← Back to Home

Privacy Policy

Effective: February 18, 2026

Overview

We do not sell your data to anyone, under any circumstances. All data we collect is used solely to improve Ergmatic.

Data Collection

Ergmatic collects and stores the following data locally on your device:

  • Workout files you import
  • Ride history and activity data
  • Device connection preferences (trainer, heart rate monitor)
  • App settings and preferences

Data Storage

Your workout data, ride history, and app settings are stored locally on your device (and in your iCloud account if you enable sync). We do not operate servers that store your personal workout data. However, we use third-party services for analytics (PostHog), crash reporting (Sentry), and subscription management (RevenueCat), and maintain a transient server-side component for OAuth authentication with services like Strava and Intervals.icu. See the sections below for details.

Third-Party Services

When you choose to sync with third-party services like Intervals.icu or Strava, you are subject to their respective privacy policies. We only transmit the data necessary for these integrations to function.

Both Strava and Intervals.icu integrations use a server-side proxy for the initial OAuth token exchange. See the Strava Integration section below for details on how this works. The same process applies to Intervals.icu authentication.

Strava Integration

If you choose to connect your Strava account, Ergmatic integrates with the Strava platform to upload your completed workouts. This integration is optional and requires your explicit authorization.

Data we receive from Strava:

  • Your Strava athlete ID
  • Your first and last name (for display purposes only)

Data we send to Strava:

  • Completed workout files (FIT format) containing power, heart rate, cadence, and duration data
  • Activity metadata (workout name, activity type)

How we protect your credentials:

  • During the authorization process, a server-side proxy handles the initial token exchange. Tokens are then stored securely in your device's iOS Keychain. The proxy does not retain your tokens.
  • We never store your Strava password

When you disconnect from Strava, we immediately delete your authentication tokens and revoke access with Strava's servers. Your previously uploaded activities remain on Strava unless you delete them directly through Strava.

Strava may collect data about your use of their API. For more information, see Strava's Privacy Policy.

Apple Health

If you grant Ergmatic permission to access Apple Health, we write the following data from your completed workouts:

  • Heart rate, power, and cadence samples
  • Calories burned and workout duration
  • Functional Threshold Power (FTP)
  • Body weight (if you set it in the app)

We do not read any data from Apple Health. All HealthKit data remains on your device and in Apple Health. We do not transmit HealthKit data to any server or third-party service.

Analytics

We use PostHog to collect usage analytics. This helps us understand how people use the app so we can improve it. The data collected includes:

  • Feature usage patterns (e.g., which screens are visited, which actions are taken)
  • Device type and operating system version
  • App version

We use a persistent device identifier to correlate analytics and crash reports, but this identifier is not linked to your name, email, or any external account. We do not use this data to identify you personally. We do not track your location, contacts, or browsing activity.

The only health-related data we collect is your Functional Threshold Power (FTP), which may come from ramp test results or manual input. This is used solely to understand product usage patterns and is not linked to your identity.

Crash Reporting

In the event of a crash or error, we use Sentry to collect diagnostic data. This helps us identify and fix bugs to improve app stability. The data collected includes:

  • Device type and operating system version
  • Error messages and stack traces
  • App version and session context

Crash data is collected using the same pseudonymous device identifier as analytics. It is not linked to your name, email, or any external account.

Subscription Management

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat receives the following data:

  • Purchase receipts and subscription status
  • A pseudonymous device identifier
  • Device type

RevenueCat does not receive your name, email, or workout data. For more information, see RevenueCat's Privacy Policy.

Data Retention

Your Rights

Local data. Your workout data, ride history, and settings are stored on your device and managed directly by you. You can delete this data at any time by removing it within the app or deleting the app.

Analytics and crash data. To request deletion of analytics or crash data associated with your device identifier, email privacy@ergmatic.com.

California residents. Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, to request its deletion, and to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at privacy@ergmatic.com. We will not discriminate against you for exercising these rights.

Children's Privacy

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app and personal information may have been collected, please contact us at privacy@ergmatic.com and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will provide at least 14 days' advance notice of material changes by posting an in-app notification or sending a push notification, and by updating the effective date at the top of this page. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes. If you do not agree, you may stop using the Service before the new policy takes effect.

Contact

If you have questions about this privacy policy, please contact us at privacy@ergmatic.com.