WattzLeft ("we", "our", or "the App") is an indoor cycling companion tool designed to help athletes track their Zwift route achievements, compute Watts-per-Kilogram (W/kg) performance metrics, calculate Coggan power training zones, and plan virtual rides.
We value your privacy and practice data minimization. This Privacy Policy explains what information is collected, how it is used, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Information We Collect
When you use WattzLeft, we collect only the minimal data required to provide app functionality:
- Strava Profile Data (Optional): If you choose to connect your Strava account, we receive your public display name, public profile avatar URL, Strava athlete ID, body weight (if provided), and Functional Threshold Power (FTP, if provided).
- Strava Virtual Rides: We read the names and workout descriptions of your virtual cycling activities solely to cross-reference and verify completed Zwift route badges.
- Guest Mode Progress: If you use the app without connecting Strava, your route completions and settings are stored locally on your device in offline storage and never transmitted to our servers.
What We Do NOT Collect:
We never collect, store, or sell:
- Passwords or credentials (authentication is handled securely via Strava OAuth).
- Email addresses or phone numbers.
- Financial, credit card, or payment data.
- GPS tracks, map coordinates, or location files (GPX/FIT).
- Biometric or clinical medical data (such as heart rate curves or health records).
2. How We Use Your Information
We use the collected information strictly to:
- Calculate your Watts-per-Kilogram (W/kg) and Coggan 7-Zone power training targets.
- Automatically mark completed Zwift routes on your route checklist and world progress maps.
- Provide personalized estimated ride times based on your weight and power output.
3. Third-Party Services
WattzLeft integrates with the following trusted third-party providers:
- Strava API: Used for secure single-sign-on and virtual activity synchronization under Strava's API Terms of Service.
- Google AdMob: May display non-intrusive or user-initiated rewarded ads. AdMob may process standard mobile advertising identifiers in accordance with Google's Privacy Policy.
- Cloudflare: Our backend API and database run on Cloudflare Workers and Cloudflare KV with full encryption in transit (HTTPS/TLS) and at rest.
4. Data Retention & Security
Your data is stored securely in encrypted cloud storage. Inactive user sessions automatically expire after 30 days. We do not maintain historical logs of your activities.
5. Your Rights & Data Deletion (GDPR & CCPA)
Under GDPR and CCPA, you have the right to access, export, or delete your personal data at any time:
- Instant Account Deletion via Strava: You can revoke WattzLeft's access at any time in your Strava account settings (Settings > My Apps > Revoke Access). We have implemented real-time Strava deauthorization webhooks; the moment access is revoked, our servers automatically delete your user profile and all associated data.
- In-App Logout: Logging out immediately wipes your active session and local device cache.
- Local Guest Data: You can clear your guest completions at any time by clearing app data in your phone's settings or reinstalling the app.
6. Children's Privacy
WattzLeft is not directed to individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
8. Contact Us
If you have questions about this Privacy Policy or wish to request data deletion manually, please contact:
support@wattzleft.com