We may keep a record of our correspondence with you, such as in the case of a complaint, for as long as is necessary to protect us from potential legal claims. If we have gathered your personal information based on your consent and lack any other lawful basis to continue processing, and if you subsequently withdraw your consent by writing to us at privacy@mywhoosh.com, requesting deletion, we will promptly delete your personal information.

Please be aware that in the event of your unsubscribing from our marketing communications, we will retain a record of your email address to ensure that no further marketing emails are sent to you in the future.

This Section Pertains to Users in the UK and/or the EEA

The personal information we collect may be transferred to, and stored at, a destination outside the EEA or the UK, including countries that have less strict, or no data protection laws compared to those in the EEA or the UK. Whenever we transfer your information in this manner, we will take steps that are reasonably necessary to ensure adequate safeguards are in place to protect your personal information and to ensure it is treated securely and in accordance with this Privacy Notice. When relevant, we rely on approved data transfer mechanisms (such as standard contractual clauses) to ensure your information is subject to adequate safeguards in the recipient country. If you are situated in the UK or the EEA, you can reach out to us at privacy@mywhoosh.com to request a copy of the safeguards we have implemented to protect your personal information and privacy rights under these circumstances.

PERSONAL INFORMATION OF CHILDREN

We are deeply committed to safeguarding the privacy of children and ensuring compliance with applicable laws pertaining to the collection and processing of the personal information of children. We do not intentionally or knowingly collect any personal information related to children or individuals under the age of 6, nor do we encourage their usage of the website and application. If you have not reached the age of 6, you are prohibited from using the website and application unless supervised by an adult. By accessing the MyWhoosh website and application, you affirm and guarantee that you are 6 years of age or older. We hold no liability for any unsolicited information provided by you, and you consent to the usage of such information in accordance with this Privacy Notice.

For users between the ages of 6 and 18, we may require verifiable written consent from their parents or guardians through a consent verification process. When a child attempts to register for our services, the parent will receive an email clearly specifying the categories of personal data that will be collected from the children during registration and use of the services, including but not limited to name, email address, age, gender, height, and weight; and Inform the parent or guardian that their supervision is required during the setup and configuration of any devices or hardware associated with the children’s use of the services. Parental consent is required to activate the child’s account. If the company becomes aware that a child under the age of 6 has given their personal information, MyWhoosh reserves the right to promptly delete the information collected from its records. We remain steadfast in our commitment to safeguarding the privacy needs of children and encouraging parents and guardians to actively participate in the online activities and interests of their children.

If the winner of any premium race event is between the ages of 6-18, we may require either (a) consent from their parents or legal guardian or (b) the personal (financial) information from their parents or legal guardian before awarding them the prize money. Such personal information will be stored for audit and legal record purposes.

For registered users aged between 6 and 18, we may share account-related information, including usage data and activity logs, the date of consent verification, and the parent/guardian’s email address with their parent or legal guardian in accordance with applicable data protection laws. This is to ensure transparency, compliance, and the safety of children users on the platform.

Privacy Provisions for Child Users (Aged 6 to 18)
We are committed to protecting the privacy of younger users and ensuring compliance with applicable child data protection laws. For users aged 6 to 18, the following additional privacy measures apply:

PARENTAL CHOICES AND CONTROLS

At any time, parents can refuse to permit us to collect further personal information from their children in association with a particular account and can request that we delete from our records the personal information we have collected in connection with that account. Please keep in mind that a request to delete records may lead to a termination of an account, membership, or other service.

Parents can request access to and delete their child’s personal information by contacting us on support@mywhoosh.com. A valid request to delete personal information will be accommodated within a reasonable time.

When your child turns 18, he or she will be eligible to independently manage his or her account which shall be considered as an account of an adult.

SECURITY MEASURES

MyWhoosh is committed to safeguarding and protecting personal information. We have implemented and maintained appropriate technical and organizational measures to ensure a level of security that is fitting to protect any personal information provided to us. This includes protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal information during transmission, storage, and processing.

