Privacy Policy

As of: June 2026

This policy describes how the cyclepilot.app website and the CyclePilot app (hereafter "the app") handle your data. Core principle: CyclePilot works without a user account and without central data collection. Your training, ride and health data stay on your device and in your personal iCloud — we store none of it. For two optional features we operate minimal relay services (waitlist and Strava notifications, see below); these never process your ride or health data.

Controller

Dennis Zehetmayer
Contact: info@cyclepilot.app

This website (cyclepilot.app)

The website serves solely to provide information about the app and to sign up for early access. It contains no cookies, no tracking and no analytics or advertising services. All content (fonts, images) is loaded directly from this website, not from third parties.

• Server log files: When the page is accessed, the hosting provider processes technically necessary access data (including IP address, time, file requested, browser type) in order to deliver the page and keep operation secure. The legal basis is our legitimate interest in stable, secure operation (Art. 6(1)(f) GDPR). These logs are not combined with other data.
• Early access / waitlist: You can submit your email address via the waitlist form. It is stored in a database hosted by Cloudflare (USA) solely for the purpose of notifying you at app launch (Art. 6(1)(b) and (f) GDPR). We use the address only for that and do not share it; you can request deletion at any time by emailing info@cyclepilot.app.

What data does the app process?

• Training and ride data (completed and planned rides, distance, duration, elevation gain, speed, routes): calculated locally and stored in your iCloud.
• Settings (goals, weather limits, training parameters): locally or in your iCloud.
• Health data from Apple Health (see below), only if you enable it.
• Strava activities (see below), only if you connect Strava.
• Calendar data (see below), only if you grant calendar access.

We do not collect, transmit or sell this data to us or to third parties. There is no tracking and no advertising; no analytics or advertising SDKs are embedded.

iCloud sync

So that your data stays in sync across your devices (iPhone, iPad, Mac), it is stored in your personal iCloud storage. Processing in iCloud is carried out by Apple under Apple's privacy terms; we have no access to it.

Apple Health (HealthKit)

If you enable Apple Health sync, the app reads your cycling workouts (read-only) and their related values (distance, route/GPS, heart rate, energy burned) in order to include them in the dashboard, form and goal calculation.

• The data is not used for advertising.
• The data is not shared with or sold to third parties.
• The data is not used to train AI/models.
• You can revoke access at any time in the iOS Settings under "Privacy & Security → Health".

Strava

If you connect Strava, you authorize the app via your own Strava account (OAuth) to read your activities. These are imported into your own storage. The access token is stored securely in your device's keychain and is not transmitted to us. Strava's privacy policy additionally applies. You can disconnect at any time in the app.

So that new rides appear promptly and automatically, CyclePilot uses a small relay service operated by us (Cloudflare Worker, USA): Strava notifies it that a new activity exists — only its activity ID is transmitted, not the ride itself. The service briefly stores these IDs and a push token for your device in order to notify the app; your ride, route or health data never reach it. The app then fetches the actual activity data directly from Strava using the token stored on your device.

Calendar

With your permission, the app reads your calendar to detect appointments that clash with training windows, and adds planned training to a training calendar. This data does not leave your device.

Weather data

For planning, the app retrieves weather forecasts via Apple WeatherKit. Only the coordinates of your configured training location are sent to Apple, no personal data. There is no continuous location tracking. Apple's privacy terms for WeatherKit apply; the weather data comes from the sources listed at Apple Weather – data sources.

Your rights

Under the GDPR you have the rights to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. As CyclePilot stores no training or health data on our servers, this essentially concerns your waitlist request and the activity IDs and push token briefly processed by the Strava relay (see above). You can remove all app data yourself at any time by deleting the app and removing the associated data from your iCloud. Send requests to info@cyclepilot.app.

Changes

We may adjust this privacy policy when the app changes. The current version is always available on this page.

This is a translation for convenience. The German version is legally authoritative.