1. Who is responsible for your data
The data controller is Liftoff S.R.L., 21 de Setiembre 3038 / 802, Montevideo, Uruguay, the company that also operates Cycling Coach AI. You can contact us about privacy at hi@cyclingcoachai.com.
2. What data we process
Account data: your email address, the date on which you accepted the Terms of Use and which version, your language and the dates of creation and last sign-in. If you open Pedaldrome from your Cycling Coach AI account, we also receive your Cycling Coach AI user ID, so that we can link both accounts.
Profile data you choose to enter: your FTP, your weight and your preferred units.
Workouts you upload: the name and the content of the .zwo files, converted to a structured format, and the file name.
Your choice about training tips and news emails: only if you tick the optional box (when you sign in or later in Settings), we store that choice, the date and the version of the consent text.
Connected accounts: when connections with Strava or Garmin Connect are available and you connect one, the identifier of your account at that provider and the access tokens needed to use the connection. These tokens are stored by Cycling Coach AI on our behalf, never in Pedaldrome's own database.
Security data: a hash of your sign-in code (valid for 10 minutes and deleted within a day) and a hash of your session token. We never store the code or the token themselves. Your IP address is processed to limit abuse and appears, with the date, the page requested and your browser type, in our web server logs, which we keep for 14 days.
Your rides, if you sign in with an email code: for each workout you ride we store the name of the workout (which can be the name of a .zwo file you uploaded), whether it was a free ride, the date and time, the duration, a summary of the ride, and the second-by-second readings of your power, heart rate, cadence, distance and elevation. Other users cannot see your rides. You can delete them one by one, and deleting your account deletes all of them. If you enter with a Cycling Coach AI account, Pedaldrome does not store your rides (see section 3).
What we do NOT store: your location. Pedaldrome does not use GPS, the world you ride in is virtual, and we never ask your browser for your location. We only store the readings listed above, not any other information from your Bluetooth devices.
3. If you use Pedaldrome with a Cycling Coach AI account
When you enter from Cycling Coach AI, we receive your user ID, your email address and your language, and, if you open a workout from your plan, a reference to that workout. In Pedaldrome we store only the link between your accounts and the data described in section 2.
If you enter with a Cycling Coach AI account, Pedaldrome does not store your rides: they are stored by Cycling Coach AI. Cycling Coach AI processes them, together with your training data, the AI feedback and the connections to Strava or Garmin Connect that you already have there, under its Privacy Policy (https://cyclingcoachai.com/privacy/). Pedaldrome itself does not use artificial intelligence and does not send your data to AI providers.
If you delete your Cycling Coach AI account, we also delete your Pedaldrome data. Deleting your Pedaldrome account does not delete your Cycling Coach AI account.
4. Why we process it and on what legal basis
To create your account, let you sign in, store your preferences, your workouts and your rides, connect the services you choose and provide the Service (performance of a contract, GDPR Article 6(1)(b)).
To keep the Service secure, prevent abuse (such as limiting repeated sign-in attempts) and receive an internal notice when a new account is created or a workout is finished, so that we can run the Service and know that it works (our legitimate interest, Article 6(1)(f)).
To send you training tips and news about Cycling Coach AI by email, only if you tick the optional box when you sign in or turn it on in Settings (your consent, Article 6(1)(a)). You can withdraw it at any time in Settings, with the link in every email or by writing to hi@cyclingcoachai.com, without affecting anything done before.
To meet our legal obligations, when they apply.
We don't show advertising, we don't use third-party analytics or tracking tools and we don't build profiles about you. Our website uses only its own visit statistics, described in section 7.
5. Emails we send
We send the sign-in code you request and a welcome message when you create your account. These are necessary to run the Service.
We send training tips and news about Cycling Coach AI only if you ticked the optional box (when you signed in or later in Settings). Every message includes a link to unsubscribe, and you can also turn it off in Settings.
6. Cookies and local storage
We use one strictly necessary cookie to keep you signed in (a session cookie that lasts up to 60 days) and one cookie that remembers your language. Your browser's local storage keeps display preferences such as graphics quality, camera and units.
We don't use advertising, analytics or tracking cookies, so there is no cookie banner to accept. Our website, pedaldrome.com, uses your browser's local storage for its own visit statistics, as explained in section 7.
7. Our website, pedaldrome.com
This section covers only our public website, pedaldrome.com, not the Pedaldrome app. You can browse the website without an account, and it never asks for your name or email address.
