Privacy Policy

Effective Date: November 9, 2026

RideIQ (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the RideIQ mobile application and website (rideiq.fit).

1. Information We Collect

a. Account Information

We may collect:

  • Email address (if you write to us, or share it when you sign in with Apple)
  • Authentication information (Sign in with Apple, and Strava, Garmin or Wahoo sign-in)

If you sign in with Apple, your Apple user ID and, the first time, the email address and name you choose to share are kept on your device. The raw Apple user ID is never sent anywhere; RideIQ uses only a one-way, salted hash of it to keep your data together across your own devices.

Your rider name and photo (from Strava, from Sign in with Apple, or chosen by you) are kept on your device and synced to your other devices through your own iCloud account. Your photo is never shown to clubs or other users; it appears only in cards and replays you choose to share yourself.

b. Strava Data

With your permission, RideIQ accesses data from your Strava account via the Strava API, including:

  • Activity data (distance, duration, speed, time zone)
  • Power data (if available)
  • Heart rate data (if available)
  • GPS route and elevation

This data is used solely to generate performance scores and insights within the app.

c. Usage and Diagnostic Data

We may collect limited technical information such as:

  • Device type and operating system
  • App usage data
  • Crash logs and diagnostics

This includes anonymized feature-usage events (for example, that a feature such as the Fitness Report was opened or shared) processed by TelemetryDeck, and app-level advertising events processed by Meta to measure our advertising: app installs, app launches, subscription purchases, the start of a free trial, and the first time you connect a ride source or import a ride. If you came to RideIQ from an Apple Search Ads advertisement, Apple tells the app which campaign it was, and that campaign information is included in the analytics. These events describe your use of the app itself. They never include your rides, routes, locations, performance data, or anything derived from your Strava, Garmin, Wahoo or Apple Health data. This information is used to improve app performance and reliability and to measure our advertising.

d. iCloud / CloudKit Data

RideIQ uses your own iCloud account to keep your data in sync between your own devices. What is kept there depends on the Keep rides in iCloud setting, which is off unless you turn it on.

Always, when you are signed in to iCloud, your iCloud key-value storage holds:

  • Scoring summaries for each ride (date, moving time, distance, climbing, time zone and best efforts for power, heart rate and speed), kept for up to 5 years
  • Monthly baselines
  • The names you give rides, and which rides you removed
  • Your rider name and a small copy of your photo
  • Equipment setups, tags, notes and preferences
  • Which ride sources you have turned on

With Keep rides in iCloud on, your private iCloud database also holds:

  • A copy of each Strava ride (its summary, recorded streams and weather)
  • Activity files you import (FIT, GPX, TCX) or receive from Garmin or Wahoo
  • RideIQ’s record of each ride: which copies of it exist and which one is used

These are stored in your private iCloud database, which only you can access; they do not appear in iCloud Drive or the Files app. Turning the setting off lets you keep the iCloud copy or delete it.

Data that comes from Apple Health is never stored in iCloud. If you use Apple Health as your ride source, your scores and baselines are calculated separately on each of your devices.

This data is associated with your Apple Account and is not accessible to RideIQ.

Club features work differently. If you join a club, what you share with it is stored in a shared CloudKit database so that other members of that club can see it:

  • Your club display name (you can change it; by default it is your Strava first name if you use Strava)
  • Your weekly results: your RideIQ Score and your weekly totals (number of rides, moving time, distance, climbing, average and top speed, average and top power, longest ride). Never your routes, locations or individual rides.
  • Messages you post in the club chat
  • Your membership, join requests, and changes you make as a club owner

Each club member is identified by a club rider ID. If you use Strava, this is your Strava athlete ID, which other members of your clubs can see. Otherwise it is a random-looking ID derived from your Apple Account that cannot be traced back to it.

If you use Apple Health, rides from Apple Health count in your club results only if you choose to share them. The app lists exactly what is shared (your RideIQ Score and the weekly totals above) before you agree, and you can stop sharing at any time, which removes the results that included them.

e. Apple Health Data

If you choose Apple Health as your ride source and give permission, RideIQ reads your cycling workouts and routes, plus heart rate, power, cadence and speed when they were recorded. RideIQ only reads from Apple Health and never writes to it.

