Privacy
Last updated May 2026. This page supports Strava API application review and general transparency.
Account
Sign-in is provided by Clerk. We store your Clerk user id in our database to associate saved rides and preferences with your account.
Strava (optional)
If you connect Strava, we request OAuth scopes read,activity:read_all so pasted Strava activity and route URLs can be loaded, including items marked private to you. Access and refresh tokens are encrypted and stored in an httpOnly cookie in your browser. When you are signed in, we may also store the same encrypted token bundle in our database keyed to your account so we can honor deauthorization events from Strava and restore your session across devices.
We call Strava's API only to resolve routes you submit for briefs. We do not sell Strava data or use it for advertising.
Ride with GPS (optional)
If you connect Ride with GPS, tokens are stored similarly for loading route and trip URLs you paste.
Brief generation
Route text, optional rider profile, and retrieved route metadata may be sent to Anthropic to generate your brief. See Anthropic's privacy policy for how they process API requests.