Controller and contact
Data controller: Mathieu Grolleau, established in France. For privacy questions: [email protected]. Website: tynavel.com.
Website analytics
The public Tynavel website uses Cloudflare Web Analytics to measure visits and loading performance, including pages visited, general traffic sources and load times. These metrics improve the website; they are not used to build advertising profiles.
According to Cloudflare’s documentation, Web Analytics does not use cookies or browser local storage to track website statistics and does not individually track visitors. Learn more at Cloudflare Web Analytics. Questions: [email protected].
How Tynavel works
Tynavel allows people to record cycling rides, view statistics, monitor progress, take part in challenges and optionally participate in rankings. Tynavel does not provide turn-by-turn navigation.
Data we process
Launch mailing list (optional)
When enabled, the signup form collects your email address and explicit consent to receive a launch announcement. A confirmation email (double opt-in) is sent before final subscription. This list is separate from Tynavel accounts and is not used for third-party advertising.
Account and profile
Information required to run an account can include an email address and display name, plus any city, biography, profile picture and visibility preferences you choose to provide.
Rides and location
During a cycling ride, Tynavel may process date, time, duration, distance, speed and GPS points including latitude, longitude, timestamps and accuracy. Location use may continue while a ride is being recorded in the background or while the screen is locked.
Your detailed GPS track remains private and is not published on the leaderboard.
Ride validation
Technical information may be used to check ride consistency, reduce errors and prevent abuse, such as recalculated distance, point count, observed speeds and validation indicators.
Progress and features
Depending on the features used, Tynavel may process challenge details, rankings, points balances, related history, rewards and notification information.
Bike Manager
Bike Manager may process data about bikes and bike computers, assigned rides, manual mileage entries, components, maintenance schedules and history, expenses and documents added by users. This information may be synced with your account across devices. Private document files are stored in cloud space associated with your account and are not public.
Push notifications
Where push notifications are available and enabled with your permission, a technical device token linked to your account may be stored to deliver requested notifications. The token can be refreshed by the system; Tynavel attempts to remove it on sign-out or when it is no longer needed.
Technical and security logs
The authentication service may retain technical logs of signups, sign-ins, sign-outs, password changes and resets. They may include dates and times, account identifiers, event types, IP addresses and user-agent information. They help secure authentication, prevent abuse, audit access and diagnose incidents.
In versions where Firebase Crashlytics is configured, crash reports may include stack traces, technical app state, device and OS information. Tynavel does not intentionally attach email addresses, names, coordinates or GPS tracks, passwords, authentication tokens, or private Bike Manager content to those reports.
Locally stored data
Some data may be kept on your device to support offline operation and activity recovery.
Why we use data
Data supports account access and security, ride recording and display, statistics, syncing, offline operation, challenges, leaderboards, bicycles, Bike Manager maintenance, expenses and documents, your preferences, abuse prevention and troubleshooting.
Activity data is not medical advice
Ride and progress information is provided for activity tracking and fitness. Tynavel is not a medical device and does not diagnose, treat, cure or prevent any medical condition. Seek advice from a healthcare professional for medical questions.
Technical providers
- Supabase: authentication and associated security logs, database, synchronization, private Bike Manager documents and protected server operations.
- OpenStreetMap: map tiles when viewing a ride. Tile requests can reveal an approximate viewed map area and connection information, but do not transmit your complete GPS track as a file.
- Firebase: Crashlytics stability diagnostics in configured versions; Firebase Analytics collection is disabled by default in the current release candidate; push notifications in versions where the feature is enabled with permission.
- Cloudflare: delivery and security of the public website, website analytics and performance measurement, and Turnstile anti-spam when the waiting list is enabled.
- Brevo: optional confirmed waiting-list subscriptions and confirmation and launch emails when enabled.
- OVHcloud and Google: routing and handling email sent to Tynavel.
- Apple and Google: operating-system and app-store services under their own policies.
Retention
Account data is kept as needed for the account and service. Synced Bike Manager documents are held in private cloud storage associated with the account. Account deletion removes associated data, including private documents, through the provided mechanisms, except where limited retention is necessary for legal duties, legal claims, security or abuse prevention.
Data stored only on a device remains until deleted in Tynavel, on uninstall or via equivalent device actions. Support requests are retained for the time reasonably needed to process and follow up the request.
Waiting-list email addresses are kept until the launch announcement and deleted no later than 12 months afterward, unless consent is withdrawn earlier. Unsubscribe through an email message or write to [email protected].
Your choices and rights
In Tynavel, you can edit certain profile information, choose leaderboard visibility, manage preferences, export selected local data, delete locally stored data and permanently delete your account.
For access, correction, erasure and other applicable data rights, email [email protected]. Appropriate identity verification may be requested to protect your account. In France, you can also contact the CNIL.
Account deletion
Deletion is available directly in Tynavel. If you cannot access the app, follow the web account deletion procedure.
Policy changes
This policy may be updated to reflect changes to the service, its features or providers. The last updated date appears at the top of this page.