OrdaGo Privacy Policy

2.1 Account information

When you create an OrdaGo account, we may collect:

• Your email address
• Your username or display name
• Your profile picture
• Your account identifier
• Your preferred language
• Information you voluntarily add to your profile
• Authentication and account-security information

Your password is handled through our authentication provider and is not accessible to other OrdaGo users.

2.2 Fitness and workout information

When you record, import or save an activity, OrdaGo may process information such as:

• Activity type, including cycling, running, walking or other supported activities
• Workout start date and time
• Workout duration
• Distance
• Speed and pace
• Heart rate
• Active energy and calories
• Cycling power
• Cadence
• Elevation and altitude
• Laps, splits and intervals
• Training load and performance metrics
• Equipment associated with an activity
• Workout source, such as OrdaGo, Apple Health or Strava
• Other workout information supported by your device or connected sensors

This information may constitute health or fitness data under applicable law.

2.3 Location and route information

With your permission, OrdaGo may collect precise location information while you record an outdoor activity.

This may include:

• GPS coordinates
• Recorded routes
• Starting and finishing locations
• Altitude and elevation
• Location timestamps
• City or general geographic information associated with an activity

Location information is used to record and display your route, calculate workout metrics and provide location-related features.

OrdaGo does not access your location without the permissions provided through your device settings.

2.4 Apple Health and Apple Watch data

With your explicit permission, OrdaGo may read information from and write information to Apple Health through HealthKit.

Depending on the permissions you grant, this information may include:

• Workouts
• Heart rate
• Distance
• Active energy
• Cycling power
• Cadence
• Route and location data
• Other fitness information supported by HealthKit

HealthKit access is optional. You can review or withdraw HealthKit permissions at any time through the Health app or your device settings.

OrdaGo does not use HealthKit information for advertising, marketing profiling or sale to data brokers.

2.5 Connected-device information

When you connect an Apple Watch, bicycle sensor or another compatible device, we may process:

• Device type
• Device name
• Device manufacturer
• Sensor identifiers
• Bluetooth connection information
• Data transmitted by the connected device, such as heart rate, speed, cadence, power or selected gear

This information is used to establish the connection and provide workout-recording functionality.

2.6 Strava information

When you connect your Strava account, OrdaGo may receive or transmit information permitted by the authorization you grant, including:

• Your Strava athlete identifier
• Basic Strava profile information
• Activities imported from Strava
• Activities exported to Strava
• Activity identifiers
• Authentication and refresh tokens required to maintain the connection

OrdaGo only accesses Strava information within the scope of the permissions you approve.

You can disconnect Strava from OrdaGo. You may also revoke OrdaGo’s access through your Strava account settings.

Your use of Strava remains subject to Strava’s own terms and privacy policy.

2.7 Social and community information

When you use OrdaGo’s social or community features, we may process:

• Activities you choose to share
• Reactions, including “Ona” reactions
• Comments and messages
• Challenge participation
• Crew or community membership
• Friend, follower or connection information
• Rankings and achievement information
• Content you voluntarily publish

Information you choose to make visible through these features may be seen by other users according to your privacy and sharing settings.

You should avoid publishing sensitive personal information in comments, messages or other public areas.

2.8 Equipment information

When you use equipment-management features, we may collect information such as:

• Equipment name and category
• Brand and model
• Purchase or activation date
• Usage distance and duration
• Maintenance status
• Equipment associated with individual workouts
• Notes or photographs you voluntarily add

2.9 Subscription and purchase information

OrdaGo uses Apple’s in-app purchase system to manage premium subscriptions.

We may receive information such as:

• Subscription status
• Product identifier
• Purchase and renewal dates
• Subscription expiration date
• Transaction or entitlement identifiers
• Whether a purchase was restored
• The source of the premium entitlement

Payment-card and billing details are processed by Apple. OrdaGo does not receive or store your full payment-card details.

2.10 Notifications

When you enable push notifications, we may process:

• Your device notification token
• Notification preferences
• Information needed to send notifications concerning activities, reactions, comments, challenges, connections, account events or subscriptions

You can disable notifications through OrdaGo’s settings or your device settings.

2.11 Technical and diagnostic information

To operate, protect and improve the service, we may process technical information such as:

• Device model
• Operating-system and application version
• Internal user and device identifiers
• IP address
• Date and time of requests
• Authentication events
• Error reports
• Crash or diagnostic information
• Network and synchronization status
• Security and fraud-prevention information

We do not use this information to track you across applications or websites owned by other companies.

2.12 Support communications

When you contact us, we may collect:

• Your name and email address
• The content of your request
• Screenshots, attachments or diagnostic information you provide
• Our communications with you

OrdaGo does not sell your personal data.

