Privacy Policy

1. Scope

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our websites, applications, services, communications, and integrations (collectively, the “Service”). It does not apply to third-party services, including Strava, payment processors, or linked websites, which have their own policies.

2. Information We Collect

Information you provide

• Account and contact information, such as name, email address, username, profile information, support communications, and preferences.
• Rider and equipment information, such as age range, sex or gender if provided, body weight, bicycle and component specifications, training zones, FTP/eFTP values, and other settings.
• Fitness, activity, and performance information you upload or provide, including FIT, GPX, TCX, CSV, and similar files; ride titles; dates and times; routes; GPS coordinates; elevation; speed; distance; cadence; power; heart rate; temperature; device data; sensor data; workout notes; and associated metadata.
• Content and inputs used to create analyses, including future event assumptions, route files, weather or environmental inputs, pacing choices, and saved plans.
• Billing and transaction information if paid features are offered. Card and bank information is generally processed by our payment processor, not stored by us.
• Any other information you choose to submit.

Information from integrations

If you connect Strava or another integration, we may receive information you authorize that provider to share, such as your account identifier, access and refresh tokens, activity lists, activity metadata, activity files, routes, photos or descriptions if within the permissions you grant, and connection status. We use this information only as permitted by you, the applicable provider, and applicable law.

Information generated or inferred by the Service

We may generate analytics, predictions, estimates, model outputs, training-load scores, power curves, heart-rate reconstructions, performance classifications, pacing recommendations, physiological estimates, equipment analyses, and similar derived data from information you provide or authorize us to access.

Information collected automatically

We may collect device, browser, operating-system, IP address, approximate location inferred from IP address, log, diagnostic, security, cookie, session, usage, and performance information. We may use cookies, local storage, pixels, SDKs, and similar technologies.

3. Sensitive and Location Information

Activity and device data may reveal precise location, routines, health-related or fitness-related information, and other sensitive information. Certain laws may treat some of this information as sensitive personal information, health data, or special-category data. By uploading activity files or connecting an integration, you direct us to process the included information to provide the Service.

The Service is not a healthcare provider, medical device, emergency service, insurer, employer, or regulated clinical service. We do not use the Service to make medical diagnoses or treatment decisions.

4. How We Use Information

We may use information to:

• Provide, operate, secure, personalize, maintain, and improve the Service.
• Import, store, organize, process, and analyze activity and profile data.
• Train, run, validate, improve, and troubleshoot models and algorithms.
• Generate requested insights, estimates, visualizations, recommendations, and saved analyses.
• Authenticate users and maintain integrations.
• Communicate with you about the Service, support requests, security matters, updates, and—where permitted—marketing.
• Monitor performance, prevent fraud, abuse, security incidents, and violations of our terms.
• Comply with law, enforce our rights, and protect users, the public, and our Service.
• Create aggregated, de-identified, or anonymized data for lawful business, research, statistical, product-development, and benchmarking purposes.

Where required by law, we rely on consent, performance of a contract, compliance with legal obligations, legitimate interests, or another valid legal basis.

5. How We Disclose Information

We may disclose information:

• To service providers that help us host, secure, operate, support, analyze, communicate about, or process payments for the Service.
• To connected third-party services at your direction or as needed to provide the connection.
• To professional advisers, insurers, auditors, investors, and parties involved in a merger, acquisition, financing, restructuring, insolvency, or sale of assets.
• To law enforcement, regulators, courts, or others where reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our agreements.
• With your consent or at your direction.
• In aggregated or de-identified form, where permitted by law.

We do not sell personal information for money. We do not share sensitive personal information for cross-context behavioral advertising without your consent. If our practices change, we will provide any required notice and choice.

6. Model Development

We may use your data and derived data to operate and improve the Service and its models. Where required by applicable law, we will obtain consent before using identifiable personal data for model training beyond what is necessary to provide the Service. We may retain and use aggregated, de-identified, or anonymized information after account deletion where legally permitted and where it no longer reasonably identifies you.

7. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account and integrations, meet legal obligations, resolve disputes, enforce agreements, protect security, and improve the Service. Files, cached data, backups, logs, and derived model artifacts may persist for a limited period after deletion or disconnection. We may retain de-identified or aggregated information indefinitely where permitted by law.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to opt out of certain targeted advertising, sale, sharing, profiling, or automated-decision practices where applicable.

You can disconnect an integration through the Service or the third-party provider. Disconnecting generally stops future imports but may not automatically delete data already imported. To exercise privacy rights, contact us at info@divergence.bike. We may request information to verify your identity and may limit or deny requests as permitted by law.

California residents may have rights under the California Consumer Privacy Act, including rights to know, delete, correct, and opt out of sale or sharing, if applicable. EEA, UK, and Swiss residents may have rights under applicable data-protection law and may lodge a complaint with their local supervisory authority.

9. International Transfers

We may process information in the United States and other countries where we, our service providers, or partners operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure; we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 13, or the minimum age required in their jurisdiction. Do not use the Service or provide personal information if you do not meet the applicable minimum age. We may delete information collected from children in violation of this policy.

12. Third-Party Services

The Service may link to or integrate with third parties, including Strava. We are not responsible for their privacy, security, availability, or practices. Your use of third-party services is governed by their terms and privacy policies.

13. Changes

We may update this Privacy Policy. We will post the updated version and revise the effective date. If required, we will provide additional notice or obtain consent.

14. Contact

Questions, requests, and complaints may be sent to: