parat.io workouts

Privacy Policy

Last updated: October 31, 2026

Who is responsible

Jochen Leinberger, Germany, is responsible for parat.io workouts and workouts.parat.io. Full legal details are in the Impressum.

Contact: support@parat.io · Impressum

Scope

This policy covers parat.io workouts (the app) and the workouts.parat.io website.

No accounts, no tracking

parat.io workouts has no user accounts, no analytics or tracking SDKs, and no advertising. The workouts.parat.io website sets no cookies and uses no analytics.

Data on your device

Your rides, workouts and settings are stored only on your device. If you choose to, you can also save them to your own iCloud Drive or Files — Apple's own terms apply to that storage.

Bluetooth

parat.io workouts uses Bluetooth only to connect to smart trainers and heart-rate straps. Your heart-rate and power data stay on your device, except for rides you choose to upload to Strava.

Strava (optional)

You can optionally connect parat.io workouts to Strava via OAuth, with the scope activity:write only. The app stores the access and refresh tokens in the iOS Keychain, together with the upload and activity IDs of the rides it has uploaded. It does not read any of your existing Strava activity data.

Uploads are limited to your own rides, recorded as activity type "Virtual Ride", and happen only when you choose to upload. Strava may collect its own usage data when the app calls the Strava API — see Strava's Privacy Policy.

Strava's Privacy Policy

No sharing, no AI, no selling

Your Strava data is never shared with third parties, never passed to AI tools or AI services, and never sold.

Withdrawing consent and deletion

"Disconnect Strava" in the app's settings revokes the token at Strava and immediately deletes all stored Strava data on your device. You can also revoke access on strava.com under Settings → My Apps.

Deletion requests sent to support@parat.io are answered and confirmed within 30 days.

AI-created workouts

You create your own workout files, for example with an AI assistant such as Claude, and import them via Apple Shortcuts. The app itself sends nothing to any AI service.

Legal basis

Under the GDPR / UK GDPR, the Strava connection and uploads rely on your consent (Art. 6(1)(a)), which you can withdraw at any time as described above. Handling your contact requests relies on our legitimate interest (Art. 6(1)(f)).

Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority — in the EU with your local data protection authority, in the UK with the ICO.

Website hosting

workouts.parat.io is hosted by Vercel. Server logs (IP address, time, requested page) are processed by Vercel to deliver the site and keep it secure (Art. 6(1)(f)). No cookies are set.

Changes to this policy

We may update this policy from time to time. The date above shows when it was last updated.