Apple Health data is processed on your device. It is not stored in iCloud, not sent to RideIQ, never sold and never used for advertising. Two things leave your device:

  • Weather: to show the weather during a ride, the ride’s starting point, rounded to about 1 kilometre, and its date are sent to Open-Meteo (see “Weather” below). Nothing else about the ride is sent.
  • Clubs, only if you choose: if you agree to share Apple Health rides with your clubs, your RideIQ Score and weekly totals that include them are shared with members of those clubs.

You can change or remove RideIQ’s access at any time in the Health app or in your iPhone’s Settings.

f. Garmin Connect Data

If you connect your Garmin Connect account, RideIQ receives your cycling activities, including the activity file (time, distance, speed, GPS route, elevation, heart rate, power and cadence where recorded). This data is used only to analyze your rides on your device and show you your own results. With Keep rides in iCloud on, Garmin activity files are stored in your private iCloud database so they sync between your own devices.

Garmin data is never sold, never used for advertising, never shared with third parties except the service providers named in this policy, and never used to train or run AI or machine-learning models. You can disconnect at any time in RideIQ Settings, or in Garmin Connect under connected apps.

g. Wahoo Data

If you connect your Wahoo account, RideIQ receives your completed workouts recorded with Wahoo devices and apps, including the workout file (time, distance, speed, GPS route, elevation, heart rate, power and cadence where recorded). Your device downloads these files directly from Wahoo, and they are used only to analyze your rides on your device and show you your own results. RideIQ only reads from your Wahoo account and never writes to it. With Keep rides in iCloud on, Wahoo workout files are stored in your private iCloud database so they sync between your own devices.

Wahoo data is never sold, never used for advertising, never shared with third parties except the service providers named in this policy, and never used to train or run AI or machine-learning models. You can disconnect at any time in RideIQ Settings, or from your Wahoo account.

h. Push Notification Token

If you connect Strava, Garmin or Wahoo, the app sends your device’s Apple push token and your Strava, Garmin or Wahoo account ID to the RideIQ relay. This lets us tell your device when a new activity is available, so your rides appear without a manual refresh. See “The RideIQ Relay” below for details.

i. Weather

To show the weather during a ride, the app sends the ride’s starting point, rounded to about 1 kilometre, and the ride’s date to Open-Meteo, a weather service. This applies to rides from every source, including Apple Health. Nothing else about the ride or about you is sent, and the weather for the ride’s hours is picked out on your device.

j. Using the website (rideiq.fit)

The website is separate from the app: nothing you do on it is linked to a RideIQ account or your rides.

  • Visit statistics. We count page visits with Burst Statistics, which runs on our own web server. It stores no cookies and does not recognise you from one visit to the next; the figures stay on our server and are not shared. If your browser sends a Do Not Track request, your visit is not counted.
  • Forms. If you request reviewer access, we receive the name, email and details you enter, and use them only to reply.
  • Translation. If you choose a language other than English, or your browser asks for one, the page is translated by Google Translate in your browser. The page text and your IP address are sent to Google, which may set cookies (policies.google.com/privacy). The app does not use this.
  • Hosting. Like any website, our host keeps standard server logs, such as IP address and browser type, for security.

2. How We Use Your Information

We use your information to:

  • Generate RideIQ performance scores and insights
  • Sync your data across your devices via iCloud
  • Improve app functionality and performance
  • Provide customer support
  • Understand which app features are used so we can prioritize improvements
  • Measure the effectiveness of our advertising campaigns

All analysis happens on your device.

RideIQ’s scores, reports and comparisons are calculated locally on your phone, using fixed, deterministic formulas applied to your own ride history. We do not use artificial intelligence or machine-learning models, and your ride data is never sent to us, to a server, or to any third party in order to be analysed.

