ridesycleOpen the appPrivacy policy
Last updated: 29 October 2026
This policy explains what ridesycle (ridesycle.com) does with your personal data. In short: we keep what is needed to run your account and your rides, we do not sell data, and we show no tracking ads.
Who is responsible
The controller of your data is [operator: name / company, address, company ID]. Contact: [contact e-mail].
Riding as a guest
As a guest you do not give us any personal data. Your settings, rides, routes and workouts are stored only in your browser on your device (browser storage). We cannot see them. Clearing your browser data deletes them.
With a free account
| Data | Why | Legal basis |
|---|---|---|
| E-mail address and password (stored only as a secure hash by our database provider) | Your login, confirming the account, password resets | Contract (Art. 6(1)(b) GDPR) |
| Profile: age (birth year), height, weight, sex, FTP, maximum heart rate, app settings | Realistic speed on climbs, your training zones, choosing your rider; the same settings on every device | Contract (Art. 6(1)(b) GDPR) |
| Rides: power, heart rate, cadence, speed, distance, time, route; your GPX routes and workouts | Your activity history, fitness charts, records and FIT downloads on every device | Contract (Art. 6(1)(b) GDPR) |
| Your choice to receive news by e-mail | Sending news, new routes and offers – only if you ticked the box | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
Heart rate and body data can count as health data. You give them voluntarily, they are optional (except weight, which sets your speed), and they are used only to calculate your ride and your zones in the app. By entering them you explicitly consent to this use (Art. 9(2)(a) GDPR); you can delete them at any time.
Bluetooth devices
Your trainer and sensors connect directly to your browser. Their readings are only stored as part of your rides as described above.
Who processes the data for us
- Supabase – database and login service for accounts.
- Cloudflare – hosting of the website and protection against attacks; it counts visits without cookies.
- E-mail delivery provider [e.g. Resend or Brevo] – sends the confirmation and password e-mails.
Some of these providers may process data outside the EU; in that case they are bound by the EU Standard Contractual Clauses or an adequacy decision.
Cookies and browser storage
We use no advertising or analytics cookies. The app uses your browser’s storage for your settings and rides, and – with an account – to keep you logged in. This is strictly necessary for the service you ask for. Sponsor banners in the app are images inside the game; they do not track you.
How long we keep data
Account data is kept while you have an account. When you delete the account (write to [contact e-mail]) your profile, rides and files are deleted within 30 days. Data in your browser stays until you delete it.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format (FIT files can be downloaded any time in the app), and you can object or withdraw consent. Write to [contact e-mail]. You can also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk) or the authority in your country.
Age
Accounts are for people aged 16 or over.
Changes
If this policy changes, we will update it here; important changes will be announced in the app.