Privacy Policy for Bike Analytics

1. Scope and controller

This policy covers the Bike Analytics apps for iOS and Android and the bike.analyticszone.app website. Bike Analytics is a wellness and sports-analysis product, not a medical device.

The controller is ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. Contact: [email protected].

2. Data processed on your device

With your permission, Bike Analytics reads cycling workout information from Apple HealthKit on iOS or Health Connect on Android. Depending on what your source provides, this can include exercise sessions, dates and times, duration, distance, speed, heart rate, power, cadence, active energy, elevation, splits and route information.

The app uses these records to show workout history, FTP and critical-power estimates, power and heart-rate zones, training load, fitness, fatigue, form, time in zone, trends and best efforts. Platform-health records and the app's main analysis database are processed and stored locally. Bike Analytics requests read access and does not sell this information or use it for advertising.

You can change Apple Health or Health Connect permissions in device settings. Removing permission stops future access but does not automatically delete records already stored in the app.

3. Optional Garmin connection

Garmin sync is optional. If you choose to connect and authorize it, Bike Analytics uses an ArnoHealth backend service to complete authorization and retrieve workouts. The service may process a random installation identifier, Garmin account and authorization identifiers, OAuth tokens, connection status, synchronization cursors, technical timestamps, workout fields and route points when available.

This information is used to provide Garmin connection, import, deduplication and route delivery. It is not sold or used for advertising. Requests use encrypted transport.

Disconnecting Garmin stops the active app connection and clears current authorization/session state. Under the present Bike Analytics flow, imported or cached server records are not guaranteed to be deleted automatically by disconnecting or uninstalling. You can also revoke authorization in Garmin account settings and request deletion assistance at [email protected]. Never send passwords, MFA codes or recovery codes.

4. Purchases and diagnostics

Apple or Google processes subscriptions and purchases. Bike Analytics receives product, transaction and entitlement information needed to unlock access but does not receive your full payment-card details.

Production versions may send crash and performance diagnostics to Sentry. These can include error messages, stack traces, app version, operating-system and device context, timestamps and technical breadcrumbs. They are used to maintain reliability, not for advertising.

5. Website data

The website loads optional analytics only after your consent. This can include page views, referral information, approximate location derived from IP address, device/browser information and interaction events. Cloudflare serves the website and may process network and security logs. Google Fonts may receive an IP address and browser request when fonts load.

If you contact us, we process the details and message you submit to answer the request. Do not include health records, passwords or security codes.

6. Legal bases, retention and providers

Device-health access and optional Garmin processing depend on your choice and authorization. Purchases are processed to provide the service you request. Website analytics is based on consent. Support and service security are handled to answer requests and protect the service.

Local app data remains until you delete it, clear app storage or uninstall, subject to operating-system behavior and backups you control. Garmin, diagnostic, support, security-log and backup records are retained only as needed for service, security and legal purposes, but Bike Analytics does not promise an automatic fixed deletion period that has not been verified. Contact us to exercise a deletion request.

Providers involved can include Apple, Google, Garmin, Google Cloud, Sentry, Cloudflare, Google Analytics and website contact-delivery services. They process data under their own terms and may use infrastructure outside the European Economic Area with the safeguards applicable to their services.

7. Your choices and rights

• Revoke Apple Health or Health Connect access in device settings.
• Disconnect Garmin in Bike Analytics and revoke it in Garmin settings.
• Delete local app data by clearing storage where available or uninstalling.
• Request access, correction or deletion of server-side records by contacting us.
• Change optional website analytics through Privacy choices.

How to request server-data deletion

1. Email [email protected] with the subject “Bike Analytics data deletion”.
2. State that the request concerns Bike Analytics and include the installation or Garmin connection identifier shown in the app, if available. Do not send passwords, MFA codes or health records.
3. We will verify the request using the minimum information necessary and confirm the outcome.

On a valid request, we delete or de-identify the Bike Analytics Garmin authorization, connection, workout and cache records we can associate with the identifier, plus support details that are no longer needed. Local HealthKit, Health Connect and analysis records remain on your device and must be deleted there. Limited security, fraud-prevention, transaction or legal-compliance records may be retained only for the applicable legal or operational period; residual backups are removed through their normal rotation rather than immediately.

Where applicable, you may also request restriction, objection and portability, withdraw consent without affecting earlier lawful processing, and complain to the Spanish Data Protection Agency (AEPD) or your local authority.

8. Children, security and changes

Bike Analytics is not directed to children below the applicable digital-consent age. We use reasonable technical and organizational safeguards, but no storage or transmission system is completely secure. We may update this policy when the product, providers or legal requirements change.

9. Contact

ArnoHealth S.L., Gran Via de les Corts Catalanes 699, 2-2, 08013 Barcelona, Spain. Email [email protected] or visit https://bike.analyticszone.app.