Privacy Policy

Last updated: 4 September 2026

1. About RideReviewer and this Policy

This Privacy Policy explains how RideReviewer collects, uses, stores and shares personal data when you use the website, connect supported services, request cycling workout reviews, communicate with support or purchase paid access.

RideReviewer is operated by Individual Entrepreneur Timofey Konstantinovich Zheglov, INN 370244313508, OGRNIP 325370000018180 (the “Operator”). Additional legal and contact information is available in the Terms of Use.

2. Data We Process

Depending on how you use RideReviewer, we may process:

• your email address, access code and account identifiers;
• onboarding information, cycling goals and preferences you provide;
• cycling activity files and workout data, including dates, routes, distance, duration, speed, heart rate, power, cadence, elevation, training zones and related metrics;
• authorization tokens and other connection data received from supported services;
• review history, service usage, subscription status and payment reference information;
• communications sent to support;
• technical information required to operate and protect the Service, including IP address, device and browser information, timestamps, request logs, diagnostic data and security events.

Where a supported service requires credentials to establish a connection, credentials are used only for the requested authentication process. RideReviewer does not intentionally store full payment-card details.

3. How We Use Data

We process data to:

• create and manage access to RideReviewer;
• connect supported services at your request;
• retrieve and analyze cycling activities;
• generate personalized workout reviews and recommendations;
• remember relevant training history, goals and previous interactions;
• provide free and paid functionality and enforce applicable limits;
• process subscription status, cancellations and refunds;
• send service-related emails and respond to support requests;
• maintain security, prevent abuse, troubleshoot errors and improve reliability;
• comply with legal obligations and resolve disputes.

4. Legal Bases

Depending on the circumstances and applicable law, processing is based on performance of the Terms of Use, your consent, legitimate interests in operating and securing the Service, or compliance with legal obligations.

You may withdraw consent where processing relies on consent. Withdrawal does not affect processing already carried out lawfully.

5. Connected Activity Sources

RideReviewer currently uses Garmin as its production activity source. The repository also implements an Intervals.icu connection, but it is disabled by default and has not been deployed, configured with the provider or verified live. This section records that implemented behavior without saying that Intervals.icu is publicly available.

When an eligible user chooses Intervals.icu, RideReviewer requests only the ACTIVITY:READ scope. It does not request calendar, wellness or write access. The successful connection automatically queues one initial import of at most 30 recent completed cycling activities. After that import, RideReviewer contacts Intervals.icu for activity data only when the user manually requests a refresh; it does not poll or use webhooks for automatic synchronization.

Subject to the source permissions and available data, RideReviewer may process cycling activity summaries and files, including timestamps, route and location information, distance, duration, speed, heart rate, power, cadence, elevation, laps, intervals, training metrics and device information. Evidence supplied as recorded sensor data remains identified separately from values calculated by Intervals.icu. Missing, restricted or unavailable activity fields and files remain unavailable rather than being invented. An activity may therefore be omitted or reviewed with explicit limitations.

RideReviewer uses connected-source data only to:

• import the cycling activities you authorize;
• create personalized ride reviews and comparisons with your own training history;
• identify training patterns and provide information-only cycling recommendations;
• operate, secure and troubleshoot the connection and the requested Service.

Connected-source data is not sold, rented, used for advertising or made public by RideReviewer. RideReviewer does not use it to train generalized or foundation artificial-intelligence models.

When you ask to receive a review through a user-selected conversational platform, such as ChatGPT or Claude, the minimum activity information necessary for that review may be transmitted to that platform at your direction. The platform processes that information under its own terms and privacy settings. RideReviewer limits the information supplied to what is necessary for the requested review.

Only one activity source can be active at a time. Garmin and Intervals.icu histories remain provider-separated and are not merged when the active source changes. Responses identify the upstream source so the user can understand where the evidence came from.

Disconnecting the implemented Intervals.icu integration immediately deletes its local encrypted token, import state and imported Intervals.icu artifacts before one bounded provider-revocation attempt. If Intervals.icu does not confirm that attempt, RideReviewer reports that revocation is uncertain and directs the user to verify authorized applications with Intervals.icu. Privacy-safe review accounting remains as a server-keyed hash of the provider and activity reference so the three-review entitlement and duplicate-review protection continue without retaining the raw Intervals.icu activity identifier in that record.

A source disconnect is not full account deletion. You may request deletion of imported activity data and associated RideReviewer account data by emailing hello@ridereviewer.com. After reasonable verification, active service copies will normally be deleted within 30 days, except for limited records retained for legal, security, fraud-prevention or dispute-resolution purposes. Backups are isolated from the active service, are not edited in place, and expire through the documented backup lifecycle; if a backup is restored before expiry, completed deletions must be reapplied before service resumes.

6. Service Providers and Third-Party Platforms

RideReviewer may use service providers and platforms necessary to operate the Service, including:

• supported activity-data providers, including Garmin and, only when enabled and available, Intervals.icu;
• conversational or artificial-intelligence platforms selected by the user, including ChatGPT or Claude where available;
• Lava.top or another disclosed payment partner for payment processing, recurring payments, subscription management and refunds;
• hosting, database, monitoring, security, analytics and email-delivery providers;
• professional advisers or public authorities where disclosure is required by law or necessary to establish, exercise or defend legal claims.

These parties process data under their own terms or on RideReviewer’s behalf, depending on their role. RideReviewer does not sell personal data.

7. International Data Processing

RideReviewer is available internationally and may use providers located in different countries. Personal data may therefore be processed outside your country of residence. Where required, reasonable contractual, organizational or legal safeguards are used for such transfers.

8. Retention

Account and training data is retained while your account remains active and for as long as reasonably necessary to provide the Service. Different periods may apply to security logs, support communications, transaction records and backups.

Some limited records may be retained after deletion where required by law, necessary to document transactions, resolve disputes, or prevent fraud and abuse.

9. Security

RideReviewer uses reasonable technical and organizational measures designed to protect personal data, including HTTPS connections, access controls, user-level data separation and restricted access to authorization tokens. No online service can guarantee absolute security.

You are responsible for keeping your RideReviewer access code and connected-account credentials confidential.

10. Your Choices and Rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent in relation to your personal data.

You may also disconnect supported services through the relevant provider and stop using RideReviewer at any time.

Requests should be sent to hello@ridereviewer.com. We may request information reasonably necessary to verify the account and protect it from unauthorized requests.

11. Children

RideReviewer is not directed to children who cannot lawfully consent to personal-data processing in their country. A minor may use the Service only where permitted by law and with any required authorization from a legal representative.

12. Changes to this Policy

This Policy may be updated when the Service, providers or legal requirements change. The current version and effective date will be published on this page. Material changes may also be communicated through the Service or by email where appropriate.

13. Contact

For privacy questions, disconnection or deletion requests, contact hello@ridereviewer.com.