1. Who we are
Tim Schaefer ("RYDN", "we", "us", or "our") operates the RYDN indoor cycling platform available at rydn.io and through the RYDN desktop application. This policy explains how we collect, use, and protect your personal data.
If you have any questions about this policy or about how we handle your data, contact us at contact@rydn.io.
2. Data we collect
We collect the following information when you use RYDN:
- Account information — your email address and password (stored as a secure hash) when you register.
- Subscription data — billing status and subscription tier managed through our payment processor. We do not store full card numbers.
- Ride and workout data — power output, cadence, duration, and workout selections recorded during sessions on your device. This data is stored locally and, where you choose to sync, on our servers.
- Device information — operating system, application version, and anonymised diagnostic data used to identify and fix bugs.
- Usage data — feature interactions and session frequency, collected in aggregate to improve the product.
3. How we use your data
We use the data we collect solely to:
- Create and maintain your account.
- Provide and improve the RYDN service.
- Send transactional emails (account confirmation, billing receipts, password resets). We do not send marketing email without your explicit opt-in.
- Detect and resolve technical issues.
- Comply with legal obligations.
We do not sell your personal data to third parties, ever.
4. Third-party services
RYDN uses the following third-party services to operate:
- AWS Cognito — authentication and user management. Your email and credentials are stored securely within AWS infrastructure. See AWS Privacy Notice.
- Payment processor — subscription billing. Your payment details are handled entirely by our processor and are never stored on RYDN servers.
- Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) — privacy-friendly website statistics, e.g. how many people visit which page and from which website they arrived. It sets no cookies, stores nothing on your device and does not track you across sites or build profiles; your IP address is not used to identify you. Cloudflare may process the data outside the EU. The legal basis is our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR). See Cloudflare's Privacy Policy.
- Google reCAPTCHA v3 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) — protects account sign-up against bots and automated abuse. reCAPTCHA is only loaded when you open the sign-up form on rydn.io. It analyses information such as your IP address, browser and device details and how you interact with the page, and sends it to Google, which may process it outside the EU. We receive only a score indicating whether the sign-up looks automated. The legal basis is our legitimate interest in protecting our service and our users against abuse (Art. 6(1)(f) GDPR). See Google's Privacy Policy and Terms of Service.
5. Data retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g. billing records, which we keep for 7 years).
6. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at contact@rydn.io. We will respond within 30 days.
7. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed credential storage, and access controls limiting who within our team can access user data. No system is perfectly secure; if you suspect your account has been compromised, contact us immediately.
8. Cookies
The RYDN website uses a minimal set of cookies strictly necessary for authentication (session tokens) and security (CSRF protection). We do not use advertising or tracking cookies. No cookie consent banner is shown because we only use essential cookies. When you open the sign-up form, Google reCAPTCHA (see section 4) may set its own cookies to tell humans from bots; this happens only for sign-up, not when you browse the site.
9. Children
RYDN is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the application. The "Last updated" date at the top of this page will always reflect the current version.
11. Contact
For privacy-related questions or data requests, contact us at contact@rydn.io.