Privacy Policy
Last updated: October 31, 2026
Who is responsible
Jochen Leinberger, Germany, is responsible for parat.io workouts and workouts.parat.io. Full legal details are in the Impressum.
Contact: support@parat.io · Impressum
Scope
This policy covers parat.io workouts (the app) and the workouts.parat.io website.
No accounts, no tracking
parat.io workouts has no user accounts, no analytics or tracking SDKs, and no advertising. The workouts.parat.io website sets no cookies and uses no analytics.
Data on your device
Your rides, workouts and settings are stored only on your device. If you choose to, you can also save them to your own iCloud Drive or Files — Apple's own terms apply to that storage.
Bluetooth
parat.io workouts uses Bluetooth only to connect to smart trainers and heart-rate straps. Your heart-rate and power data stay on your device, except for rides you choose to upload to Strava.
Strava (optional)
You can optionally connect parat.io workouts to Strava via OAuth, with the scope activity:write only. The app stores the access and refresh tokens in the iOS Keychain, together with the upload and activity IDs of the rides it has uploaded. It does not read any of your existing Strava activity data.
Uploads are limited to your own rides, recorded as activity type "Virtual Ride", and happen only when you choose to upload. Strava may collect its own usage data when the app calls the Strava API — see Strava's Privacy Policy.
No sharing, no AI, no selling
Your Strava data is never shared with third parties, never passed to AI tools or AI services, and never sold.
Withdrawing consent and deletion
"Disconnect Strava" in the app's settings revokes the token at Strava and immediately deletes all stored Strava data on your device. You can also revoke access on strava.com under Settings → My Apps.
Deletion requests sent to support@parat.io are answered and confirmed within 30 days.
AI-created workouts
You create your own workout files, for example with an AI assistant such as Claude, and import them via Apple Shortcuts. The app itself sends nothing to any AI service.
Legal basis
Under the GDPR / UK GDPR, the Strava connection and uploads rely on your consent (Art. 6(1)(a)), which you can withdraw at any time as described above. Handling your contact requests relies on our legitimate interest (Art. 6(1)(f)).
Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority — in the EU with your local data protection authority, in the UK with the ICO.
Website hosting
workouts.parat.io is hosted by Vercel. Server logs (IP address, time, requested page) are processed by Vercel to deliver the site and keep it secure (Art. 6(1)(f)). No cookies are set.
Changes to this policy
We may update this policy from time to time. The date above shows when it was last updated.