Privacy Policy

Data controller

The data controller is DB TECH (90A rue Nationale, 59112 Annœullin, France). For any question about your data or to exercise your rights: delbecq.william@gmail.com.

Data we collect

• Account: email address, first and last name (optional), profile picture (if signing in with Google), preferred language and units.
• Connections: Strava OAuth access tokens and Garmin credentials/tokens, stored securely to sync your activities. We only access the permissions you grant.
• Activities: sync history (activity id, Strava and Garmin names, sport type, date, duration, status).
• Subscription: Stripe customer id, subscription status and period. No card data is stored by us — payment is handled entirely by Stripe.

Purposes and legal bases

• Providing the Strava ↔ Garmin sync service — performance of the contract.
• Authentication and security of your account — legitimate interest.
• Subscription and billing — performance of the contract and legal accounting obligations.
• Anonymous analytics of the website — legitimate interest.

Recipients and processors

Your data is processed by providers acting on our behalf:

• Stripe — payment and subscription management.
• Supabase — database hosting.
• Vercel — application hosting and analytics.
• Google — sign-in (OAuth), if you use it.
• Strava and Garmin — synced services, according to the permissions you grant.

Transfers outside the European Union

Some providers (Stripe, Vercel, Google) are based in the United States. Transfers are governed by appropriate safeguards (European Commission Standard Contractual Clauses and/or the EU-US Data Privacy Framework).

Retention

Your data is kept while your account is active. Deleting your account (available from your profile) purges the associated data, except information we must retain to meet legal obligations (notably billing records, kept for about 10 years). Technical logs are kept for about 12 months.

Your rights

Under the GDPR, you have the right to access, rectification, erasure, restriction, objection and portability. You can exercise them at any time by emailing delbecq.william@gmail.com, or delete your account directly from your profile. You may also lodge a complaint with the French CNIL (cnil.fr).

Security

We implement appropriate technical measures (encrypted exchanges, secure token storage) to protect your data. See also our Cookies page.