Your workouts stay on your device

Who we are

Ravalen is published by Ravalen (“we”, “us”). For anything about this policy or your information, write to support@ravalen.fit.

What the app keeps, and where

The app keeps the following in its own storage on your device. None of it is sent to us or to anyone else, except as described under “Strava” below.

• Your workouts. For each one: when it was, how long and how far, your speed or pace, your heart rate if you wore a strap, on a ride your power and cadence, the incline or gradient, your laps, and the route you chose. Each is also kept as a FIT file and a GPX file.
• What your equipment sent. Beside each workout the app keeps a log of the raw Bluetooth messages from your treadmill, trainer and strap, so that a fault can be found if you ask us for help. It contains nothing those devices did not send.
• Your settings. Units, graphics, time of day, your maximum heart rate and zones, your weight and your bike's, your FTP and threshold pace, and which Bluetooth devices you have used, so that they connect again.
• Routes and workouts you have made. The routes you draw and the structured workouts you build.
• Your Strava connection, if you make one: see below.

Heart rate is information about your health. The app uses it to show you your heart rate and its zone and to record it in your workout, and for nothing else.

Bluetooth

The app uses Bluetooth to find and talk to the treadmill, trainer and heart-rate strap you choose. While it is looking, it can see the names of nearby devices that announce themselves as fitness equipment; it lists them for you to choose from and keeps only the ones you connect. It does not use Bluetooth to work out where you are, and it does not use your location at all.

Strava (only if you connect it)

Connecting Strava is optional. If you do, the app opens Strava's own page for you to give permission; your Strava password never reaches the app. Then:

• The app sends Strava the FIT file of each workout you upload, with a name for it and whether it was a run or a ride. The file holds what is listed under “Your workouts” above, heart rate included.
• The app receives from Strava your name, to show which account is connected; two keys that let it upload for you; and, when it is about to upload, a list of your activities that began within an hour of the workout, to check that the workout is not there already. Nothing from that list is kept. The number Strava gives the uploaded activity is kept with the workout, so that the app can open it for you.
• Where that is kept: on your device only. Your workouts, and the list of your activities, go straight between the app and Strava and never pass through us.
• One step goes by way of a computer of ours. Strava hands out the two keys only to a request that carries a password belonging to Ravalen itself, and that password must not be inside the app, where anyone could read it. So when you connect, and every few hours after that while the app is using Strava, the app asks our server, at this website's address, to fetch the keys. Our server adds the password, passes the request on to Strava and passes Strava's answer back to the app. It keeps no copy of the keys or of your name, and writes neither down.
• To stop: press DISCONNECT in the app, which tells Strava to withdraw the permission and removes the keys from your device, or remove Ravalen under “My Apps” in Strava's settings.

What you upload to Strava is then held by Strava under Strava's own privacy policy, and deleting it is done on Strava. More about what is sent and when is on the Strava page.

What we collect

Nothing. The app has no analytics, no advertising or tracking software, no crash reporting and no accounts. The one time it speaks to a computer of ours is the step described under “Strava” above, and nothing of that is kept. We cannot tell who uses the app, or anything about them.

If you write to us, we receive your email address and whatever you choose to send, and use it only to answer you. We keep the correspondence for as long as it is useful for helping you and then delete it. If you send us a workout's files to look into a fault, we use them for that and delete them afterwards.

This website

This site sets no cookies, uses no analytics and loads nothing from other companies: its typefaces, pictures and films are all served from the site itself. Like any website, the computers that serve it keep a short technical log of requests (the time, the page and the address the request came from), which our hosting provider uses to run the service and keep it secure. We do not use it to identify anybody.

The same computers carry the app's requests for Strava's keys. Our own record of those is the time and whether it worked, with no address and no key. So that this step cannot be misused, our server also counts how many such requests have come from each address in the last quarter of an hour; the count is held in its memory only and then dropped.

Children

Ravalen is not directed at children under 13, and we do not knowingly hold information about anyone.

Your choices and your rights

Because your information is on your own device, you are in control of it. Delete a workout in History; delete a route or a workout you made where it is listed; disconnect Strava on its screen; or delete the app, which removes everything it has kept.

You also have rights under data protection law, such as to ask what we hold about you, to have it corrected or deleted, and to complain to the data protection authority where you live (in the United Kingdom, the Information Commissioner's Office). As we hold nothing but any emails you have sent us, the quickest way to use those rights is to write to support@ravalen.fit.

Changes

If the app or this site ever begins to handle your information differently, this page will say so before it happens, and the date at the top will change.