Cyklex Privacy Policy

Last updated: September 21, 2026

Overview

Cyklex is a cycling tracking app. We collect only the data needed to provide ride recording, maps, routes, profiles, sharing, notifications, support, and optional sync features. We do not sell personal data and we do not use personal data for cross-app tracking.

Data Controller

The data controller for Cyklex is Kimon Tønnesen, Balders vei 4, 6511 Kristiansund, Norway.

Data We Collect

• Location data during active ride recording, including GPS route points, speed, distance, elevation, and ride duration.
• Account data when you sign in, including user ID, email address when available, and authentication provider details handled by Supabase Auth.
• Profile data you choose to provide, including name, username, avatar, cover image, bio, public location settings, cycling preferences, age, weight, and biological sex.
• Ride and route content, including ride names, notes, photos, likes, planned routes, sharing links, and Apple Health preferences.
• Support and feedback content you send through the app.

How We Use Data

We use data for app functionality: recording rides, calculating cycling metrics, showing maps, saving history, syncing your account, publishing optional Apple Health workouts, sending notifications, supporting social features, and responding to support requests.

Legal Bases

We process account, ride, route, and profile data to provide the Cyklex service you request. We process security, abuse-prevention, and essential diagnostic data for our legitimate interest in operating a safe and reliable service. Optional Health, activity heatmap, notification, and connected-service processing is based on your choice or consent and can be disabled.

Location and Background Use

Cyklex uses precise location only to record rides and provide route features. Background location is used only during active ride sessions so rides continue recording while the screen is locked or the app is backgrounded.

Optional Activity Heatmap

The global activity heatmap is optional. Contribution is off by default and is available only to signed-in users. If you turn on Contribute rides in Map settings, Cyklex uses the route points from your completed rides from the previous 90 days to calculate aggregated cycling activity.

The public heatmap contains coarse area cells or route corridors, activity intensity, and the number of contributing users. A cell or corridor is published only when at least 10 different users have contributed to it. Public heatmap responses do not include account identifiers or individual ride routes.

You can withdraw consent at any time by turning off Contribute rides. Your rides stop being included the next time the aggregate is rebuilt, normally during the nightly rebuild. Turning contribution off does not delete your private ride history; you can delete rides or your account separately.

Third-Party Services

Cyklex uses Supabase for authentication, storage, and data sync; Mapbox and other map or routing providers for maps and route planning; and Apple services for Sign in with Apple, notifications, Live Activities, and optional Health publishing.

Map providers receive network and technical information needed to deliver map content, such as your IP address and the geographic area requested. On native platforms, the Mapbox SDK can also send de-identified location and usage telemetry to Mapbox. Mapbox attribution links to Mapbox privacy information.

Retention and Security

Account content is kept while your account is active or until you delete it. Ephemeral live-location data expires automatically. Support, security, and administrative records are kept only as long as needed for support, fraud prevention, legal obligations, or service integrity; account identifiers in retained administrative records are removed or anonymized when the account is deleted. We use HTTPS, access controls, and restricted service credentials to protect server data.

International Processing

Our service providers may process data outside Norway or the EEA. Where required, those transfers rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism provided by the relevant service provider.

Account Deletion

You can delete your account in the Cyklex app from More. Your authentication account, profile, rides, routes, uploaded profile and gear images, connections, preferences, and social content are deleted immediately. Aggregated heatmap output contains no account identifier and is recalculated after source rides are removed. If you used Sign in with Apple, Cyklex attempts to revoke the Apple credential during deletion. If Apple revocation is unavailable, the app tells you to remove Cyklex in your Apple Account settings.

Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw optional consent in the app. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

Contact

For privacy questions or rights requests, contact Kimon Tønnesen at Balders vei 4, 6511 Kristiansund, Norway, or email privacy@cyklex.app.