Legal · Privacy

Privacy Policy

What the Veloxo apps collect, why, who sees it, and your rights under India’s Digital Personal Data Protection Act, 2023.

Last updated 21 October 2026
In short

Your data runs Veloxo for you. Nothing else.

01

No ads. Nothing sold.

We only use your data to run Veloxo for you. Health and fitness numbers are never used for advertising.

02

Your money goes to the club

Entry fees go straight to the organiser. We never see your bank or card details.

03

Leave any time

Delete your account in the app or from this website, and your data goes with it.

Veloxo is a cycling app for riders (Veloxo) and cycling clubs (Veloxo Organiser). Both apps use the same account. In this policy, “Veloxo” and “we” mean the Veloxo team that runs both apps.

We don’t sell your data, we don’t show ads, and we only use your data to run Veloxo for you.

01

Data we collect

WhatExamplesWhy
AccountEmail address, name, password (stored encrypted by our sign-in provider), or your Google account’s name and email if you sign in with GoogleTo create your account and sign you in
ProfileCity, phone number, date of birth, gender, cycling club, riding style, level, weekly hours, years of ridingTo set up your training and your event registrations
Body and performanceWeight, height, FTP (power), maximum heart rateTo set workout targets (power and heart-rate zones)
Emergency and medicalEmergency contact name and phone, blood group, medical notes (all optional)Shared with the club running an event you registered for, for your safety on race day
Profile photoA photo you choose to add (optional)Shown on your profile. It’s stored at a link that isn’t listed anywhere, but anyone who has the link can open it. Remove it any time in Edit profile
TrainingYour goal, riding days, training plan, workouts marked done, and the changes Velo makes to your plan (kept so they can be undone)To build and adapt your plan
Rides from your deviceFor each ride: start time, duration, distance, average power, average heart rate, climbing. Only after you connect Wahoo or Intervals.icu (which can bring rides from Zwift, Garmin and other services you link there)To track your training and adapt your plan
Velo (SI coach: Sports Intelligence, built on AI)The messages you send Velo, its replies, your weekly reviews, and the 👍 / 👎 you give a replyTo answer you; Velo also sees your profile, plan and recent rides to give relevant advice. Ratings help us improve Velo’s answers
EventsRegistrations, the distance you chose, bib number, attendance, finish time and rankTo register you, check you in on race day and publish results
PaymentsAmount and the UPI transaction number (UTR) you enterSo the club can confirm your entry fee. Veloxo never receives your money or your bank or card details
Clubs (organisers)Club name, city, website, UPI ID and payee name, team membersTo run your club’s events and receive entry fees
Beta sign-up (website)Name, email, WhatsApp number (optional), rider or club, club name, phone type, the device you ride with, cityTo send you the beta app and ask for your feedback. Not used for marketing or shared with anyone
App and devicePush notification token, which app it belongs to (Veloxo or Veloxo Organiser), notification settings, notifications sent to you, feedback you sendTo send the notifications you’ve chosen and to improve the app

We don’t collect your location, contacts or files. The only photo we store is a profile photo, if you choose to add one.

02

Who can see your data

  • You. Everything above.
  • Clubs you register with. Your name, contact details, chosen distance, bib, payment status and UTR, attendance, results and emergency details, for that event only.
  • Everyone. Published results show your first name and last initial, your time and rank. Club and event details are public.
  • Veloxo. To run and support the app (for example to review clubs or answer a support request).
03

Service providers

We use these companies to run Veloxo. They process data only for us and under their own security and privacy commitments.

ProviderForWhere
SupabaseDatabase, sign-in and app back endMumbai, India
Anthropic (Claude)Writing Velo’s replies and weekly reviews. Your messages and the training context are sent with each question; Anthropic does not use them to train its modelsUnited States
GoogleSign in with Google (if you choose it) and Firebase Cloud Messaging for notificationsGlobal
ExpoApp updates and sending notificationsUnited States
WahooSending workouts and reading rides, only if you connect a Wahoo accountUnited States
Intervals.icuPutting planned workouts on your Intervals.icu calendar and reading your rides, only if you connect an Intervals.icu account. Intervals.icu can pass workouts to Zwift or Garmin Connect if you link them there, under its own termsGermany

Some providers process data outside India. We only use providers that protect personal data to a standard consistent with Indian law.

04

How long we keep data

  • Your account data is kept while your account exists, and deleted when you delete your account (see Delete your account).
  • Device connections are removed as soon as you disconnect them.
  • Beta sign-ups from the website are deleted when the beta ends, or sooner if you email us to remove yours.
  • Database backups are overwritten within 7 days.
  • If we delete an account for you (for example after an email request), we keep a short record that we did it: the email address, name, club names and the date.
05

Your rights

You can:

  • see and correct your data in the app (Profile, Edit profile, Settings);
  • withdraw consent: turn off notifications, disconnect devices, or stop using Velo;
  • ask for a copy of your data or ask us to delete it, by emailing veloxo.si@gmail.com;
  • delete your account at any time;
  • raise a complaint with us (below) and, if unresolved, with the Data Protection Board of India.
06

Children

Veloxo is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has an account, email us and we’ll delete it.

07

Security

Data is encrypted in transit, sign-in sessions are stored encrypted on your phone, and database rules limit each person to their own data (and clubs to their own events). Keys for outside services are kept on our servers, never in the app. No system is perfectly secure; if a breach affects your data, we’ll tell you and the authorities as the law requires.

08

Health and fitness data

Heart rate, power, weight and medical notes are used only for your training, your coaching and your safety at events. They are never used for advertising and never sold.

09

Changes

If we change this policy, we’ll update the date above and tell you in the app before important changes apply.

10

Contact and grievance officer

Veloxo · India · veloxo.si@gmail.com. We reply to privacy requests within 30 days.

Contact

Questions about your data?

Ask for a copy, a correction or a deletion. We reply to privacy requests within 30 days.