LEGAL
Privacy Policy
Slipstream is local-first. The app works completely without an account, and what leaves your phone only does so because you signed in and asked it to.
The short version
Slipstream runs on your phone. Every ride, every workout, your FTP and your settings are stored on the device, and the app is fully usable with no account and no network — that is a design constraint, not a fallback.
Signing in adds one thing: sync across your devices. Nothing is uploaded until you create an account, and you can take everything with you or delete all of it at any time.
We do not sell your data, we do not share it with advertisers, and there is no third-party analytics or tracking in the app or on this website.
What stays on your device
Until you sign in, everything does:
- Completed rides, including the second-by-second power, heart-rate and cadence samples
- Your FTP and its history
- Workouts, plans and progress
- App settings and preferences
Uninstalling the app removes all of it. If you never sign in, we never receive any of it.
What sync stores when you do sign in
Signing in creates an account and stores the following against it:
- Profile — the name you enter, weight, height, sex, birth year, your FTP, and when it was last tested.
- Rides — start time, workout name, duration, and the recorded sample series for the ride.
- Settings — your app preferences.
- Plans and custom workouts — any plan you have enrolled in, and any workout you have built yourself.
- Account identity — your email address, handled by our authentication provider.
That is the complete list. There is no location tracking, no contacts access, no advertising identifier, and no behavioural profile.
Who can read it
Only you. Every table carries a row-level security policy that matches rows to the signed-in user, so the database itself refuses to return another person's rows — that check is the real boundary, not something the app politely chooses to respect.
On iOS, your authentication tokens are stored in the system Keychain rather than in ordinary app preferences.
Getting your data out
The app can produce a complete export of everything above. It is generated on
request, delivered over a link that expires after one hour, and any previous
export is deleted before a new one is written. Exports are rate-limited to one
per minute.
The file is a full dump — profile, settings, plans, custom workouts and every ride — in a machine-readable format, so you can move it elsewhere.
Deleting your account
Deleting your account starts a 14-day grace period. During those 14 days nothing is destroyed, and simply signing back in cancels the deletion.
After the grace period, a scheduled job permanently removes your account, every row belonging to it, and any export files still in storage. This is not recoverable.
Deleting your account does not touch the data on your device. If you want that gone too, uninstall the app.
This website
The site you are reading sets no cookies, runs no analytics, and loads no tracking scripts. It fetches its typefaces from Google Fonts, which means Google receives the request for those font files. Nothing else leaves your browser.
Children
Slipstream is not directed at children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes materially, the date at the top of this page changes with it, and the change is visible in the site's public history.
Contact
Questions about any of the above: support@slipstream.app.