Privacy Policy
Effective 2 October 2026
1. Information we collect
We collect information you provide directly to us, including your name, email address, weight, and fitness data (such as FTP and ride history). This data is essential for the TwoTyred physics engine to provide an accurate simulation. If you request access, we keep the details you submit so we can invite you.
2. How we use your data
We use your data to maintain your account, calculate in-game physics, track your progression, and sync with third-party services like Strava (if you choose to connect). We do not sell your personal data to third parties.
3. Data storage and security
Account, route, and ride data is stored using Supabase in access-controlled database and storage services. Provider credentials are encrypted by the application, and private data is available only through authenticated product services.
4. GDPR and your rights
You can export your account, ride, and personal-route data or permanently delete your account from the Profile screen in the app. You may also contact [email protected] to exercise access, correction, restriction, or objection rights.
5. Cookies and tracking
This website does not use sign-in, advertising or tracking cookies. The app keeps its sign-in token on your device.
6. Data retention
Account data is retained while your account is active. Self-service deletion removes active account records, stored rides, ride photos, personal routes, and connected-provider tokens. Security and deletion audit records are retained only where necessary and do not contain provider credentials.
7. Reliability diagnostics
The Apple app may send Apple MetricKit crash and performance diagnostics so we can identify reliability problems. These diagnostics are not used for advertising or behavioral profiling, are not linked to your account by the app, and are deleted after 30 days.
8. Third-party services
If you choose to connect Strava, ride data is sent to Strava under its own terms and privacy policy. Disconnecting revokes the provider token and removes the local connection. Supabase and our hosting providers process data only to operate TwoTyred.
Questions about your data? Email [email protected].