Your Privacy Matters
Privacy Policy
Torqa turns your ride data into analytics, medals, and coaching. This policy explains what we collect, how we use and share it, and the control you have.
Last updated: June 2026
The short version
- We collect your account details, the Strava ride data you connect, content you add, and how you use the app.
- We use it to compute your metrics and power features like Replay, leaderboards, routes, and the AI Coach.
- We share data only with the service providers that run Torqa, and with other users when you choose to.
- We never sell your data and don’t use it for advertising.
- You can permanently delete your account and all your data from Settings at any time.
Information We Collect
Account & Identity
- Your email address and name, and the sign-in method you choose (email, Apple, or Google), handled through our authentication provider (Clerk).
- A randomly-generated account identifier used to link your subscription to your account.
Ride & Fitness Data
- Activities synced from Strava with your permission: power, heart rate, cadence, speed, elevation, and the GPS route of each ride.
- Your Strava profile basics (name, picture, weight, FTP) to personalise calculations.
- Metrics we compute from your rides: power bests, training load (CTL/ATL/TSB), zones, medals, gauntlet efforts, and segment results.
Photos & Content You Add
- Photos you choose to attach to rides or Stories — we access your photo library only when you pick a photo, never in the background.
- Captions, reactions, comments, and other content you create in the app.
Social Connections
- Your friends, group memberships, and the leaderboards and segments you participate in.
- Interactions you make with others — comments, reactions, and shared activities.
Device & Usage
- A push-notification token (from Apple) so we can notify you about activity, achievements, and imports.
- Product-analytics events and session replays that show how the app is used (see “Analytics & Session Replay” below).
- Basic device and diagnostic information for app functionality and crash reporting.
Subscriptions
- Your Torqa Pro subscription status and a transaction identifier. Payment is processed entirely by Apple — we never see or store your card or payment details.
How We Use Your Data
- Compute your analytics, fitness metrics, personal records, and medals.
- Power features you use — Replay, leaderboards, gauntlets, route planning, and the AI Coach.
- Sync and securely store your data so it’s available across sessions and devices.
- Send notifications you’ve opted into and respond to support requests.
- Operate, secure, debug, and improve the app.
The AI Coach & Automated Processing
- When you use the Coach, the relevant fitness data (metrics, recent activities) and your question are sent to Anthropic to generate a response.
- Anthropic processes this to produce the reply and, under its commercial API terms, does not use your inputs or outputs to train its models.
- The Coach is optional — if you don’t use it, none of your data is sent for AI processing.
How Your Data Is Shared
With Other Users
- Content you choose to share — photos, Stories, activities, comments, and reactions — is visible to people you connect with.
- Leaderboards and group features show your name, picture, and results to members you’re competing with.
- You control your audience with the visibility settings in the app.
What We Never Do
- We never sell or rent your personal data.
- We don’t use advertising trackers, ad identifiers, or sell data to advertisers.
- We don’t access your contacts, camera, or microphone.
Service Providers (Sub-processors)
We share data with the providers that operate Torqa. Each handles only what’s needed for its purpose.
| Provider | What they handle | Why |
|---|---|---|
| Strava | Activity & profile data (with your authorization) | The source of your ride data, via read-only OAuth |
| Clerk | Email, name, sign-in credentials | Account sign-in and identity |
| Cloudflare | All app data — databases, ride streams, photos, compute | Hosting, storage, and content delivery |
| Anthropic | Training data & questions you send to the Coach | Generating AI Coach responses |
| PostHog | Product-analytics events & session replays | Understanding usage and diagnosing issues |
| Apple | Subscription purchases & push delivery | App Store payments and notifications |
| OpenRouteService | Start/end and route coordinates | Generating routes you request |
Analytics & Session Replay
- We use PostHog to understand how the app is used and to find and fix problems.
- This includes session replays — recordings of how you navigate the app. We mask the text you type and sensitive system views; other content shown on screen may be captured.
- This is used only to operate and improve Torqa — never for advertising. Contact us to opt out.
Storage, Security & Transfers
- Your data is stored on Cloudflare’s global infrastructure in encrypted databases and object storage.
- Authentication tokens are kept in your device’s secure Keychain; all communication is encrypted over HTTPS/TLS.
- Because our providers operate globally, your data may be processed in countries including the United States. Using Torqa consents to these transfers.
Data Retention
- We keep your data while your account is active so the app works across sessions.
- When you delete your account, your personal data is removed promptly; limited records may persist briefly in backups and provider logs before rotating out.
Your Rights & Choices
- Access: View the data we hold about you directly in the app.
- Deletion: Permanently delete your account and all associated data at any time — see “Deleting Your Account”.
- Disconnect: Unlink Strava from Settings to stop further syncing; your existing data stays until you delete it.
- Notifications: Turn push notifications off in your device settings.
- Subscription: Manage or cancel your subscription in your Apple App Store account.
- Analytics: Contact us to request that we exclude your activity from product analytics and session replay.
- Portability: Your ride data originates from Strava and remains exportable there.
If you’re in the EU/EEA or UK, you also have the right to rectify, restrict, or object to processing, and to lodge a complaint with your local data-protection authority. If you’re in California, you have the right to know, delete, and opt out of “sale” of personal information (we don’t sell it) without discrimination. Contact us to exercise any of these.
Deleting Your Account
- You can permanently delete your account anytime from Settings → Delete Account.
- This removes your profile, activities, computed metrics, photos, social content, and your sign-in — across our databases, file storage, and authentication provider.
- Deletion is immediate and cannot be undone.
Children’s Privacy
- Torqa isn’t directed at children under 13 (or under 16 in the EU/EEA), and we don’t knowingly collect their data.
- If you believe a child has provided us data, contact us and we’ll remove it.
Changes to This Policy
- We may update this policy as the app evolves; we’ll revise the “Last updated” date above.
- For material changes, we’ll provide notice in the app or by email.
Contact Us
Questions about your privacy, or want to exercise your rights? Get in touch.
[email protected]