Privacy Policy

Who is responsible

Pedalsim is the controller of the personal data described here. For anything about your data, including the requests below, use the contact page. This policy sits alongside our Terms of Service.

What we collect

Account: your email address, which is also how you sign in.
Profile: the display name, country and avatar you choose, and the body and fitness details you enter, such as weight, height, age, FTP and heart-rate zones, plus your app settings.
Rides: what your sensors record while you ride (power, heart rate, cadence, speed), the route, the distance and where along it you are, and the ride files built from them.
Training: your training plan, the answers you give when building it, how you felt about sessions, daily check-ins, weight entries and other activities you log or import.
Payments: whether you subscribe, your plan and the payment provider's customer reference. Card details go straight to Stripe; we never see or store them.
Messages: what you send us through the contact form.
Technical data: IP address, device and app version, and error logs, as servers record them when you use the Service.

Heart-rate data can count as health data. We only have it because you pair a heart-rate sensor or enter it, and we use it only to show your ride, plan your training and adapt sessions to you.

Why we use it

To provide the Service you signed up for: your account, rides, routes, training plans and subscription (performance of our contract with you).
To keep the Service secure and working, prevent abuse and fix errors (our legitimate interests).
To send you the emails the Service needs, such as sign-in codes and receipts or notices about your subscription and these policies.
To process heart-rate data, with your explicit consent, which you give by pairing a heart-rate sensor or entering it and can withdraw by removing the sensor and deleting the rides or your account.
To keep accounting records the law requires.

We do not sell your data, show ads or use your data for advertising.

Who else sees it

Other riders: while you ride, your display name, country, avatar, position on the road and effort are shown to riders nearby. You can switch this off in the app.
Stripe handles subscriptions and payments.
Resend sends our emails, such as sign-in codes.
Cloudflare delivers the website and measures its performance, without cookies.
Strava exchanges data with us only if you connect your Strava account, and only while it stays connected: we send it your rides and import your other activities so your training plan counts them.

Everything else is stored on servers we run ourselves. Some of these providers are based in the United States or process data there; where they do, the transfer is covered by the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. We also disclose data where the law requires it.

How long we keep it

We keep your account data, rides and plans for as long as you have an account. When you delete your account in the app, we delete them. Payment and accounting records are kept for as long as accounting law requires (in Sweden, seven years) and stay with our payment provider. Server logs are kept for a short time for security and troubleshooting.

Cookies and storage

The app stores your sign-in and settings on your device so you stay signed in. The website sets no advertising or tracking cookies.

Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict or object to how we use it, and to withdraw consent at any time. Many of these you can do yourself in the app: edit your profile, download a ride's FIT file, hide yourself from other riders, disconnect Strava or delete your account. For anything else, contact us. You can also complain to a data protection authority; in Sweden that is the Swedish Authority for Privacy Protection (IMY), imy.se.

Children

Pedalsim is not meant for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters to you, we tell you in the app or by email before it takes effect.