1. Scope
This policy describes how Ride the Tape ("Ride the Tape," "we," or "us") handles information when you use the Ride the Tape mobile app, visit ridethetape.com, or contact us. It also describes your choices.
2. Information we handle
Account information
If you choose to sign in, Apple or Google and Firebase Authentication may provide an account identifier, name, email address, profile image, authentication tokens, and related sign-in metadata. Signing in is optional unless a future feature specifically requires an account.
Ride and fitness information
The app may process workout duration, distance, speed, cadence, power, heart rate, simulated grade, calories, and trainer-control events. Ride history and detailed workout data are stored locally first. If you sign in, completed rides and their telemetry sync to a private Firebase Cloud Firestore library associated with your account. You can also deliberately export a ride to a service or file.
Connected-device information
To connect to equipment you select, the app processes Bluetooth device names, identifiers, capabilities, sensor readings, and connection preferences. Bluetooth access is used for smart trainers, exercise bikes, heart-rate monitors, power meters, speed/cadence sensors, and compatible accessories.
App content and preferences
The app stores settings such as distance units, trainer safety limits, FTP, ride-control preferences, favorite tickers, watchlists, and interrupted-ride recovery information locally on your device.
Market and company-content requests
When you request a chart or company update, the app may send the ticker, date range, and request parameters to the market-data or company-news provider configured in that version of the app. Those requests may also expose ordinary network information, such as your IP address, to that provider. The app does not need to send your ride history with these requests.
Website and service logs
Cloudflare and other infrastructure providers may process IP addresses, request timestamps, browser or device information, and security logs to deliver and protect the website and authentication services. We do not currently use advertising trackers or third-party website analytics.
3. How we use information
- Operate, secure, and troubleshoot the app and website.
- Authenticate you and maintain your chosen sign-in session.
- Create rides, control compatible equipment, and display metrics.
- Save your settings and ride history on your device.
- Sync completed rides across your signed-in devices.
- Complete exports or integrations that you explicitly request.
- Comply with law and protect users, our services, and our rights.
4. When information leaves your device
Information may be processed by the following services:
- Google Firebase: optional account authentication, security, and private storage and synchronization of completed rides and detailed ride telemetry. Firebase Analytics is not currently enabled.
- Cloudflare: website delivery, security, and secure authentication callbacks.
- Strava: only when you connect Strava. Connecting through Strava's authorization page gives Ride the Tape permission to upload rides; we do not import your Strava activity history or other athletes' data. While connected, each finished ride is uploaded automatically after a short Undo window, and you can post a saved ride from History. The uploaded workout file carries timing, distance, power, cadence, speed, and heart rate when recorded, and no ticker. By default the activity's title and description name the ride itself: the ticker and date range, the market move that shaped the course, its difficulty, and for a roundup or open ride each ticker with its move or the time you spent on it. That text is visible to whoever can see the activity under your Strava privacy settings. Turn off Include ride details in Settings → Strava to post a plain "Indoor Ride" with no description instead. From Strava we receive only connection tokens, your Strava athlete identifier, and the upload status and activity identifier for each ride; tokens are held in secure device storage. You can disconnect in Settings, which clears the local credentials and requests revocation from Strava; if revocation cannot be completed, the app tells you how to remove access in your Strava account settings. If you remove Ride the Tape in your Strava account settings instead, the app clears its connection the next time it tries to post a ride. Disconnecting does not delete activities already uploaded to Strava; you can edit or delete those on Strava. Strava may monitor and collect data about use of its API and use that information for internal or external business purposes, including service improvements, support, and compliance checks. See Strava's Privacy Policy for its data practices. To request deletion of information held by Ride the Tape, use our account deletion instructions or contact privacy@ridethetape.com.
- Apple Health or Android Health Connect: only when you grant permission and ask the app to save an indoor cycling workout.
- Market-data and company-content providers: ticker and date-range requests needed to provide the chart or content you ask for. Providers may change before release and will be reflected in the app's store disclosures.
We may also disclose information when legally required, to prevent fraud or harm, or as part of a business transaction subject to appropriate protections. We do not sell your personal information.
5. Storage, security, and retention
Local ride history and preferences remain on your device until you delete them or remove the app. Signed-in ride history and telemetry remain in your private Firebase library until you delete your account or we delete them in response to a verified request. Authentication tokens and Strava credentials are stored using platform-protected storage where available. We may retain limited records when reasonably necessary for security, fraud prevention, legal compliance, or dispute resolution. We use reasonable safeguards, but no system is completely secure.
6. Your choices and deletion
- Use the app without signing in when account features are optional.
- Sign out of your Ride the Tape account from Settings.
- Delete local ride data from Settings → Privacy, legal & account.
- Disconnect Strava from Settings.
- Turn Strava ride details on or off from Settings → Strava.
- Change Bluetooth, Health, and other permissions in system settings.
- Delete your account, synced rides, telemetry, and local ride library directly from Settings → Privacy, legal & account, or use our external account deletion instructions if you no longer have the app.
7. Children
Ride the Tape is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can address it.
8. International processing
Our providers may process information in the United States and other countries. Those countries may have different data-protection laws from where you live.
9. Changes to this policy
We may update this policy as the app evolves. We will post the revised policy here and update the effective date. Material changes will be communicated through the app or another reasonable channel when required.
10. Contact
Privacy questions and requests may be sent to privacy@ridethetape.com.