Pedal Chronicle ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store and disclose your personal information when you use pedalchronicle.com and app.pedalchronicle.com (the "Service").

The Service is operated by Marcus Le Count (ABN 76 178 211 852), trading as Pedal Chronicle, based in Western Australia, Australia.

If you have any questions about this policy or your data, contact us at privacy@pedalchronicle.com.

1. Information we collect

1.1 Information you give us

  • Early access requests: your email address.
  • Account information: your name, email address and sign-in details. Sign-in is handled by Amazon Cognito; we never see your password.
  • Bikes and parts: your bikes, their components, the limits you set, your service log, and whether a part is paused or muted.
  • Preferences: your distance units and which alert emails you want.

1.2 Information from Strava

If you connect your Strava account, we receive each new ride and store:

  • Your Strava athlete ID, and the access and refresh tokens that keep the connection working
  • The ride's Strava activity ID, name (title), date, distance, sport type (for example road, gravel or virtual ride) and elevation gain
  • The Strava gear (bike) the ride was recorded on
  • Your time zone, so alert emails arrive in your morning

We also read the ride's start location and start time to look up the weather for it (see 1.3). We do not store the start location.

We do not store:

  • GPS routes or maps
  • Ride locations
  • Activity descriptions, photos or comments
  • Heart rate, power, or other health and performance data

We use Strava data only to provide the Service: tracking component wear, showing your rides and their weather, and sending the alerts you've chosen to receive.

1.3 Weather for your rides

For outdoor rides, we send the ride's start location and a few times around the ride to our weather provider, Visual Crossing, to find out whether the roads were wet and what the weather was like. Visual Crossing receives only coordinates and times: not your name, email address or Strava details. We store the result (conditions, temperature, rain and wind) with the ride.

1.4 Information collected automatically

  • IP address
  • Browser and device information
  • Pages visited and usage events
  • Technical details of errors in the app

Usage information is collected with Google Analytics to improve the product, and error reports with Sentry so we can fix problems. Sign-in sessions may use cookies or local storage managed by Amazon Cognito. We don't set marketing cookies.

2. How we use your information

  • Operate and maintain the Service
  • Manage your account and sign-in
  • Track component wear from your Strava rides, adjusted for their weather and conditions
  • Send the alert emails you've chosen (parts due for replacement, chain care after wet rides, sync problems, and the weekly summary)
  • Send important service emails and respond to early access requests
  • Improve performance and reliability
  • Run your free trial and subscription, with payments taken by Paddle

You can switch each type of alert email off in Settings, or with the unsubscribe link in any alert email. We do not sell your personal data.

3. Legal basis for processing (GDPR)

If you are in the EU or UK, we process personal data on these lawful bases:

  • Consent: early access requests, connecting Strava, and alert emails
  • Contract: providing the Service
  • Legitimate interests: product improvement, security and analytics
  • Legal obligations: complying with applicable laws

4. Who we share information with

Service providers

  • Amazon Web Services: hosting, storage, and sending email (Amazon SES)
  • Amazon Cognito: sign-in
  • Visual Crossing: weather for rides, which receives only start coordinates and times (see 1.3)
  • Google Analytics: usage analytics
  • Sentry: error monitoring
  • Paddle.com: our reseller and Merchant of Record, which takes subscription payments. Paddle collects your payment details, billing address and country directly; we never see your card. We receive your Paddle customer and subscription IDs and your subscription's status

Legal requirements

  • Where required by law or legal process
  • To protect our legal rights
  • To prevent fraud or abuse

We do not share your data with advertisers.

5. Storage and security

Your data is stored on infrastructure hosted by Amazon Web Services in Australia. We take reasonable steps to protect it, including encryption in transit, secure credential handling, access controls and industry-standard security practices. No system is completely secure, but we actively work to safeguard your data.

6. International transfers

Some of our providers, such as Google, Sentry, Visual Crossing and Paddle, may process data outside Australia. Where applicable, we take reasonable steps to make sure appropriate safeguards are in place.

7. Your rights

Depending on where you live, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Have your data deleted
  • Withdraw consent
  • Object to certain processing
  • Lodge a complaint with a regulator

You can delete your account and all of its data at any time from Settings → Delete account, or by emailing privacy@pedalchronicle.com. Data export isn't available yet, but we can help with reasonable access requests.

8. Retention

We keep personal information only as long as we need it to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. Deleting your account deletes your bikes, components, rides and service history. Early access emails are deleted on request, or once they're no longer needed.

9. Children's privacy

Pedal Chronicle isn't directed at children. We don't knowingly collect personal information from children under 16. If you believe a child has given us personal data, contact us and we'll delete it.

10. Third-party services

Pedal Chronicle works with third-party services including Strava, Visual Crossing, Amazon Web Services (including Cognito and SES), Google Analytics, Sentry and Paddle. Their own privacy practices apply to data they hold, and we are not responsible for them.

11. Cookies

We don't use marketing cookies. Sign-in and analytics tools may use cookies or local storage to keep you signed in and measure site usage. You can control cookies in your browser settings.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top. If the changes are significant, we'll let users know where reasonable.

13. Contact

Privacy questions can be sent to privacy@pedalchronicle.com.