Privacy Policy - FTPist - Cycling Coach

Last Updated: October 9, 2025

At CyclingCoach.ai, we take your privacy and the security of your personal data extremely seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

🔒 Our Core Privacy Commitment

We will NEVER use your personal data, training data, or any information from connected services (including Strava, Garmin, Wahoo, etc.) to train machine learning models, AI systems, or for any purpose other than providing you with personalized coaching services.

Your data is yours alone. We respect the trust you place in us and the strict data usage policies of our integration partners.

1. Data Controller

CyclingCoach.ai (“we,” “our,” or “us”) is the data controller responsible for your personal data. For any questions or concerns regarding this Privacy Policy or your data, please contact us at:

Email: privacy@cyclingcoach.ai
Address: [Your Company Address]

2. What Data We Collect

2.1 Account Information

Name and email address
Username and password (encrypted)
Profile information (age, weight, height, cycling experience level)
Payment information (processed securely by third-party payment processors)

2.2 Training and Performance Data

Cycling activity data from connected devices and platforms (Strava, Garmin, Wahoo, etc.)
Performance metrics (power, heart rate, cadence, speed, distance)
Training goals and preferences
Workout completion and feedback

2.3 Technical Data

IP address and device information
Browser type and version
Usage data and analytics (how you interact with our service)
Cookies and similar tracking technologies

3. How We Use Your Data

We use your personal data solely for the following purposes:

3.1 Service Delivery

Creating and personalizing your training plans
Analyzing your performance to provide coaching recommendations
Tracking your progress toward your goals
Sending you workout reminders and notifications

3.2 Account Management

Managing your account and subscription
Processing payments
Providing customer support
Communicating important service updates

3.3 Service Improvement

Improving our platform’s functionality and user experience
Analyzing aggregated, anonymized usage patterns
Fixing technical issues and bugs

⚠️ What We DO NOT Do With Your Data

We DO NOT use your data to train AI or machine learning models
We DO NOT sell your data to third parties
We DO NOT use your data for advertising purposes
We DO NOT share your data with other users without your explicit consent
We DO NOT use your Strava, Garmin, or other connected platform data in any way that violates their terms of service

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide our coaching services to you
Consent: Where you have given explicit consent for specific data processing activities
Legitimate Interest: For improving our services and ensuring platform security
Legal Obligation: Where required by law (e.g., tax and accounting purposes)

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Active accounts: Data is retained while your account is active
Closed accounts: Most data is deleted within 30 days of account closure
Legal requirements: Some data may be retained longer to comply with legal obligations (e.g., payment records for tax purposes)
Anonymized data: We may retain anonymized, aggregated data indefinitely for statistical purposes

6. Data Security

We implement industry-standard security measures to protect your data:

End-to-end encryption for data transmission (SSL/TLS)
Encrypted storage of sensitive data
Regular security audits and vulnerability assessments
Access controls and authentication requirements
Employee training on data protection and privacy
Incident response procedures for data breaches

7. Third-Party Services and Integrations

We integrate with third-party services to provide our coaching platform. These include:

7.1 Connected Platforms

Strava, Garmin, Wahoo, TrainingPeaks, Zwift, etc.: We access your training data through authorized API connections. We strictly comply with each platform’s data usage policies and terms of service.

7.2 Service Providers

Payment processors: For secure payment processing
Cloud hosting: For data storage and platform infrastructure
Email services: For sending notifications and communications
Analytics: For understanding platform usage (anonymized data only)

Important: All third-party service providers are carefully selected and must comply with GDPR and maintain appropriate security standards. We have data processing agreements in place with all providers who handle your personal data.

8. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Privacy Shield certification (where applicable)

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access: Request a copy of all personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data
Right to Restriction: Request limitation of processing in certain circumstances
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)
Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@cyclingcoach.ai. We will respond to your request within 30 days.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Keep you logged in to your account
Remember your preferences
Analyze platform usage and performance
Improve user experience

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our service.

11. Children’s Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the updated policy on our website
Sending an email notification to your registered email address
Displaying a prominent notice within the application

Your continued use of our service after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@cyclingcoach.ai
Data Protection Officer: dpo@cyclingcoach.ai
Address: CyclingCoach.ai, Billeshavehegn 3, 5500 Middelfart, Denmark

✓ Our Commitment to Your Privacy

We are committed to protecting your privacy and being transparent about how we handle your data. Your trust is paramount to us, and we continuously work to maintain the highest standards of data protection. If you have any concerns about your privacy or how we handle your data, please don’t hesitate to reach out to us.