Privacy Policy

1. Scope

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our websites, applications, services, communications, and integrations (collectively, the “Service”). It does not apply to third-party services, including Strava, payment processors, or linked websites, which have their own policies.

2. Information We Collect

Information you provide

• Account and contact information, such as name, email address, username, profile information, support communications, and preferences.
• Rider and equipment information, such as age range, sex or gender if provided, body weight, bicycle and component specifications, training zones, FTP/eFTP values, and other settings.
• Fitness, activity, and performance information you upload or provide, including FIT, GPX, TCX, CSV, and similar files; ride titles; dates and times; routes; GPS coordinates; elevation; speed; distance; cadence; power; heart rate; temperature; device data; sensor data; workout notes; and associated metadata.
• Content and inputs used to create analyses, including future event assumptions, route files, weather or environmental inputs, pacing choices, and saved plans.
• Billing and transaction information if paid features are offered. Card and bank information is generally processed by our payment processor, not stored by us.
• Any other information you choose to submit.

Information from integrations

If you connect Strava, we receive only the account and activity information that Strava makes available under the permissions you grant, including connection status, activity metadata, and activity streams used to provide the requested import and cycling tools. We use Strava Data only to operate the connected features for the athlete who authorized the connection.

Information generated by the Service

We may generate the immediate calculations and displays necessary to provide the cycling tools you request. We do not use Strava Data or data derived from Strava Data to train, evaluate, improve, or operate machine-learning or other AI systems.

Information collected automatically

We may collect device, browser, operating-system, IP address, approximate location inferred from IP address, log, diagnostic, security, cookie, session, usage, and performance information. We may use cookies, local storage, pixels, SDKs, and similar technologies.

3. Sensitive and Location Information

Activity and device data may reveal precise location, routines, health-related or fitness-related information, and other sensitive information. Certain laws may treat some of this information as sensitive personal information, health data, or special-category data. By uploading activity files or connecting an integration, you direct us to process the included information to provide the Service.

The Service is not a healthcare provider, medical device, emergency service, insurer, employer, or regulated clinical service. We do not use the Service to make medical diagnoses or treatment decisions.

4. How We Use Information

We use information to provide, secure, maintain, and support the Service; authenticate users and maintain integrations; import and display the Strava data needed for the connected features; respond to support and security requests; and comply with law. We do not use Strava Data for targeted advertising, sale, third-party marketing, analytics, benchmarking, aggregation, or product/model improvement.

Where required by law, we rely on consent, performance of a contract, compliance with legal obligations, legitimate interests, or another valid legal basis.

5. How We Disclose Information

We disclose information only to service providers that host, secure, or operate the Service on our behalf, to a connected service at your direction, or where required by law. We do not sell, license, rent, market, or make Strava Data available to third parties, advertisers, data brokers, AI providers, or model developers. We do not use Strava Data for advertising or targeted advertising.

6. Retention and Deletion

We retain Strava Data only while it is needed to provide the connected feature and only for the authorized athlete. You can withdraw consent and request deletion at any time by selecting “Disconnect Strava and delete its data” in Connections & account, or by contacting info@divergence.bike. The disconnect flow revokes the connection when possible and permanently deletes the connection credentials, imported Strava activities, segments, routes, and related derived caches and rider artifacts. We show an in-product confirmation when deletion completes.

If you revoke access in Strava, use the in-product disconnect control or contact us so that we can delete the affected Strava Data. We do not retain Strava Data or derivatives as anonymized, aggregated, research, benchmarking, or model-training data after deletion.

7. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may request access to data we collected through Strava by contacting info@divergence.bike.

Strava may collect usage data about its API materials as described in its privacy materials. California residents may have rights under the California Consumer Privacy Act. EEA, UK, and Swiss residents may have rights under applicable data-protection law and may lodge a complaint with their local supervisory authority.

9. International Transfers

We may process information in the United States and other countries where we, our service providers, or partners operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure; we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 13, or the minimum age required in their jurisdiction. Do not use the Service or provide personal information if you do not meet the applicable minimum age. We may delete information collected from children in violation of this policy.

11. Third-Party Services

The Service may link to or integrate with third parties, including Strava. Your use of Strava is governed by Strava’s terms and privacy policy. Where this policy concerns Strava Data, the applicable Strava terms control in the event of a conflict.

12. Changes

We may update this Privacy Policy. We will post the updated version and revise the effective date. If required, we will provide additional notice or obtain consent.

13. Contact

Questions, requests, and complaints may be sent to: