Privacy Policy

RideScope is a personal analytics tool for cyclists. You connect your Strava account and we generate visualizations and insights from your ride history — heatmaps, a rider profile, segment discovery, and performance patterns. Your data is only ever shown to you.

When you connect your Strava account, we receive and store: your Strava profile information (name, profile picture, athlete ID), your activity data (routes, distances, times, speeds, elevation, heart rate, and other metrics Strava provides for your rides), and OAuth tokens to maintain your connection to Strava.

We do not collect passwords. Authentication is handled entirely through Strava's OAuth2 flow — we never see or store your Strava password.

We use your activity data to generate personal analytics visible only to you: ride heatmaps, your Rider DNA profile, blind spot segment discovery, and performance insights. We also match your ride dates and locations against historical weather data to surface weather-related patterns.

We do not sell or share your data with third parties. We do not use your data for advertising, AI or machine learning training, or aggregate analytics. We do not display your data to other users or build cross-user leaderboards or comparisons.

RideScope uses functional cookies to maintain your session and store your preferences. Specifically: a session cookie to keep you logged in, an athlete ID cookie to identify your account, and a units preference cookie (miles or kilometers). These are httpOnly cookies used solely to operate the app. We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics.

We use the following services to operate RideScope:

Supabase hosts our database (US West region). Your activity data and account information are stored in a Postgres database managed by Supabase with encrypted connections.

Mapbox renders the map interface. Map tile requests are made client-side using a public API token. No user activity data or identity information is sent to Mapbox — only standard map tile requests.

Open-Meteo provides historical weather data. We send only dates and geographic coordinates to retrieve weather conditions. No user identity or Strava data is sent to Open-Meteo.

None of these services receive your Strava identity or personal activity details beyond what is technically required for their function.

Your data is stored in a Supabase Postgres database hosted in the US West region. All connections use HTTPS and encrypted database connections. OAuth tokens are stored server-side and are never exposed to the browser. Access tokens are refreshed automatically and the refresh process is handled entirely on the server.

You can export all of your stored data as a JSON file at any time from the Settings page within the app.

You can delete your account and all associated data from the Settings page. When you delete your account, all of your activity data, profile information, computed analytics, and stored tokens are permanently removed from our database.

If you revoke RideScope's access through Strava's settings, we will delete all of your data from our systems.

We retain your data for as long as your account is active. If you delete your account or revoke Strava access, your data is deleted immediately. We do not retain backups of deleted user data.

If we discontinue RideScope, we will notify all users with active accounts and delete all stored data from our systems.

RideScope is not intended for users under the age of 13. We do not knowingly collect data from children.

We do not use Google Analytics, Vercel Analytics, or any third-party analytics or tracking tools. We do not track your behavior on the site beyond what is required to operate the app.

We may update this privacy policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Continued use of RideScope after changes constitutes acceptance of the updated policy.

If you have questions about your data or this privacy policy, contact Taswar at taswarkabir.info@gmail.com.