Privacy. Plainly stated.
This page is based on the privacy policy in the RCycle repo, reformatted to match the main site. It covers the desktop app and cloud service, what gets stored locally, what reaches the cloud, and what third parties are involved.
This Privacy Policy explains how RCycle ("RCycle", "we", "us") collects, uses, and discloses information when you use the RCycle desktop application and its associated cloud service. RCycle is operated by Reza Naima. If you have questions about this policy or your data, contact:
reza747895 [at] gmail [dot] com
This policy applies globally. Residents of the European Economic Area, the United Kingdom, and California have additional rights described below.
1. What RCycle Does
RCycle is an indoor-cycling application. It connects to Bluetooth Low Energy (BLE) fitness devices on your computer, renders real-world routes, and, if you choose, synchronises your rides with Strava and with our cloud service so that you can see other riders on the same route.
2. Information We Collect
2.1 Local device data (stays on your computer)
The local RCycle backend pairs with your BLE devices and reads live measurements such as power, cadence, heart rate, speed, resistance, and grade. Raw BLE data is processed on your machine and is not transmitted to our cloud except as summarised ride data described below.
2.2 Account data (via Strava)
When you sign in with Strava, Strava shares the following with us after you authorise it:
- Your Strava numeric ID
- Your display name
- Your avatar URL
- OAuth access and refresh tokens, and their expiry time
We store this information so that you remain signed in, and so that rides you choose to upload can be posted to your Strava account.
2.3 Rider profile
You may enter rider and physics settings used for the ride simulation, including rider weight, bike weight, FTP, aerodynamic drag (CdA), rolling resistance (Crr), drivetrain efficiency, and maximum power. These are stored in your RCycle account.
2.4 Ride data
When you complete a ride, we store summary metrics such as route identifier, start and end timestamps, distance, duration, elevation gain, average power, average speed, a pointer to the local ride log on your machine, and, if you uploaded to Strava, the resulting Strava activity ID.
While a ride is active, the app sends periodic ride snapshots containing your position on the route, current speed, and power to our cloud so that other riders on the same route can see your location in real time. Snapshots for past rides are not retained beyond what is needed to render the summary above.
2.5 Information we do not collect
- We do not use analytics, crash-reporting, advertising, or tracking SDKs.
- We do not collect contacts, messages, microphone, or camera data.
- We do not sell your personal information.
3. How We Use Your Information
- To authenticate you and keep you signed in.
- To run the ride simulation using your rider profile.
- To show nearby riders on the same virtual route.
- To upload your rides to Strava at your request.
- To operate, secure, and debug the service.
We do not use your data for advertising or for training machine-learning models.
4. Third-Party Services
4.1 Strava
If you connect a Strava account, data flows between RCycle and Strava under Strava's own terms and privacy policy. You can disconnect Strava at any time in the app's account settings, and you can revoke RCycle's access from your Strava account at any time at strava.com/settings/apps.
4.2 Map and terrain tiles
The app displays maps using tiles fetched directly from third parties:
- Esri World Imagery for satellite imagery tiles.
- Amazon Web Services (AWS) Terrain Tiles for public-domain elevation data.
- MapLibre demo tile server for map fonts and glyphs.
When your app fetches a tile, the tile provider receives your IP address and the coordinates of the tile you are viewing. We do not control those providers' logging practices. Refer to their privacy policies for details.
4.3 Automatic updates
The desktop application checks GitHub for new releases and downloads updates from GitHub when available. GitHub receives the request, including your IP address, as part of this process.
5. Where Your Data Is Stored
The RCycle cloud service is currently hosted in California, United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on appropriate legal mechanisms such as the Standard Contractual Clauses for international transfers.
6. Data Retention and Deletion
We retain your account and ride data for as long as your account exists. You may delete your account at any time from within the app. When you do, we immediately and permanently delete your user record, your Strava tokens, your rider profile, and your ride history from our database. Deletion is not reversible.
Rides you have already uploaded to Strava remain on Strava and are governed by Strava's own policies. To remove those, delete them in Strava.
7. Security
We use HTTPS for traffic between the app and the cloud service and encrypt authentication tokens at rest. No system is perfectly secure. Please use a strong, unique password on any third-party account you connect to RCycle.
8. Children
RCycle is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
9. Your Rights (EEA / UK / GDPR)
If you are in the EEA or UK, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local data protection authority. Our lawful bases for processing are your consent, performance of a contract, and our legitimate interest in operating and securing the service. To exercise these rights, contact:
reza747895 [at] gmail [dot] com
10. Your Rights (California / CCPA / CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA and CPRA. We do not use sensitive personal information for purposes beyond those permitted by law. To exercise your rights, contact:
reza747895 [at] gmail [dot] com
11. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by in-app notice.
12. Contact
Questions, requests, or complaints about this policy or your data:
reza747895 [at] gmail [dot] com