Network connections only move data: Strava, Garmin and Wahoo supply your rides, Apple Health supplies rides on your device, iCloud syncs your data between your own devices and powers clubs, the RideIQ relay tells your device when a new activity is available, Open-Meteo supplies the weather for a ride, and Apple Maps supplies map tiles.

The RideIQ Relay

To tell your device about new activities, RideIQ runs a small relay service hosted by Cloudflare. It stores your Strava, Garmin or Wahoo account ID and your device’s push token. For Garmin, it also stores your Garmin sign-in tokens, encrypted, because Garmin requires them to be held on our server rather than on your phone, and a one-way hash of a key your devices share, so that deleting your account from any of your devices also ends your Garmin connection. It briefly holds Garmin activity files until your devices download them.

  • Strava and Wahoo: your rides do not pass through the relay. When Strava or Wahoo tells us you have a new activity, the relay sends your device a silent notification containing only the activity ID, and your device then downloads the ride directly from Strava or Wahoo.
  • Garmin: when you finish a cycling activity, Garmin notifies the relay, and the relay downloads the activity file. Only cycling activities are downloaded. The file is stored encrypted only until each of your devices has downloaded it, then deleted, and it is never kept longer than 7 days. If a device hasn’t collected a file after a few days, the relay reminds it with another silent notification.

When you remove RideIQ’s access in Strava, or one of your devices finds that Wahoo access was removed, the relay sends your devices a silent notification so that the app disconnects that service and keeps your rides.

The relay does not analyze, sell or share your data. When you disconnect Strava, Garmin or Wahoo in RideIQ, or remove RideIQ’s access in your Strava, Garmin Connect or Wahoo account, your registration and any pending files are deleted.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data based on:

  • Your consent (e.g. connecting Strava, Garmin or Wahoo, allowing Apple Health access, or joining a club)
  • Performance of a contract (providing the RideIQ service)
  • Legitimate interests (improving and maintaining the app, including understanding which features are used)
  • Legitimate interests in promoting RideIQ (measuring the effectiveness of our advertising through app-level events such as installs and purchases), and consent where required by law

4. Data Sharing

We do not sell your personal data.

We share data only with service providers needed to run RideIQ: Apple (iCloud, CloudKit, push notifications, Maps and Search Ads attribution), Cloudflare (relay hosting) and Open-Meteo (weather), and on the website only, Google when you choose to translate a page, or when required by law.

Specifically, we share limited, non-identifying data with two providers: TelemetryDeck (privacy-focused analytics; receives anonymized feature-usage events that are hashed on your device before transmission and cannot be linked to you) and Meta (advertising measurement; receives app install, launch, purchase, trial-start and first-connection events so we can measure our ad campaigns, configured without the device advertising identifier and without cross-app tracking). Neither provider ever receives your rides, routes, locations, heart rate, power, or any data obtained from Strava, Garmin, Wahoo or Apple Health.

We do not share your data with artificial intelligence or machine-learning providers, and we do not use it to train any model.

RideIQ only accesses your Strava, Garmin, Wahoo or Apple Health data with your explicit authorization.

5. Data Retention

We retain your data only as long as necessary to provide the RideIQ service.

Data stored in your iCloud account remains associated with your Apple Account until it is deleted through the app or via a supported deletion request. Ride scoring summaries in iCloud key-value storage are kept for up to 5 years.

On the RideIQ relay, Garmin activity files are deleted as soon as your devices download them, and never kept longer than 7 days. Your relay registration is deleted when you disconnect, and expires automatically if your device hasn’t checked in for about a year.

Garmin sign-in tokens are deleted when you disconnect Garmin in RideIQ, remove RideIQ’s access in Garmin Connect, delete your account in RideIQ, or if none of your devices has checked in for about a year.

6. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request a copy of your data (data portability)

How you exercise these rights depends on where the data actually sits. Most of what RideIQ produces never reaches us.

Data on your device and in your iCloud

Your rides, scores, insights and preferences are stored on your device and in your own iCloud account. That data is already in your possession, and we cannot read it remotely: Apple’s design keeps a user’s private iCloud data inaccessible to the developer. You can review it in the app whenever you like, and delete it yourself using the in-app deletion described in section 7. For the same reason, we cannot export it or delete it on your behalf.

