Privacy Statement for incyclist.com
At incyclist.com, we value your privacy and are committed to maintaining transparency about how we handle data.
Data collection & usage
Our app does not collect directly identifying information such as your name, email address or postal address. Your rides and settings are stored only on your own device. The exception is when you choose to connect a third-party service such as Strava or Intervals.icu and upload a ride. That upload is governed by the privacy policy of that service. Apart from this, we collect system logs that contain:
- IP address
- User agent (the app and operating system version your device reports)
- A unique user identifier
- A session identifier
- Data exchanged with your trainer and sensors (for example power, cadence, speed and heart rate), used only to verify that it was read and displayed correctly
- Usage of the app, such as screens visited and buttons clicked
These logs are collected to identify defects, improve the app’s performance, and identify future features. The IP address is also used to detect and block abuse of our servers. We process this data based on our legitimate interest in operating a stable and secure service (Art. 6(1)(f) GDPR).
Data retention & deletion
The system logs described above are automatically deleted after a maximum of 14 days. We do not share, sell, or use this data for any other purpose. Connection data processed by Cloudflare for video delivery is covered separately below.
Video delivery via Cloudflare
Some route videos are delivered on our behalf by Cloudflare, Inc. (USA), a content delivery provider that acts as our processor under Cloudflare’s Data Processing Addendum. When you stream or download such a video, Cloudflare receives the connection data of that request: your IP address, your user agent, the requested video file and timestamps. We use this solely to deliver the requested video efficiently and to keep delivery secure and stable, based on our legitimate interest (Art. 6(1)(f) GDPR). It is not used for advertising or profiling. Cloudflare keeps this connection data according to its own retention periods, which are separate from the 14-day deletion of our system logs (see Cloudflare’s privacy policy). Data may be transferred to the USA; this relies on Cloudflare’s certification under the EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as fallback. Because this processing rests on legitimate interest, you have the right to object to it at any time (Art. 21 GDPR) by contacting privacy@incyclist.com.
Your privacy matters
Since we do not collect directly identifying information, there is no need for user intervention to manage or delete data. You can object to processing based on our legitimate interest at any time (Art. 21 GDPR). If you have any concerns or want to object, feel free to contact us at privacy@incyclist.com.
By using incyclist.com, you acknowledge and agree to this privacy statement.