Legal
Effective October 19, 2026 · Version 3.2
This Privacy Policy describes how RaceProof LLC ("Raceproof," "we," "us," or "our") collects, uses, and protects information when you access our websites (raceproof.app, torque.raceproof.app) and services. Beta participants are additionally governed by the privacy provisions in the Beta Participation Agreement.
Website visitors. When you visit our websites, we collect standard server log data including IP address, browser type, pages visited, and visit timestamps. Our pages also load Cloudflare Web Analytics, which counts visits without setting a cookie. We use managed services for hosting and security, which processes connection data according to their privacy policy.
Beta signup. When you register for the beta program, we collect your email address, the timestamp of registration, your IP address, and the version of the Beta Participation Agreement you accepted. This information is stored securely on our infrastructure.
Platform users. If you are granted beta access and use the Raceproof platform, we collect the information described in Section 5 of the Beta Participation Agreement, including account information, activity data from connected services (Garmin Connect, Strava, Zwift), device data, biometric data as recorded in your FIT files, and usage data.
We use your information to:
The Torque data publication (torque.raceproof.app) presents aggregated, anonymized analysis of competitive cycling data. No individual rider is identifiable in Torque publications. All analysis is conducted at the population level using cohort-level statistics, not individual records. The data analyzed for Torque publications is sourced from publicly accessible competitive event results, not from individual Raceproof user accounts.
We do not sell your personal data. We do not share your activity data, biometric data, or personal information with third parties except as necessary to provide platform functionality (such as OAuth token exchange with Garmin Connect or Strava for data synchronization).
Aggregated, anonymized data may be used for research, product development, and publication through Torque. This data cannot be used to identify any individual.
Collection. When you connect your Garmin Connect™ account to Raceproof via OAuth, we receive activity data pushed to us through the Garmin Connect API. This includes activity summaries, activity FIT files containing sensor recordings (such as power, heart rate, cadence, temperature, and GPS), and device model information. Data is delivered via Garmin's webhook push mechanism; we do not poll or pull data from Garmin.
Use. Garmin device-sourced data is one of several data sources that may contribute to your activity history within Raceproof. When present, Garmin data informs Raceproof's analytical algorithms as an input alongside data from other connected services and manual uploads. Raceproof's platform outputs are derived from its own analytical processes, not directly from any single data source. Device model information is displayed as a data provenance attribution on activity surfaces within the application.
Processing. Garmin device-sourced data is incorporated into Raceproof's synthesized analytical records alongside other available data sources. All processing occurs entirely within Raceproof's own infrastructure. No Garmin data is processed by third-party AI, machine learning, or external data processing services. No Garmin data is used to train AI models.
Storage. Garmin device-sourced data is stored in managed database hosts. All data is transmitted over encrypted connections (TLS). Raw FIT files, parsed session data, and derived analytical outputs are retained for the duration of your account.
Sharing. We do not sell, share, or transmit Garmin device-sourced data to any third party. Aggregated, anonymized population-level statistics may appear in Torque publications; no individual's Garmin data is identifiable in such publications.
Disconnection and deletion. You may disconnect your Garmin Connect account at any time through the Raceproof platform or through Garmin Connect's third-party app permissions. Upon disconnection, no further data is received. You may request deletion of all Garmin-sourced data by contacting [email protected].
Policy changes. Any future changes to this section relating to Garmin data will be submitted to the Garmin Connect Developer Program team and require their written approval before implementation.
Your data is stored across secure cloud infrastructure. Activity data and entity records are stored in managed PostgreSQL databases. All data is transmitted over encrypted connections (TLS). We implement reasonable administrative, technical, and physical safeguards to protect your information.
Website visitors. Server logs are retained for a reasonable period for security and operational purposes.
Beta registrations. Your email and registration data are retained for the duration of the beta program and a reasonable period thereafter.
Platform users. We retain your data for the duration of your participation. Upon termination, you may request deletion of your activity data and personal information by contacting us. Certain data may be retained as required by law or for legitimate business purposes (such as records of agreement acceptance).
You may:
To exercise any of these rights, contact us at [email protected].
Our websites use Cloudflare's standard security cookies. We also use PostHog, an analytics service, to record how visitors use our pages: which pages are opened, how far a story is played, and a replay of the visit with anything you type masked out. The replay never keeps the contents of anything sent to or from our servers.
If you visit from the EU, the EEA, the UK or Switzerland, we ask before recording, and your answer is stored in a cookie on raceproof.app for 180 days; you can change it from the "Recording choice" link in the page footer.
We do not use advertising cookies or tracking pixels, we do not share your data with advertisers, and we do not serve ads on any Raceproof property.
The Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.
Raceproof is operated from the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States. By using the Services, you consent to this transfer and processing.
We may update this Privacy Policy from time to time. Material changes will be posted to this page with an updated effective date. Continued use of the Services after changes take effect constitutes acceptance of the modified policy.
For questions about this Privacy Policy or your data, contact:
RaceProof LLC
Holden Comeau, Founder
Email: [email protected]