Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an event room or upload GPS activity files (FIT, GPX). This data may include location coordinates, timestamps, and biometric telemetry.

2. How We Use Your Information

We use the information we collect primarily to provide, maintain, and improve our services, particularly the activity comparison and visualization features.

3. Information Sharing & Visibility Scope

Event rooms are collaborative spaces designed for synchronized activity comparison. Data visibility is strictly limited to the participants of the specific room you join or create:

• Room-Scoped Sharing: By joining a room or uploading an activity (via file or Strava), your route and selected telemetry will be rendered only for other participants within that same room to facilitate group playback and analysis.
• No Public Feeds or Aggregators: We do not publish your activities, routes, or telemetry to public discovery feeds, global leaderboards, or commercial aggregators.
• No Selling of Data: We never sell, rent, or monetize your personal information or activity data to third parties or advertisers.

4. Data Retention

Activity files and room data are stored securely on our servers to facilitate replay and analysis. You can request deletion of your data at any time.

5. Strava API Data Usage, Retention & Revocation

When you choose to connect your Strava account to Splitz, we obtain limited access to your profile and activities through Strava OAuth.

• Purpose & Visibility: Strava activity streams (time, GPS coordinates, altitude, heart rate, power, cadence, and speed) are used solely to generate the synchronized group ride replay and telemetry visualizations for the specific room you choose to import into. Data is never displayed to users outside that room.
• Prohibition of AI / Machine Learning Training: In strict compliance with the Strava API Agreement, we do not use, and do not permit third parties to use, any Strava Data (including routes, telemetry, streams, and athlete profile details) to train, retrain, or fine-tune artificial intelligence, machine learning, or large language models.
• Retention: Strava access tokens are stored strictly in transient, encrypted HTTP-only session cookies and are never persisted in databases, query logs, or URL parameters. Telemetry data uploaded to a room is retained only to support that room's replay and can be permanently removed at any time using the delete button in the activity group sidebar.
• Revocation: You may disconnect Splitz from your Strava account at any time by clicking Disconnect in the app, or by visiting Strava Settings > My Apps and clicking Revoke Access. Once revoked, Splitz immediately loses all ability to query Strava on your behalf.

6. Contact Us

If you have any questions about this Privacy Policy or wish to request data removal, please contact us at support@activity-splitz.cc.