To know how many people visit the website and which pages and buttons work, we keep our own visit statistics. For each page you view we record the page, the page you came from, the campaign parameters in the link (utm_source and similar), your country (worked out by our hosting provider from your IP address), your browser, operating system, type of device and language, and the date and time. We also record a few interactions: clicks on the buttons that take you to the app, clicks on links to other websites, how far down a page you scroll and how long you stay on it.
To count visits without counting the same person twice, your browser's local storage keeps a random identifier for 30 days, and its session storage keeps another one until you close the tab. These identifiers are not linked to your name, your email address or your Pedaldrome account, and we don't store your IP address with these statistics. We don't use analytics cookies or third-party analytics or advertising tools on the website.
When automated programs such as search engines and AI assistants request pages of the website, we record the page, the name of the program, the country and an irreversible hash of the IP address, to understand how these services read our content.
If you choose a language on the website, a cookie remembers your choice for one year.
We process this data on the basis of our legitimate interest in understanding and improving the website (GDPR Article 6(1)(f)). You can object at any time: if you block or clear the local storage of pedaldrome.com in your browser, or use a tracker blocker, the identifier is not kept. You can also write to us at hi@cyclingcoachai.com.
8. Strava and Garmin Connect
When connections with Strava or Garmin Connect are available, you choose whether to connect them. We use the connection only for the purpose shown when you connect: for example uploading a completed ride to Strava, with a fixed name and description, or sending a workout to your Garmin device. We do not read your activity history from these providers for this purpose.
You can disconnect at any time in Pedaldrome or in the provider's settings (in Strava under Settings, My Apps; in Garmin Connect under Account Settings, Connected Apps). When you disconnect, we delete the access tokens. Activities already uploaded to Strava stay in your Strava account.
9. Who we share data with
We don't sell your data. We use service providers who process it on our behalf under our instructions: our hosting provider (Hetzner, in Germany), our email delivery provider, which sends you the sign-in and welcome emails, and the internal communication tools of our team, which receive two internal notices: one when an account is created (its email address, its language and whether the optional box was ticked) and one when you finish a workout, only if you sign in with an email code (your email address, the name of the workout, its duration and its distance).
Our website, pedaldrome.com, is hosted by Cloudflare, which also stores its visit statistics. When you visit the website, your browser downloads its fonts from Google Fonts, so Google receives your IP address and basic details about your browser.
We share data with Strava or Garmin only if you connect them, and with Cycling Coach AI if you use a Cycling Coach AI account, as explained above. We may disclose data if the law requires it or if it is necessary to protect the security of the Service or the rights of our users or ours.
10. International transfers
Our servers are in the European Economic Area (Germany). We are based in Uruguay, a country that the European Commission recognises as providing an adequate level of data protection. Some providers, such as the internal communication tools of our team, may process data in other countries, including the United States. Our website, pedaldrome.com, is served from Cloudflare's global network and its fonts come from Google, so both may process data in other countries, including the United States. In those cases we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.
11. How long we keep it
We keep your account data, your profile, your workouts and your rides until you delete them or delete your account. Sign-in codes are deleted within a day and sessions expire after 60 days. Access tokens of connected services are deleted when you disconnect. Your choice about news emails is kept until you withdraw it. Web server logs are kept for 14 days. Website visit statistics are kept for up to 24 months, and the identifier in your browser's local storage expires after 30 days.
When you delete a ride, it is deleted immediately from our live database. When you delete your account in Settings, your account, profile, sessions, uploaded workouts and rides are deleted immediately from our live database. Backup copies, if any, are overwritten in the normal backup cycle.
12. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, withdraw your consent at any time and receive your data in a portable format. You can edit your profile and delete your account yourself in Settings, and delete your rides in Pedaldrome. For anything else, write to hi@cyclingcoachai.com.
If you think we are not handling your data properly, you can lodge a complaint with your data protection authority.
13. Children
The Service is not intended for people under 16. If you think a child has created an account, please contact us and we will delete it.
14. Security
We protect your data with an encrypted connection (HTTPS), passwordless sign-in with one-time codes that are stored only as hashes, limits on repeated attempts, a strict content security policy and access controls on our servers. No system is completely secure, but we work to protect your information.
15. Changes to this policy
We may update this policy. The date of the last update is shown at the top of this page. When the changes are significant, we will ask you to review them the next time you sign in.