Privacy Policy
Last Updated: December 12, 2025
Your privacy is important to us. This Privacy Policy explains how RouteCycle handles your information.
Information We Collect
We may collect the following information:
- Email Address: We collect your email address only if you choose to provide it to receive announcements about new features.
- Strava Data: If you choose to connect your Strava account, we access your activity data (GPS routes) through the Strava API to power our "Explore New Roads" feature. This data is used internally to identify roads you have previously ridden, so we can generate routes through new roads you haven't explored yet.
- Garmin Connect Data: If you choose to connect your Garmin Connect™ account, we store only the credentials needed to send routes to it. We do not collect, receive or read any data from your Garmin account or your Garmin devices. See Garmin Connect Integration below.
Strava Integration
When you connect your Strava account to RouteCycle, we access your activity data through the official Strava API. Here's how we handle your Strava data:
What We Access
- Your Strava profile information (name, profile picture)
- Your activity routes (GPS coordinates) to identify roads you have ridden
How We Use Your Strava Data
- To display your profile information within the app (visible only to you)
- To internally process which roads you have previously ridden
- To power the "Explore New Roads" feature, which generates routes through roads you haven't explored yet
Data Storage and Retention
- Your Strava activity data is synchronized daily and automatically refreshed
- Old data is deleted and replaced with current data, ensuring no activity data is stored longer than 24 hours
- Your Strava data is used only for your own route generation and is never shared with other users or third parties
Data Deletion
- To permanently disconnect your Strava account and delete all your data, contact us at support@routecycle.com; requests are fulfilled within 48 hours
- If you delete an activity on Strava, it will be removed from our system within 24 hours via the daily sync
What We Do NOT Do
- We do not share, sell, or license your Strava data to any third parties
- We do not use your Strava data for advertising or marketing
- We do not use your Strava data for AI/ML model training or analytics
- We do not modify or write any data to your Strava account
Garmin Connect Integration
Connecting a Garmin Connect™ account is optional. It exists for one purpose: to send a route you have planned in RouteCycle to your own Garmin Connect account as a course, so it syncs to your Garmin device. Data travels in one direction only — from RouteCycle to Garmin Connect.
What We Access
- We request a single permission, Course Import, which only allows writing courses to your account.
- We do not read any data from your Garmin account or your Garmin devices. We receive no activities, no health or wellness data, no location history, no device information and no profile details.
What We Store
- Your Garmin user identifier, as issued by Garmin
- An access token and a refresh token, used solely to send courses on your behalf
- The expiry time of that access token
These are stored on our servers, linked to your RouteCycle account, and are never displayed to other users.
What We Send to Garmin
Only the route you explicitly choose to send, at the moment you press “Send to Garmin Connect”: its name, description, distance, elevation and the sequence of geographic points, plus any points of interest along it. Routes are generated by RouteCycle from OpenStreetMap data; they are not derived from anything Garmin provides. Nothing is sent automatically, in the background, or in bulk.
Third Parties and Automated Processing
- Garmin data is not shared with, sold to, or processed by any third party.
- Garmin data is not sent to any third-party artificial intelligence or data-processing service.
- Garmin data is not used to train or evaluate any AI or machine-learning model.
- Garmin data is not used for advertising, marketing, analytics or profiling.
- Courses you have already sent live in your Garmin Connect account and are governed from that point by Garmin’s own privacy policy.
Disconnecting and Deletion
- You can disconnect Garmin at any time from Settings in RouteCycle. This deletes the stored tokens and your Garmin user identifier from our servers, and asks Garmin to remove our registration for your account.
- You can also revoke RouteCycle’s access from within your Garmin Connect account settings; we then stop being able to send courses.
- Disconnecting does not delete courses already sent — those remain yours, in your Garmin Connect account, and you can delete them there.
- To have your data removed by us instead, contact support@routecycle.com; requests are fulfilled within 48 hours.
How We Use Your Email
If you provide your email address, we use it exclusively to:
- Send you announcements about new features and updates to RouteCycle
We will not use your email for any other purpose, and we will not send marketing emails or spam.
Data Storage and Security
We implement appropriate technical and organizational measures to protect your data:
- All data transmission uses HTTPS encryption
- Your email address and Strava data are stored securely
- We implement appropriate measures to protect your data against unauthorized access or disclosure
Data Sharing
We do not sell, trade, or share your personal information (email address, Strava data, or Garmin Connect credentials) with any third parties. Your data remains private and is used only for the purposes described in this policy.
Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Deletion: Request that we delete your personal data (email address, Strava data)
- Disconnect: Permanently disconnect your Strava account and delete your data by contacting support
- Unsubscribe: Stop receiving feature announcements at any time
To exercise these rights, contact us at support@routecycle.com.
Data Deletion
Email: If you wish to have your email address removed from our mailing list, contact us at support@routecycle.com. We will remove your email promptly and confirm the deletion.
Strava Data: To permanently disconnect your Strava account and delete all your data, contact us at support@routecycle.com. We will delete all your Strava data within 48 hours.
Garmin Connect Data: Disconnect Garmin in Settings to delete your stored Garmin credentials immediately, or contact us at support@routecycle.com. See Garmin Connect Integration.
GDPR Compliance
We comply with the General Data Protection Regulation (GDPR) and UK GDPR. If you are located in the European Economic Area or the United Kingdom, you have additional rights including:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure (right to be forgotten)
- The right to data portability
- The right to object to processing
To exercise any of these rights, please contact us at support@routecycle.com.
Analytics and Cookies
We use Google Analytics to understand how users interact with our app and to improve the user experience. Google Analytics collects information such as:
- How often users visit the app
- What features they use
- General location (country/city level)
- Device and browser type
Google Analytics uses cookies to collect this information. These cookies do not personally identify you and we do not use Google Analytics to track individual users.
Your actual routes, GPS locations, and cycling activities are NOT sent to Google Analytics and remain completely private on your device.
You can opt-out of Google Analytics by using browser extensions like Google Analytics Opt-out Browser Add-on.
Local Storage
We use browser local storage (similar to cookies) to save your preferences such as:
- Preferred units (metric/imperial)
- Language settings
- Route generation preferences
- Last used start/finish points
This information is stored only on your device and is not sent to our servers.
Children's Privacy
Our service is not intended for children under the age of 13. We do not knowingly collect email addresses from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.