Privacy Policy

Last updated: August 2026

VeloMaintaino ("we," "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

When you connect your Strava account, we collect and store:

• Your Strava athlete ID, first name, and last name
• Your Strava OAuth tokens (to sync rides on your behalf)
• Your ride history: activity name, date, duration, distance, gear (bike) ID, and route polyline
• Your maintenance logs: dates, service types, intervals, and notes that you enter manually

We do not collect heart rate, power, GPS coordinates, segment efforts, or any Strava social data.

2. How We Use It

All data collected from your Strava account is used solely to provide the VeloMaintaino service — calculating service intervals, displaying your dashboard, and storing your maintenance history. We never use your ride data, maintenance logs, or Strava profile for advertising, and we do not send any of it to analytics platforms.

Separately, we measure traffic to our public pages (the homepage, this page, and our terms page) using Google Analytics, so we can understand how people find the site. This runs only on those public pages — it is not loaded once you are signed in, so your activity inside the app is never sent to Google. What Google Analytics collects is standard web measurement data: pages viewed, approximate location derived from IP address, device and browser type, and referring site. It is never combined with your Strava data or your maintenance logs.

3. Data Sharing

We do not sell or rent your data. Your maintenance logs are private and visible only to you, and are never shared with anyone. Two third-party services are involved in running VeloMaintaino:

• Strava — whose API we use to retrieve your ride data
• Google Analytics — which measures visits to our public pages only, and receives no Strava data, no maintenance logs, and nothing at all from inside the signed-in app

4. Data Storage & Security

Your data is stored in a secured database hosted on Render (render.com) in the United States. Access tokens are stored encrypted. We apply reasonable technical measures to protect your data, though no system is perfectly secure.

5. Your Rights

You have the right to:

• Access your data — request a full export at any time
• Delete your data — we will remove all records within 48 hours of your request
• Revoke access — disconnect VeloMaintaino from Strava at any time via your Strava settings at strava.com/settings/apps

To exercise these rights, email hello@velomaintaino.com.

6. Cookies

VeloMaintaino uses a single session cookie to keep you logged in. We do not use advertising cookies, and we never sell or share cookie data with advertisers.

Our public pages also load Google Analytics, which sets its own cookies to tell repeat visits from new ones. These are not set on the signed-in app. You can opt out across all sites using Google's browser add-on, or by blocking cookies for this site in your browser — VeloMaintaino works normally either way.

7. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Service constitutes acceptance of the updated policy.

8. Contact

Questions about privacy? Email us at hello@velomaintaino.com.