Privacy Policy

Last updated: 20 September 2026

This policy explains what information TrainerCycle collects, why, and what you can do about it. TrainerCycle is operated by Stars and Stiles Ltd, trading as TrainerCycle ("we", "us"), a company registered in England and Wales (company number: 14294081, registered office: 19 Ermine Street, Broughton, Brigg, DN20 0AH, England).

What we collect

Account information — your name, email address, and profile photo if you sign in with Google; or your email address and a securely hashed password if you create an account directly (we never store or see your actual password — it's hashed using industry-standard methods before it ever reaches our database).
Training data — your FTP (Functional Threshold Power), workouts you build or save, and training plans you follow.
Ride and session data — power, heart rate, cadence, and timing data recorded during a live session via Bluetooth-connected devices (a trainer, heart rate strap), and completed strength sessions.
Subscription and payment status — whether your subscription is active, via Stripe (web) or Google Play (Android app). We do not see or store your card details — Stripe or Google handles payment directly and securely. For Google Play we store the purchase token and expiry date to verify your subscription.
Third-party connections — if you choose to connect Strava, we store the access tokens needed to upload rides on your behalf. If you choose to connect Garmin, we store your Garmin user ID and the access tokens needed to send workouts you choose to your Garmin Connect account. We do not read your Garmin activity, health or wellness data.
Marketing preference — whether you've opted in to receive occasional emails from us, and when you gave or withdrew that choice. You can change this any time in Settings.

Power, heart rate, and cadence data can be considered health-related information. We only use it to power the app's own features (showing your charts, calculating training metrics, syncing rides) — never sold, and never used for advertising.

Why we collect it

To provide the core service — storing your workouts, tracking your FTP, running live sessions, and keeping your ride history.
To process your subscription payment and keep your access up to date.
To upload rides to Strava, only if and when you explicitly connect that account.
To send workouts to your Garmin Connect account, only if and when you explicitly connect Garmin and choose to send a workout. You can disconnect Garmin at any time, and we delete the stored Garmin tokens when you do (or when you delete your account).
To send you occasional training tips and product updates by email — only if you've explicitly opted in, and never otherwise.

Who we share it with

Supabase — our database and authentication provider, which stores your account and training data securely.
Google — used only if you sign in with Google; we receive your name, email, and photo, nothing else.
Resend — our email delivery provider, used to send account emails (password resets, confirmations) and, only with your consent, marketing emails.
Stripe — processes web payments directly; we never handle your card details ourselves.
Google Play — processes payments made in the Android app, and verifies purchases with us.
Strava — only if you connect your account, solely to upload the rides you choose to export.
Garmin — only if you connect your account, solely to send the workouts you choose to your Garmin Connect account. We don't sell Garmin-related data, use it for advertising, or pass it to any other third party.

We do not sell your data, and we do not share it with anyone for advertising purposes.

How long we keep it & deleting your data

We keep your data for as long as your account is active. You can permanently and immediately delete your account and all associated data yourself at any time — no need to contact us:

Sign in to TrainerCycle at trainercycle.com (or in the Android app)
Go to Settings
Cancel any active subscription first (Manage Subscription), if you have one
Scroll to Danger Zone and select Delete My Account, then type DELETE to confirm

This permanently removes your account and all associated data — completed rides, workouts, strength sessions, Strava connection, settings, and subscription record — from our systems immediately. It cannot be undone.

Alternatively, email privacy@trainercycle.com and we'll delete your account and data on your behalf, usually within 7 days.

Your rights

Under UK GDPR, you have the right to access, correct, export, or delete your personal data, and to object to how it's processed — including withdrawing marketing consent at any time, either in Settings or via the unsubscribe link in any marketing email. To exercise any of these, get in touch using the contact details below.

Cookies

We use only the minimum technical cookies/local storage needed to keep you signed in. We don't use advertising or tracking cookies.

Children

TrainerCycle is not directed at, or intended for use by, children under 16.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.

Contact

Questions about this policy, or requests regarding your data, can be sent to privacy@trainercycle.com.