Privacy Policy

1. What we collect

• Account data — email address, display name, password (stored as a hash by our authentication provider).
• Training data — rides (time, power, cadence, heart rate, speed, distance), routes, workouts, and rider settings (weight, FTP, heart-rate zones) that you choose to sync.
• Operational data — sign-in events and basic service metrics used to keep the service healthy. We do not use advertising trackers or analytics cookies.

2. Where it lives

Data is processed by a small set of infrastructure providers acting on our behalf: Supabase (database and authentication), Cloudflare (hosting, content delivery), Google Cloud (route computation), and Resend (transactional email such as sign-up confirmations). Each receives only what its role requires.

3. What we never do

We do not sell your data. We do not show ads. We do not share training data with third parties except the processors above, or where the law requires it.

4. Local storage

The app keeps a cache of your rides, routes and preferences on your device (browser storage) so it works instantly and offline. Clearing your browser's site data removes this cache; your cloud copy remains.

5. Optional integrations

If you later connect Strava or similar services, data is shared with them only at your explicit request, and you can disconnect at any time.

6. Retention and deletion

Your data is retained while your account exists. Email [email protected] to access, export, correct or delete your data; deletion removes your account and synced training data within 30 days, except records we must keep by law.

7. Contact

Data controller: DATV Holdings · [email protected]