Privacy Policy
Last updated: April 2026
1. Who We Are
CycloScout is an AI-powered cycling route exploration platform. This Privacy Policy explains how we collect, use, and protect your personal data. Given the early-stage nature of the Service, data is protected on a best-effort basis, and we continuously work to improve our security practices.
2. Data We Collect
- Account data: Email address (if registered via email/password) or your Strava athlete ID and display name (if registered via Strava).
- Saved routes: GPX route data you choose to save to your account.
- Usage logs: Basic server access logs retained for security and debugging purposes.
3. Strava Integration
Connecting your Strava account is entirely optional. When you do, CycloScout requests access to your public routes only by default. Access to private routes requires your explicit consent, granted through Strava's own authorisation screen.
You can revoke CycloScout's access to your Strava account at any time via Strava's settings: strava.com/settings/apps. Revoking access does not delete your CycloScout account.
4. Route Data Processing
When you run a research query on a route, CycloScout does not transmit your full GPS track to third-party services. Instead, it processes a representative sample of GPS points (a geographic corridor) to minimise data exposure while enabling relevant results.
5. Third-Party Services
Your data may be processed by the following providers in order to operate the Service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Authentication & database | EU |
| Vercel | Web application hosting | EU |
| Railway | Agent service hosting | EU |
| Logfire | Observability & error logging | EU |
| Overpass API (OpenStreetMap) | Points of interest data | EU |
| OpenRouteService | Route editing & directions | EU |
| OpenAI | LLM provider | US |
OpenAI: As of 1 March 2023, data sent to the OpenAI API is not used to train or improve OpenAI models. See OpenAI's privacy policy for details.
6. Data Retention
Account data is retained for as long as your account remains active. Saved routes are retained until you delete them. To request deletion of your account and associated data, please contact us via the platform.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, please contact the CycloScout team via the platform.