01 Scope and Controller
This Privacy Policy describes how Veyra ("we," "us," or "our") collects, uses, and protects your personal data when you use the Veyra mobile application and related services (collectively, the "Service").
By using Veyra, you agree to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
Contact: support@rideveyra.com
02 Data We Collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Account Data | Name, email address, authentication provider (Apple, Google) | You, directly |
| Ride Data | Distance, speed, duration, cadence, elevation, heart rate, calories, GPS route | Your device sensors and connected devices |
| Health Data | Heart rate, calories burned (read from Apple HealthKit with your explicit permission) | Apple HealthKit |
| Device Data | Device model, OS version, app version, language and region settings | Your device, automatically |
| Usage Data | Features used, ride mode selections, session logs for crash diagnosis | Your device, automatically |
| Integration Data | Strava, Apple Health, or music service tokens — only when you connect them | You, via third-party OAuth |
03 Apple HealthKit Data
- Veyra may read heart rate and calorie data from Apple HealthKit to display live ride metrics — only if you grant permission when prompted by iOS.
- Veyra may write ride summaries (distance, duration, calories, heart rate) to HealthKit so your rides appear in the Health app and Activity rings.
- HealthKit data is never used for advertising, never shared with third-party advertisers, and never sold.
- HealthKit data is not used for any purpose other than providing and improving the in-app ride experience.
- You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health → Veyra.
04 How We Use Your Data
- Provide and operate the Service, including live ride dashboards and post-ride summaries
- Personalize ride modes and interval training recommendations based on your history
- Sync your ride data across devices and to connected third-party services you authorize
- Diagnose and fix bugs, crashes, and performance issues
- Communicate service updates, support responses, and significant policy changes
- Comply with legal obligations
We do not use your personal data for behavioral advertising or sell it to data brokers.
05 Legal Basis for Processing
For users in the European Economic Area (EEA) and United Kingdom, we process your data under the following lawful bases (GDPR Article 6):
| Processing Activity | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Providing ride tracking and analysis features | Performance of a contract (Art. 6(1)(b)) |
| Processing health/HealthKit data | Explicit consent (Art. 9(2)(a)) |
| Diagnosing crashes and improving the Service | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
07 Retention and Deletion
We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account:
- Your ride data and account information are deleted within 30 days.
- Anonymized, aggregated data (not linked to you) may be retained for service improvement.
- We may retain certain records longer when required by law.
To request account deletion, email support@rideveyra.com or use the in-app deletion option in Settings.
08 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data ("right to be forgotten").
- Restriction: Request that we limit how we use your data.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at support@rideveyra.com. We will respond within 30 days.
09 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Know: The categories and specific pieces of personal information we collect about you.
- Delete: Request deletion of your personal information, subject to certain exceptions.
- Correct: Request correction of inaccurate personal information.
- Opt-out of sale/sharing: We do not sell or share personal information for cross-context behavioral advertising.
- Non-discrimination: You will not receive discriminatory treatment for exercising your privacy rights.
To submit a California privacy request, email support@rideveyra.com with "California Privacy Request" in the subject line.
10 Children's Privacy
Veyra is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child under the applicable age has provided personal data, we will delete that information promptly.
If you believe a child has submitted personal data to us, please contact support@rideveyra.com.
11 International Data Transfers
Veyra operates globally. Your data may be processed in countries outside your own, including the United States. When we transfer personal data from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data remains protected.
12 Policy Changes
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email to your registered address. The "Last Updated" date at the top of this page reflects the most recent revision.
Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
13 Contact
For privacy questions, requests, or complaints, contact us at:
If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.