Club leaderboards and chat

If you join a club, your leaderboard entries and any messages you post in the club chat are stored in a shared database so that other members can see them. You can delete these from within the app. If you need help removing something you have posted, write to support@rideiq.fit.

Information we hold

A limited amount of information sits outside your device: an email address, if you have written to us or submitted a form; the usage and diagnostic data described in section 1; and, if you connect Strava, Garmin or Wahoo, your account ID and push token on the RideIQ relay, and, for Garmin, your encrypted Garmin sign-in tokens and the hash of your devices’ shared key. You can request access, correction, a copy, or deletion of that information by writing to support@rideiq.fit.

Data held by Strava

If you use Strava, your rides originate from Strava, which remains the controller of that data. You can access, export or delete it through Strava directly, and disconnecting RideIQ from your Strava account stops any further access.

Garmin, Wahoo and Apple Health data

Garmin and Wahoo are the controllers of the data in your Garmin Connect and Wahoo accounts, and your Apple Health data is managed in the Health app. Disconnecting Garmin or Wahoo in RideIQ, or turning off RideIQ’s access in the Health app, stops any further access.

7. Data Deletion

You may delete your RideIQ data at any time.

In-App Deletion

RideIQ provides a built-in feature that allows you to permanently delete your data. This process includes:

  • Deletion of ride data, scores, and analytics stored in your iCloud account
  • Removal of your club profile, weekly results, memberships, join requests and club chat messages
  • Clearing of data stored in iCloud key-value storage
  • Removal of locally stored data on your device
  • Your RideIQ relay registrations, every Garmin connection made from your Apple Account (also on your other devices), and any activity files waiting to be downloaded
  • Imported, Strava, Garmin and Wahoo ride copies in your private iCloud database

Clubs you own are handed to the member who joined earliest, or deleted if no one else is left. A club keeps a record of changes made to it (such as renames and handovers), because the club’s name and owner are worked out from it; after deletion, your entries in that record carry only your club rider ID, with no profile or name linked to it.

This action is permanent and cannot be undone.

Email Request

You may also request deletion by contacting:

support@rideiq.fit

If you no longer have access to the app, we may require you to reinstall the app to complete the deletion process, as data stored in iCloud is associated with your Apple Account.

Data Retention After Deletion

Once deletion is completed, your data is permanently removed from RideIQ-controlled storage systems. Some residual data may remain temporarily in system backups or logs, but is not used for any purpose and is deleted in accordance with standard retention practices.

8. Data Security

We take reasonable technical and organizational measures to protect your data.

Data stored in iCloud is secured by Apple and associated with your Apple Account.

The RideIQ relay is reachable only over encrypted connections (HTTPS), and data it holds is encrypted at rest.

9. International Data Transfers

Your data may be processed and stored in regions where Apple or service providers operate. By using RideIQ, you consent to this transfer.

10. Third-Party Services

RideIQ integrates with third-party services, including:

  • Strava (for activity data)
  • Apple iCloud, CloudKit and push notifications
  • Apple Maps (for map tiles)
  • Apple Search Ads (to learn which ad campaign brought you to RideIQ)
  • TelemetryDeck (anonymized app-usage analytics): telemetrydeck.com/privacy
  • Meta / Facebook SDK (advertising measurement): facebook.com/privacy/policy
  • Apple Health (HealthKit), used on your device only
  • Garmin Connect (activity data): garmin.com/privacy
  • Wahoo (activity data): https://www.wahoofitness.com/privacy-policy
  • Cloudflare (relay hosting): cloudflare.com/privacypolicy
  • Open-Meteo (weather): open-meteo.com/en/terms
  • Google Translate (website translation only): policies.google.com/privacy

Your use of these services is subject to their respective privacy policies.

11. Children’s Privacy

RideIQ is not intended for children under the age of 13, and we do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

13. Contact

RideIQ is developed and operated by an independent developer.
Questions or requests: support@rideiq.fit