Privacy Policy

1. Controller

The controller under the General Data Protection Regulation (GDPR) is:
Julian Manke
Tengstr. 36
80796 München
Germany
Email: j.manke@icloud.com

2. The website

2.1 Hosting and server logs

This site is served by GitHub Pages (GitHub, Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA). When you open a page, GitHub processes technically necessary connection data — in particular your IP address, the date and time of the request, the page requested and your browser and operating system. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and stable operation of the site. Transfers to the USA rely on GitHub's standard contractual clauses. See theGitHub Privacy Statement.

2.2 No cookies, no tracking

This site sets no cookies, embeds no advertising networks and performs no cross-site tracking. That is also why there is no consent banner.

2.3 Fonts and external content

All fonts are served from this server. There is no connection to Google Fonts or any other font CDN, so no IP addresses are passed to third parties. Images, scripts and stylesheets are self-hosted too.

2.4 Contacting us

If you email us, we process what you send purely to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Messages are deleted once the matter is closed and no statutory retention period applies.

3. The app

3.1 Principle

Your cycling data lives on your iPhone and in Apple Health. Nothing is uploaded unless you explicitly turn it on. Using Ride Streak requiresno account. There are no ads, no profiling and no sale of data.

3.2 Apple Health (HealthKit)

With your permission, Ride Streak reads workout and health data from Apple Health — cycling workouts, distance, duration, elevation, heart rate, energy burned and body weight. This data is processed on your device only and is never transmitted to us or to third parties. You can withdraw access at any time under Settings → Privacy & Security → Health. Apple Health data is never used for advertising and never shared.

3.3 Strava (optional)

If you choose to connect Strava, Ride Streak fetches activities and profile values through the official Strava API — including power, cadence, segments, laps, heart-rate zones, FTP and weight. Authorisation happens via OAuth directly with Strava; we never receive your Strava password. The retrieved data is stored locally on your device. The legal basis is your consent under Art. 6(1)(a) GDPR. Disconnecting removes all imported Strava data from the app. Strava's ownprivacy policy applies in addition.

3.4 RideStreak Cloud (optional, opt-in)

RideStreak Cloud is off by default. When you switch it on, onlydaily training summaries are transmitted and stored on servers in the European Union:

• Date
• Duration
• Distance
• Elevation gain
• Training load (as a daily figure)

Not transmitted: GPS routes, raw heart-rate data, photos, per-ride power data, or anything about your bikes and components. Training load is calculated on your device; only the finished daily number is synced. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time in the app's settings and delete your account together with all server-side data there.

3.5 iCloud sync

With Ride Streak Pro, the app syncs your bikes, parts, rules, tours and goals through your private iCloud database. That data sits in your Apple account, not with us, and we cannot access it. Apple's privacy policy applies.

3.6 Purchases

Ride Streak Pro is sold through the Apple App Store. Payment data is handled exclusively by Apple; we receive no card or billing details, only an anonymous purchase status used to unlock features.

4. Your rights

Under the GDPR you have the right to:

• access the data held about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing (Art. 21)
• withdraw consent with future effect (Art. 7(3))

Write to j.manke@icloud.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

5. Changes

We update this policy when the app or the site changes. The version published here is the one that applies.