Privacy Policy

1. Controller

René Dhonau
Germany
Email: contact@segment-hunter.com

Segment Hunter is an independent iOS app built for cyclists who want deeper insight into their Strava segment performance. It is not affiliated with or endorsed by Strava, Inc.

2. Strava Connection — What We Access

Segment Hunter connects to your Strava account via the official Strava OAuth 2.0 flow. You explicitly authorize this connection during the in-app login. We request only the minimum permissions required for the app to function.

The following data is accessed after your authorization:

• Athlete profile — your name and profile photo (displayed in-app only, never transmitted)
• Activities — your recent activity list and summary data (distance, time, type)
• Segment efforts — your personal effort times on Strava segments within activities
• Segment details — segment name, distance, gradient, category (publicly available data)
• Starred segments — segments you have starred on Strava

We do not access write permissions, follower or following lists, heart rate or GPS route data, messaging, or any financial information.

3. How Data Is Stored

All Strava data retrieved by the app is stored locally on your iPhone only. This architecture is central to the app's design:

• Data is fetched from Strava once and cached locally on your device
• Subsequent app opens use the local cache — no redundant API calls
• API requests are made only when genuinely new data is needed (new activities, manual refresh)
• This keeps the app fast, offline-friendly, and respectful of Strava's API rate limits

No data is transmitted to any server operated by us or any third party. There is no backend, no cloud sync, and no remote database.

4. Data Sharing

Segment Hunter does not:

• Sell, rent, or license your Strava data to any third party
• Share your data with analytics services, advertising networks, or data brokers
• Transmit your data to any external server
• Use your data for any purpose other than displaying it within the app to you
• Aggregate or anonymise your data for research, benchmarking, or commercial use

The app contains no third-party SDKs (advertising, analytics, crash reporting, or social).

5. Authentication Tokens

Your Strava OAuth tokens are stored securely in the iOS Keychain on your device. They are never transmitted anywhere except to Strava's own authentication servers to refresh your session. No intermediary server is involved in the token refresh process.

6. Data Deletion

You have full control over your data at all times:

• Delete all cached data: Go to Settings → Clear All Data within the app. This permanently removes all locally stored Strava data and your authentication token.
• Revoke Strava access: Open Strava → Settings → My Apps → Segment Hunter → Revoke Access. When access is revoked, the app detects the invalid token on next launch and automatically clears all local data.

7. Children's Privacy

Segment Hunter is not directed at children under 13 years of age. We do not knowingly collect data from children. If you believe a child has used the app, please contact us at contact@segment-hunter.com.

8. Changes to This Policy

If we make material changes to this privacy policy, we will update the "Last updated" date above. For significant changes, we will additionally notify users via the app.

9. Legal Basis (GDPR)

For users in the European Union: the processing of Strava data within Segment Hunter is based on your explicit consent (Art. 6(1)(a) GDPR), given when you authorize the Strava OAuth connection. You may withdraw consent at any time by revoking access (see Section 6).

As all processing occurs exclusively on your local device and no data is transmitted to any controller-operated server, the data minimization and storage limitation principles of the GDPR are inherently satisfied by the app's architecture.

10. Support & Contact

For support questions, feedback, or privacy-related requests:
contact@segment-hunter.com

We aim to respond within 48 hours. For data deletion, you may also use the in-app "Clear All Data" function in Settings — no email required.