Privacy Policy

Last Updated: April 20, 2026

Introduction

BikeHealth ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

BikeHealth is powered by Strava and uses your Strava data solely to provide bicycle maintenance tracking services.

Strava Data Usage

What Strava Data We Access

When you connect your Strava account, we request access to:

  • Your profile information (name, athlete ID)
  • Your activities (ride data including distance and date)
  • Your bike gear information (bike names and IDs)

How We Use Your Strava Data

We use your Strava data exclusively for the following purposes:

  • Calculate component mileage based on your ride distances
  • Generate maintenance alerts when components reach service intervals
  • Display your bikes in your BikeHealth dashboard
  • Track maintenance history for each bike

What We Will NEVER Do

  • We will NEVER train AI models on your Strava data
  • We will NEVER sell your Strava data to third parties
  • We will NEVER aggregate your data for commercial purposes
  • We will NEVER post to your Strava account
  • We will NEVER share your Strava data with other users or external services

Strava API Compliance

BikeHealth respects all Strava API rate limits and terms of service. We implement comprehensive rate limiting and circuit breaker patterns to ensure we never exceed Strava's API usage policies.

Data Storage and Security

What We Store

  • Strava athlete ID and name
  • Bike names and IDs from Strava
  • Activity distances (mileage only, not routes or GPS data)
  • Component maintenance records you create
  • Service records and maintenance history

How We Protect Your Data

  • All data is stored in encrypted databases (Supabase)
  • Strava access tokens are encrypted in our authentication system
  • We use Row Level Security (RLS) to ensure users can only access their own data
  • All API communications use HTTPS/TLS encryption
  • We implement comprehensive authentication and authorization checks

Data Retention and Deletion

How Long We Keep Your Data

We retain your data only as long as your account is active or as needed to provide you with our services. You can delete your data at any time.

Your Right to Delete Your Data

You have complete control over your data. You can:

  • Disconnect your Strava account at any time from your profile settings
  • Delete individual maintenance records and service history
  • Request complete account deletion by contacting support@bikehealth.app

What Happens When You Delete Your Account

When you delete your BikeHealth account:

  • Your Strava connection is immediately revoked
  • All your personal data is permanently deleted from our systems
  • All maintenance records and service history are removed
  • We do not retain any backups of your personal data

Note: To fully revoke BikeHealth's access to your Strava account, you should also remove the authorization from your Strava account settings at strava.com/settings/apps

Other Data We Collect

Account Information

  • Email address (for account authentication and notifications)
  • Password (encrypted)
  • User preferences (notification settings, measurement units, timezone)

Usage Information

  • Log data (IP address, browser type, access times)
  • Feature usage analytics (to improve our service)

AI-Powered Features

BikeHealth uses AI to enhance your experience with features like photo-based component recognition and invoice processing. Here's how we handle AI:

AI Usage

  • Photos you upload may be processed by OpenAI's GPT-4 Vision API for component identification
  • Service invoices may be processed to automatically extract maintenance information
  • All AI processing is done on-demand for your specific requests

Important: AI Training Policy

We do NOT train AI models on your personal data, photos, or Strava information.Any AI processing is done using third-party APIs (like OpenAI) that we have configured to not retain or use your data for training purposes.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

We aim to respond to all privacy inquiries within 48 hours.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically.