Privacy

In brief

VeloStats is built to collect as little data as possible: the app computes on your device, and the website works without cookies or tracking. There is no account and no advertising. A few features — AI suggestions for your bike and the optional workout export — send specific data to services, but only when you actively use them.

This website (velostats.app)

• No cookies, no trackers, no analytics services, no content from third-party servers. Only your language choice (DE/EN) is stored in a strictly necessary cookie.
• The website runs on Cloudflare Workers (Cloudflare, Inc.) as hosting infrastructure. When you access it, Cloudflare processes technically necessary connection data (such as your IP address) to deliver the page and prevent abuse.
• Contact: whatever you send via the form or by email to support@velostats.app (name, email address, message) is used solely to answer your enquiry, is not shared with third parties, and is deleted automatically after 90 days at the latest.

The app

• On-device processing: your training data — FTP, form, records, explorer tiles, rides — is computed and stored locally by VeloStats on your iPhone. There is no account and no server storing your training data. A few features send specific data to services — but only when you actively use them (see below).
• Strava: the connection is voluntary and limited to read-only access to your own activities. Sign-in happens directly at Strava — VeloStats never sees your password. The sign-in exchange runs briefly via auth.velostats.app; activity data is not stored there. If you disconnect, the app deletes the local Strava data.
• Apple Health: access only if you explicitly grant it in iOS — read access for workouts, write access only for the optional FTP hand-off (off by default).
• AI features (bikes & components): if you capture a bike by photo or have components, build variants or torque values suggested by AI, the app sends the photo or the make/model text you entered to our server (auth.velostats.app) and from there to the AI service Anthropic for analysis. The requests are anonymous (a random, resettable device identifier serves only the daily limit, no name); images and requests are not stored permanently.
• Error and crash reports: if an error occurs, the app can send an anonymous report (error text, app and iOS version) to our server so we can fix it — without any name.
• intervals.icu (optional): if you connect Velo with intervals.icu, you can transfer individual workouts there (from where they sync to your Garmin/Wahoo/Karoo). Sign-in happens directly at intervals.icu — VeloStats never sees your password; the sign-in exchange runs briefly via auth.velostats.app. Only the workout you deliberately export is transferred.
• Feedback from the app: if you send feedback, the app transmits only your text plus app and iOS version — no name and no device identifier.

Controller

David Gertis
support@velostats.app