On our website and application, you may find links to third-party websites and services, including our business partners and advertisers. It is important to note that these third-party entities have their own privacy notices, and we do not bear any responsibility or liability for them. We strongly advise reviewing the privacy notices of these third-party websites or services before submitting any personal information to them.

INFORMATION SHARING

We prioritize the security and privacy of your personal information. In certain circumstances, we may share your personal information within our group of companies, which includes our subsidiaries. Additionally, we may share your personal information with our suppliers, business partners, and service provider(s). This sharing may occur, for example, with providers of fitness tests and other functionalities, as well as entities helping us in marketing, advertising, and delivering our services to you. These companies do not have any independent right to further share or disseminate this information.

We may also share your personal information as follows:

a. FOR COMMUNITY BUILDING: Given our emphasis on bringing your fitness community to your home, we share specific information with other users when you connect with them. For instance, when you challenge someone or engage in a conversation in the application’s chat section. The credentials made available to other users include your name, gender, age, height, weight, and the country from which you are operating. No further information is shared with the community unless you explicitly enable it.

b. FOR SOCIAL SHARING: MyWhoosh facilitates connections with various social fitness apps such as Today’s Plan, Training Speaks, and Strava, along with other social networking apps. When you connect your MyWhoosh account with these apps, some of your information will be shared with them. You maintain control over this information, as the decision to link your MyWhoosh account with such apps is entirely yours. Once connected, you can share your training records, gaming feats, and similar information on these apps.

c. USE OF PRIVATE CHAT FEATURE: Users are advised not to share personal or sensitive information, avoid misconduct, and refrain from sharing critical data while using the Private Chat feature. Misuse or violations may result in action per our Terms and Conditions. Please note, the Private Chat feature will not be available for users between the ages of 6 to 18, in line with our safety and compliance policies.

d. FOR BROADCASTING RACES: Subject to your explicit consent, we may share your personal information, including actual and generated workout details and in-app activity data, with broadcasters and other content platforms. This sharing enables them to broadcast, stream, or otherwise provide live data when you participate in our races.

e. OTHER: We may share your personal information with affiliates, partners, service provider(s), group entities, and non-affiliated companies under various circumstances, including:

YOUR RIGHTS

You have certain rights in relation to the personal data we store about you. These rights are derived from global data protection standards and may vary depending on your country of residence.

A. General Rights (Applicable to All Users)

All users are entitled to the following rights:

B. Additional Country-Specific Rights

Depending on your country of residence, you may have additional rights under local laws, including but not limited to:

To exercise any of your rights please contact us at privacy@mywhoosh.com. Please note that before responding to any requests to exercise your rights, we will require you to provide us with proof of identity and your address. We must respond to a request by you to exercise those rights without undue delay and in any event within one month (although this may be extended in certain circumstances with prior notification to the requestor).

You will have control over changing your account particulars, including your height, weight, and other profile information through your profile settings. Similarly, you will also have the choice to unsubscribe from promotional emails by clicking on the “unsubscribe” link in each email. You may, however, still receive non-promotional emails, for instance, of updates available, password changes, etcetera. You may also opt out of push notifications generated by the App by changing your device settings. Please note that even after you remove certain information, we may still retain some of it to fulfill certain legal requirements in accordance with our data retention policy.

INTERPRETATION

This Privacy Notice is written in English and supersedes any other translated version of the same document or the meaning it may imply.

CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time. Where we make material changes to how we collect, use, share, store, or otherwise process your personal data — and in particular where the changes affect sensitive personal data or children’s data — we will take reasonable steps to bring those changes to your attention when they take effect, for example by email to your registered address, in-app notice, or a prominent notice on the MyWhoosh website or Services. The “Last Updated” date at the top of this Privacy Notice shows when this Notice was most recently revised.

ANTI-DOPING / INTEGRITY TESTING — SUPPLEMENTARY PRIVACY INFORMATION

This section sets out how MyWhoosh handles personal data in connection with its Anti-Doping / Integrity Testing programme. It supplements, and should be read together with, the rest of this Privacy Notice. Where this section addresses a topic also covered elsewhere in the Notice (for example, retention or international transfers), this section governs in relation to testing-related personal data.

