Privacy Policy

1. Introduction

CycleThing (“we,” “our,” or “the App”), developed by John Slevinsky, is a native indoor cycling training application for iOS, iPadOS, and macOS. We designed CycleThing from the ground up so that your personal fitness, biometric, and workout data remains under your control.

This Privacy Policy explains what information CycleThing processes on your device, how optional system integrations (such as Apple Health, iCloud, Strava, and TrainingPeaks) operate, and the choices you have regarding your data.

2. Information Processed by the App

CycleThing does not require you to create an account, register an email address, or sign in to use the App. All core data is created and stored locally on your Apple device:

• Rider Profile Settings: Functional Threshold Power (FTP in watts), body weight (kg or lbs), unit preferences (metric or imperial), auto-pause/auto-start settings, and road surface simulation preferences.
• Bluetooth Sensor Telemetry: Real-time cycling power (watts), cadence (RPM), speed, distance, and heart rate (BPM) streamed directly from your connected Bluetooth smart trainer, power meter, cadence sensor, or heart rate monitor.
• Bluetooth Device Identifiers: Peripheral identifiers and device names of your previously paired cycling sensors, stored locally on your device solely to enable automatic reconnection when you open the App.
• Workout & Activity Files: Imported structured workout files and recorded indoor cycling activities stored locally on your device.

3. Apple Health Integration

If you choose to enable Apple Health integration in CycleThing’s Settings, the App requests permission via Apple’s HealthKit framework to:

• Write Data to Apple Health: Save completed cycling workouts, interval lap activities, active energy burned, cycling distance, per-second cycling power, heart rate, and cycling cadence.
• Read Data from Apple Health: Read body mass and workout status when authorized so your weight and saved workout history stay accurate.

You may grant or revoke CycleThing’s access to Apple Health at any time in your device’s Settings → Health → Data Access & Devices → CycleThing.

4. Apple iCloud Sync

When you are signed into iCloud on your iPhone, iPad, or Mac, CycleThing uses Apple’s native iCloud APIs to synchronize:

• Your rider profile and app preferences across your Apple devices;
• Your imported structured workouts; and
• Your recorded cycling activities.

This data is transmitted directly between your devices and your private Apple iCloud account using Apple’s encrypted infrastructure. The developer of CycleThing has no access to your private iCloud container or Apple ID credentials. You can disable iCloud access for CycleThing at any time in your device’s iCloud settings.

5. Optional Third-Party Fitness Integrations

CycleThing allows you to optionally connect third-party cycling and endurance training platforms, including Strava and TrainingPeaks.

• Authentication & Token Exchange: When you connect Strava using the built-in OAuth flow, `https://cyclething.app/api/strava/token` acts as a stateless OAuth2 token-exchange proxy that forwards your authorization code or refresh token to Strava without logging or persisting tokens or personal data. Resulting OAuth tokens are stored locally on your device.
• Direct Activity & Workout Transfers: Activity uploads and planned workout downloads occur directly between your device and the respective third-party platform’s official HTTPS API endpoints.
• Third-Party Privacy Policies: Once you upload an activity to a third-party service, that data is governed by the privacy policy and terms of that respective platform (Strava or TrainingPeaks). You can disconnect any integration in CycleThing’s Settings tab at any time, which immediately clears the stored tokens from your device.

6. Analytics, Tracking & Cookies

Neither the CycleThing application nor this marketing website uses third-party tracking cookies, advertising identifiers (IDFA), behavioral profiling, or third-party telemetry SDKs.

7. Data Retention, Export & Deletion

Because all data is stored locally on your device (and optionally in your personal iCloud container), you have complete control over retention and deletion:

• Exporting Data: You can export any recorded ride as a standard activity file using the Share button in the History tab.
• Deleting Individual Items: You can delete individual recorded rides in the History tab, delete imported workouts in the Workouts tab, or forget paired Bluetooth devices in the device sheet.
• Deleting All Data: Uninstalling CycleThing removes all local app data from your device, and you can manage or delete CycleThing’s iCloud storage folder from your Apple ID iCloud Storage settings.

8. Children’s Privacy & International Users

CycleThing does not knowingly collect personal information from anyone, including children under the age of 13 (or the applicable age of digital consent in your jurisdiction). Because no personal data is collected in developer databases, CycleThing natively respects data minimization principles under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and similar global privacy laws.

9. Changes to This Privacy Policy & Contact Us

We may update this Privacy Policy from time to time to reflect new features or regulatory requirements. Any updates will be posted on this page with an updated effective date.

If you have questions about this Privacy Policy or CycleThing’s privacy practices, please visit our Support Page or contact us at support@cyclething.app.