Pedal Path (“we”, “us”) is a cycling tracker for
iPhone and Apple Watch. This policy explains what we collect, how we use it, and
the choices you have. We keep data collection to what the app needs to work —
there is no advertising and no third-party analytics or tracking.
Information we collect
Account information — your email address and password, used
to create and secure your account. Passwords are handled by our authentication
provider and stored only in hashed form; we never see your plaintext password.
Profile — a display name you choose, shown to members of
groups you join.
Ride data — when you record a ride: your route (GPS
coordinates over time), distance, duration, elevation gain, and start/end times.
Heart rate (Apple Health) — if you ride with an Apple Watch
and grant permission, we read your heart rate to show it during the ride and
save it with that ride.
Purchase status — whether you’ve unlocked the one-time
“Pro” upgrade. Payments are processed by Apple; we do not receive or
store your payment details.
How we use your information
To provide the core features: record and display rides, draw your route map,
compute stats, and power group leaderboards.
To show your heart rate during and after a ride, and (with your permission)
to save your ride to Apple Health as a workout.
To maintain your account and your Pro entitlement.
We do not use your information for advertising or marketing,
and we do not sell it.
Apple Health (HealthKit)
We read heart rate from Apple Health to display it on your rides.
We write completed rides to Apple Health as workouts, only if
you grant permission.
We never use Health data for advertising or marketing, and never sell or share
it with third parties for those purposes. Heart rate you record is stored with your
ride so it can be shown to you and, as described below, to members of groups you
choose to join.
How information is shared
With members of groups you join — when you create or join a
group, your display name, ride stats, and the rides you record (route, and heart
rate if recorded) become visible to other members of that group.
Service providers — we use Supabase to host our database,
authentication, and storage. Your data is processed on their infrastructure on
our behalf.
Apple — in-app purchases are handled by Apple under Apple’s
privacy policy.
We do not sell your data, and we do not use third-party advertising or
analytics SDKs.
Data retention and deletion
We keep your data while your account exists.
You can delete your account at any time in the app: Settings →
Delete Account. This permanently deletes your account, your rides, and your group
memberships. Groups you own are transferred to another member, or deleted if you
are the only member. Deletion cannot be undone.
Rides you previously wrote to Apple Health remain in Apple Health; you can
remove those in the Apple Health app.
Security
Data is encrypted in transit (HTTPS). Access is enforced at the database level
by row-level security, so you — and only the group members you choose — can see
your rides.
Children
Pedal Path is not directed to children under 13 and is rated 4+. We do not
knowingly collect personal information from children under 13.
Changes to this policy
If we make material changes, we will update the effective date above and, where
appropriate, notify you in the app.