Privacy

Updated 14 October 2026

Browsing and riding

You can browse routes and workouts and try demos without an account. Demos use fictional data and do not connect devices or save rides.

For real riding, we use your account details to provide the service and your rider settings, trainer measurements, optional heart rate and ride history to run training and save your results. The fitness consent box is required when creating a rider account. You can browse and try demos without an account. Heart rate is optional.

Your profile, settings and saved rides belong to your account. A sign-in cookie keeps you logged in. Unsaved rides are held temporarily in memory, so export or retry a failed save before closing.

Basic usage totals

We count registered accounts, new accounts, active riders and saved or completed rides to understand how much Apogee is used and improve the service. These totals use existing account and ride records, without extra browsing tracking or analysis of power, heart rate or other fitness measurements. They remain inside Apogee and rely on our legitimate interests in running and improving the service.

Contact us if you object to your account being included in usage reporting. We can exclude it without affecting riding or your saved data. Signed-out browsing and demos are not counted.

Optional sharing and services

When riding plans are available, we keep active riding time against your account to calculate the weekly free allowance, and subscription status to provide paid access across devices. Pauses and demos do not count. Payments are handled by Apple for Mac App Store purchases and Stripe for website or supported Windows purchases. Purchases marked “Sold through Onelink” use Stripe’s merchant-of-record service. The payment provider receives contact and purchase information needed to process and manage the subscription; Apogee stores its account and subscription identifiers and status, but does not receive your full card details. Providers may retain transaction records they are legally required to keep after you delete your account.

We keep the date and time of your latest authenticated contact with Apogee so the owner can see when an account was last online for service administration and support. While the signed-in app is visible it checks in once a minute; authenticated service requests also update this time. We retain only the latest timestamp, with no browsing history or signed-out visitor tracking. It is included in your data export and removed with your account.

The owner can see account subscription status and weekly allowance to operate the service and resolve support requests, including when an account is excluded from usage reporting. If we reset an allowance or grant or remove complimentary Unlimited access, we keep the date and reason alongside the change without deleting ride history. These allowance adjustments and access changes are included in your data export and their account details are removed when you delete the account.

• Password reset: when requested, Resend sends an expiring reset link on our behalf. It processes the recipient email address, message and delivery information. We have disabled email open and link-click tracking.
• Strava: connect your account to sync rides you choose to share. You control whether heart rate is included. Disconnecting removes the saved connection; deleting Apogee does not remove rides already synced to Strava.
• Riding together: private by default. Enabling it shares a temporary rider name, route progress, virtual speed and watts per kilogram with riders on that route. Live presence expires after inactivity.
• Optional sign-in: Apple or Google verifies your identity when you choose its sign-in option. We receive an account identifier and verified email address. With Apple's Hide My Email, this can be a private relay address instead of your personal address. You can link Apple sign-in to an existing Apogee account. We store Apple's authorization token encrypted to check that your sign-in remains authorized and revoke it when you delete your Apogee account.
• Voice: optional voice controls use your browser or platform speech service, which may process audio remotely. Apogee does not save recordings or transcripts.

Cloud hosting services store account data and handle connection information such as IP addresses. The services above receive data only for their stated features and may process it outside the UK. We do not sell your personal data.

Technical error reports

If ride graphics cannot start, Apogee automatically sends a technical report to its own server to diagnose the problem. It includes the error, browser and operating-system information, screen size, graphics capabilities and app build. If you are signed in, the report is associated with your account for support. Reports contain no riding measurements or trainer names, and are visible only to the operator. We use them to maintain the service, relying on our legitimate interests. Reports are kept for up to 30 days; account-associated reports are included in Export data and removed when you delete your account.

Your controls

Withdraw fitness consent in Account at any time. Fitness withdrawal stops connected devices and new fitness processing; browsing and demos remain available. Previous processing remains valid and saved records remain available for export or deletion.

Account data and consent records remain until you delete your account. Deletion removes your profile, settings, rides, consent records, associated feedback and linked-service credentials from the active database. Feedback you send is used to respond and resolve problems. We also use necessary security information to protect the service, relying on our legitimate interests.

Use Export data or Delete account in Account. Contact us to request correction, access, deletion, restriction or portability.

You can object to processing based on legitimate interests. You can also raise a concern with the UK Information Commissioner’s Office.