  1. Scope: MyWhoosh operates an Anti-Doping / Integrity Testing programme for certain races, events and related verification processes. MyWhoosh does not conduct Anti-Doping or Integrity Testing on minors. For these purposes, a minor is a person who has not reached the age of majority or the minimum age for participation in anti-doping testing under the applicable law of the rider’s jurisdiction of residence (or, where higher, of the event location). The provisions of this section apply only to riders who are not minors.
  2. Roles: MyWhoosh has appointed International Doping Tests & Management AB, with its place of business at Stockholm, Sweden (the “Service Provider”), to administer Anti-Doping / Integrity Testing on MyWhoosh’s behalf. The Service Provider acts solely as a data processor on MyWhoosh’s documented written instructions under a Data Processing Agreement (“DPA”) with MyWhoosh and has no independent authority to determine the purposes for which testing-related personal data is processed, accessed or disclosed. MyWhoosh does not itself perform sample collection or laboratory analysis. MyWhoosh retains sole authority and responsibility for establishing the testing programme and test distribution plan, determining the number and type of tests, selecting riders for testing (whether by podium, random, targeted or other criteria), determining the timing and authority basis for testing, and determining any contractual, sporting, prize-related or disciplinary consequences that may follow from a refusal, failure to comply or adverse analytical finding. The Service Provider’s services support MyWhoosh’s programme under cycling esports rules & regulations and do not, by themselves, constitute a WADA Code-compliant results-management or sanctioning programme; any disqualification, prize withholding, contractual remedy or internal discipline imposed by MyWhoosh is determined by MyWhoosh under those rules and terms.
  3. Categories of testing-related personal data: Testing-related personal data is maintained by the Service Provider as custodian on MyWhoosh’s behalf and is accessed or released only on MyWhoosh’s instructions, or as required by applicable law.
    • Such data may include:
    • identifying and registration information about the rider;
    • declared location / whereabouts information used for the test (which may be different from your billing or registered address);
    • identity-verification information used at collection (including government-issued ID details);
    • test notification, location, date and procedural records;
    • specimen-collection documentation relating to urine, dried blood spot (DBS) and/or venous blood specimens (such as specimen identifiers, volumes and collection conditions), but not the biological specimens themselves;
    • chain-of-custody records; laboratory analytical reports;
    • Therapeutic Use Exemption (TUE) outcomes and, where reasonably necessary, supporting documentation; and,
    • the status or outcome of a testing process (for example, negative result, refusal, non-compliance, adverse analytical finding, or other programme status).
  4. Access and use by MyWhoosh: In routine programme administration, MyWhoosh’s has access to the status or outcome of the test together with the limited administrative information needed to identify the rider and the relevant event. MyWhoosh may access additional underlying records – such as chain-of-custody documentation, laboratory or technical reports, identity – verification information used at collection, TUE submissions and supporting documents, and correspondence with the Service Provider – where MyWhoosh determines this is necessary for results management, dispute or appeal handling, audit, the establishment, exercise or defence of legal claims, or compliance with legal obligations. Access is limited to MyWhoosh designees identified in writing to the Service Provider. Any underlying health or medical information generated in connection with a testing process is maintained by the Service Provider on MyWhoosh’s behalf as part of the testing record, and MyWhoosh accesses such information only on a strict need-to-know basis and only where MyWhoosh determines it is necessary.
  5. Purposes of processing: MyWhoosh processes testing-related personal data for: administering and enforcing MyWhoosh’s Anti-Doping / Integrity Testing programme (including testing selection, rider notification, location confirmation, sample collection logistics, laboratory coordination, results management, TUE review, and hearing or appeals handling); contractual and sporting enforcement; safeguarding the integrity of sport and protecting clean competition; the establishment, exercise or defence of legal claims; and compliance with legal and regulatory obligations.
