How we protect and manage your data in TwoTyred
Effective June 14, 2026
We collect information you provide directly to us, including your name, email address, weight, and fitness data (such as FTP and ride history). This data is essential for the TwoTyred physics engine to provide an accurate simulation.
We use your data to maintain your account, calculate in-game physics, track your progression, and sync with third-party services like Strava (if you choose to connect). We do not sell your personal data to third parties.
Account, route, and ride data is stored using Supabase in access-controlled database and storage services. Provider credentials are encrypted by the application, and private data is available only through authenticated product services.
You can export your account, ride, and personal-route data or permanently delete your account from the Profile screen. You may also contact [email protected] to exercise access, correction, restriction, or objection rights.
We use essential cookies to manage your authentication session. We do not use third-party tracking pixels or advertising cookies without your explicit consent.
Account data is retained while your account is active. Self-service deletion removes active account records, stored rides, personal routes, and connected-provider tokens. Security and deletion audit records are retained only where necessary and do not contain provider credentials.
The Apple app may send Apple MetricKit crash and performance diagnostics so we can identify reliability problems. These diagnostics are not used for advertising or behavioral profiling, are not linked to your account by the app, and are deleted after 30 days.
If you choose to connect Strava, ride data is sent to Strava under its own terms and privacy policy. Disconnecting revokes the provider token and removes the local connection. Supabase and our hosting providers process data only to operate TwoTyred.
Questions about your data? Contact our Data Protection Officer at [email protected]