Consumer Health Data Privacy Policy

Data we collect and why

• Heart and breathing measurements: heart rate, heart rate variability, RR intervals, PVC detection results, breathing rate, tidal volume, and minute ventilation.
• Body and training measurements: weight, sex, date of birth, maximum heart rate, and lactate threshold heart rate.
• Session records: your effort ratings, the poses and exercises in a session, and session names and cues you write.
• What you tell us: anything you tell Atlas about your health.
• Figures we work out from these: heart rate zones, calories, training load, and fitness, fatigue, and form.

We collect and use this data to provide Ride Cave to you: to run your sessions, keep your history, show your health and fitness analytics, and power the AI features you use. We store and process it on our hosting providers' servers. We do not sell it or use it for advertising.

Where it comes from

• You, when you enter it, rate a session, or talk to Atlas.
• Sensors and devices you connect, such as heart rate monitors and breathing sensors.
• Services you connect: Strava, Intervals.icu, Wahoo, and Garmin Connect.
• A coach you accept, who can edit your training numbers.
• Our own calculations from the data above.

What we share and who receives it

We share the data above only as follows, and we have no affiliates that receive it.

• Fitness services you connect (Strava, Intervals.icu, Wahoo, and Garmin Connect): the session records and measurements in the activities you send or choose to sync.
• A coach you accept: your weight, sex, maximum and lactate threshold heart rate, session records, measurements, and calculated figures.
• Other Ride Cave users, according to your privacy settings: your session names, heart rate summaries, calories, and training load, and your weight if you choose to show it. People in a group session with you see your live performance data. Your energy on a run, and the pace in a track race, are worked out using your weight, so someone could estimate it from them.

Service providers also process this data for us, only to provide Ride Cave: cloud hosting and infrastructure (Supabase and Cloudflare) and our AI model provider (Anthropic), when you use an AI feature. Third parties may not collect this data over time and across other websites or online services through Ride Cave.

Your rights and how to use them

You have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access it, including a list of the third parties and affiliates we have shared it with and an email address or online way to contact them.
• Withdraw your consent to our collecting and sharing it. Disconnecting a sensor stops new collection from it.
• Have it deleted, including from our archives and backups and by the people we shared it with. Deletion from archives and backups can take up to six months.
• Review and correct it, which you can do in your account settings.

To make a request, use our contact form at https://ridecave.com/contact. Send it while signed in to the account the data belongs to, or tell us that account's email address, so we can confirm it is yours; you do not need to create an account. We respond within 45 days, and if we need up to 45 more, we will tell you why within the first 45. Requests are free up to twice a year.

If we decline your request, you can appeal through the same form by starting your message with "Appeal". We will reply in writing within 45 days, with our reasons. If we deny your appeal, we will tell you how to submit a complaint to your state's attorney general.

Changes to this policy

We post any change here with a new effective date, and tell you in the app or by email if it is material. We ask for your consent before we collect, use, or share a category of this data, or use it for a purpose, not listed here.