  6. Lawful basis (special-category data): Where MyWhoosh processes health-related personal data in connection with Anti-Doping or Integrity Testing (including specimen-collection data, laboratory analytical results, and TUE-related medical information), MyWhoosh relies on one or more of the following lawful bases available under applicable data protection laws in your jurisdiction: your explicit consent; reasons of substantial public interest in safeguarding the integrity of sport and protecting clean competition, on the basis of applicable law and our contractual rules; and the establishment, exercise or defence of legal claims. Where local health-data legislation applies to any element of this processing, MyWhoosh will comply with the additional requirements imposed by those frameworks to the extent applicable.
  7. Sub-processors: The Service Provider may engage sub-processors to support the Services (for example, doping control personnel, laboratories, IT hosting and software providers). Any such sub-processors are engaged on MyWhoosh’s general authorisation under the DPA and are bound by written data protection terms that are no less protective than those between MyWhoosh and the Service Provider.
  8. Sharing: For Anti-Doping / Integrity Testing and related competition integrity administration, MyWhoosh may share relevant personal data with the Service Provider, personnel responsible for hearing or appeal, technology providers, secure hosting providers, and legal or compliance advisers, strictly on a need-to-know basis and only to the extent necessary for the relevant programme purpose. Unless required by law or necessary for administration or enforcement of our rules, MyWhoosh does not publicly disclose detailed laboratory documentation, broader medical records, or TUE supporting documents. Where publication is considered necessary or appropriate under our rules and applicable laws, MyWhoosh may disclose the outcome or status of a case, such as annulment, disqualification, suspension, refusal, non-compliance, or other sporting consequence. Any publication will be limited to information reasonably necessary for competition integrity, transparency, rule enforcement, or legal compliance.
  9. International transfers: The Service Provider and its sub-processors may be located outside the UAE, and personal data processed in connection with the testing programme may therefore be transferred to such jurisdictions. Where personal data is transferred outside the UK/EEA or another jurisdiction with transfer restrictions, MyWhoosh will use an appropriate transfer mechanism and safeguards as required by applicable law, including where relevant adequacy decisions, standard contractual clauses, or equivalent mechanisms. On request, MyWhoosh may provide further information about the categories of recipients and the safeguards used for relevant transfers, subject to confidentiality and security limitations.
  10. Retention: MyWhoosh may retain testing-related personal data for a minimum period as per applicable laws, guidelines, rules or regulations from the conclusion of the relevant event or process, and for longer where necessary for verification, results management, appeals, prize administration, legal claims, regulatory compliance, audit requirements, mandatory retention obligations, or other lawful purposes described in this Notice. Certain testing-related records may also be retained, by MyWhoosh or by the Service Provider on MyWhoosh’s behalf, in accordance with the retention periods set out in the WADA International Standard for the Protection of Privacy and Personal Information (ISPPPI) in force at the time, contractual obligations, or other legal requirements.
  11. Your rights: To exercise any of your rights in relation to Anti-Doping / Integrity Testing data maintained by the Service Provider on MyWhoosh’s behalf, please contact us at privacy@mywhoosh.com. MyWhoosh will direct the Service Provider as required to give effect to your request, subject to applicable legal and ISPPPI retention requirements.
  12. Further information: Further operational details regarding Anti-Doping / Integrity Testing, rider responsibilities, and sporting consequences are set out in the applicable MyWhoosh Cycling Esports Rules & Regulations and event materials.

OUR OFFICIAL PARTNERS

Bikes

  • Colnago
  • BMC
  • Giant
  • Liv
  • ENVE
  • Van Rysel
  • Ventum
  • Look
  • Chapter2

Garage Items

  • Pissei
  • Ekoi
  • Abus
  • HJC
  • Quoc
  • 4Gold
  • MET
  • Velokicks
  • Scicon

Trainers

  • Elite

Partners

  • Union Cycliste Internationale (UCI)
  • Supertri

Team Partners

  • UAE Team Emirates
  • UAE Team ADQ