Privacy Policy

Last updated: November 2026

Who is responsible for your data

The controller of your data is the operator of sync2garmin.

What we keep

• Your e-mail address and a hash of your sync2garmin password.
• Access tokens for Garmin and Dropbox, encrypted.
• Your Dropbox account ID and e-mail, and the path of your Wahoo folder.
• A record of each ride: file name, start time, Wahoo profile, ride type, upload status, the activity's ID and name in Garmin, and its Training Load.
• Your ride type settings and a history of sync events.
• IP addresses, for up to a day, to limit login attempts, and in technical server logs.

What we do not keep

• Your Garmin password. It is used once to sign in and is not saved anywhere.
• Your ride files. They contain your route, heart rate and power. We process each file in memory only for the time of the upload and never write it to disk.

Why we use your data

• To provide the service you signed up for (performance of a contract).
• To protect the service against abuse (our legitimate interest).
• To process heart rate data in your ride files, which may count as health data: on the basis of the consent you give when registering. You can withdraw it at any time by deleting your account.

Who receives your data

Your rides go to Garmin, because that is what the service is for. We read your files from Dropbox. Our hosting provider stores the database on our behalf. We do not sell your data and we do not use it for advertising.

How long we keep it

• Account data and ride records: until you delete your account.
• Sync history: 90 days.
• Accounts that never connected Garmin: removed after 7 days.
• After you delete your account we keep only a keyed hash of your e-mail with the number of free rides used, so that the free limit can't be used again. The address can't be read from it.

Your rights

You have the right to access, correct, delete and move your data, to restrict or object to its processing, and to withdraw consent. You can complain to a data protection authority; in Poland that is the President of the Personal Data Protection Office (UODO).

Cookies

We use one cookie, needed for logging in and remembering your language. There are no tracking or advertising cookies.