OrdaGo does not use your health or workout data for third-party advertising.

OrdaGo does not track you across apps or websites owned by other companies for advertising purposes.

• Create and manage your account
• Record and display workouts
• Synchronize activities between your iPhone, Apple Watch and OrdaGo account
• Import and export activities through services such as Strava
• Calculate fitness, training and performance metrics
• Display routes, maps, charts and workout summaries
• Operate equipment-management features
• Provide social, community, challenge and reaction features
• Manage premium subscriptions and entitlements
• Send notifications you have enabled
• Provide customer support
• Detect technical problems, abuse and security threats
• Maintain, troubleshoot and improve OrdaGo
• Comply with legal obligations
• Establish, exercise or defend legal claims

Performance of a contract

Processing is necessary to provide the OrdaGo services you request, including account management, workout storage, synchronization and premium features.

Consent

We rely on your consent for certain processing activities, including access to:

• HealthKit data
• Precise location
• Bluetooth devices
• Photos or camera features
• Push notifications
• Third-party services such as Strava

You may withdraw consent through the relevant application or device settings. Withdrawal does not affect processing already performed lawfully before consent was withdrawn.

Legitimate interests

We may process limited technical and usage information where necessary to secure, maintain, troubleshoot and improve OrdaGo, provided those interests do not override your rights.

Legal obligations

We may process information when required to comply with applicable law, regulatory requirements or lawful requests.

5.1 Service providers

We use technical service providers to host and operate OrdaGo. These may include:

• Supabase, for authentication, database hosting, file storage, synchronization and backend services
• Apple, for App Store distribution, StoreKit subscriptions, HealthKit, Apple Watch integration, maps, notifications and related platform services
• Strava, when you choose to connect your Strava account
• Resend, for transactional emails and operational beta-signup notifications
• Other infrastructure providers required to securely operate the service

These providers may process information on our behalf according to their respective agreements and privacy policies.

5.2 Other users

Information is shared with other OrdaGo users only when required by the social or community features you use and according to your visibility settings. For example, other users may be able to see your:

• Display name and profile image
• Shared activities
• Activity statistics
• Routes, where route sharing is enabled
• Reactions and comments
• Challenge participation
• Crew membership
• Rankings or achievements

5.3 Third-party integrations

When you connect OrdaGo to an external service such as Strava, information may be exchanged with that service according to the permissions you grant.

5.4 Legal and safety disclosures

We may disclose personal data where we reasonably believe it is necessary to:

• Comply with a legal obligation or lawful request
• Protect users, OrdaGo or third parties
• Investigate fraud, abuse or security incidents
• Enforce our terms
• Establish or defend legal claims

5.5 Business transfers

If OrdaGo or its assets are involved in a merger, acquisition, restructuring or transfer, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

• An adequacy decision issued by the European Commission
• Standard Contractual Clauses
• Other lawful transfer mechanisms

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for protecting the confidentiality of your login credentials and for notifying us if you suspect unauthorized use of your account.

• Encrypted network communications
• Authentication controls
• Access-control policies
• Database-level security rules
• Separation of development and production environments
• Restricted administrative access
• Security monitoring and software updates

When you delete your account, personal data associated with the account will be deleted or anonymized unless retention is required by law or justified by a legitimate legal or security purpose.

• Account and workout information is retained while your account remains active
• Information may remain temporarily in encrypted backups after deletion
• Subscription records may be retained where required for accounting, fraud prevention or legal compliance
• Support communications may be retained for a reasonable period after your request is resolved
• Technical logs are retained for a limited period appropriate to security and troubleshooting needs

Before processing a request, we may need to verify your identity.

Deleting your OrdaGo account does not automatically delete information held independently by third-party services such as Apple or Strava. You must manage data held by those services through their respective account settings.

Information that other users have independently contributed, such as their own comments or reactions, may remain where necessary to preserve the integrity of a conversation or activity, but your account may be anonymized where appropriate.

• Directly through the account-management or privacy section of the OrdaGo application
• By contacting us at support@ordago.app

To exercise these rights, contact support@ordago.app. We may request information necessary to confirm your identity before responding.

If you are located in France, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).

• Obtain confirmation that we process your personal data
• Access your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Restrict certain processing
• Object to processing based on legitimate interests
• Receive certain data in a structured, commonly used and machine-readable format
• Withdraw consent at any time
• Lodge a complaint with a data-protection authority

• Location access
• Health access
• Bluetooth access
• Photo and camera access
• Notifications
• Background activity permissions

You can also:

• Disconnect Strava
• Change activity-visibility settings
• Control which activities you share
• Disable notifications
• Delete individual activities
• Request an export of your data
• Delete your OrdaGo account

Disabling a permission may prevent the associated feature from functioning correctly.