Privacy Policy

Last Updated: November 11, 2025

1. Introduction

This Privacy Policy explains how PedalMentor ("we," "us," or "our") collects, uses, discloses, and protects your personal information, including activity data obtained through integration with Garmin services. We are committed to protecting your privacy and handling your data in accordance with applicable laws, including data protection regulations such as GDPR and CCPA where relevant.

By using our PedalMentor app (the "Service"), you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

We collect the following types of information:

• Personal Information: This may include your name, email address, and other details you provide when registering or using our Service.
• Activity Data: Through our integration with Garmin APIs, we may collect health and fitness activity data such as steps, heart rate, GPS location during activities, sleep patterns, workouts, and other metrics you authorize us to access from your Garmin account.
• Usage Data: Information about how you interact with our Service, such as device information, IP address, browser type, and timestamps.
• Other Data: Any additional information you voluntarily provide, such as feedback or preferences.

We only collect activity data with your explicit consent via Garmin's authorization process (e.g., OAuth). You can revoke this access at any time through your Garmin account settings.

3. How We Use Your Information

We use the collected information for the following purposes:

• To Provide and Improve Our Service: Activity data is used to deliver personalized features, such as tracking fitness progress, generating insights, or displaying dashboards within our app.
• Analytics and Research: We may analyze aggregated and anonymized activity data to improve our algorithms, develop new features, or conduct internal research.
• Communication: To send you updates, notifications, or support related to our Service.
• Compliance and Security: To comply with legal obligations, prevent fraud, and ensure the security of our systems.
• Marketing: With your consent, we may use non-sensitive data for promotional purposes, but activity data is not used for direct marketing without explicit permission.

We do not use your activity data for purposes unrelated to the Service without your consent.

4. Disclosure of Your Information

We may disclose your information, including activity data, in the following ways:

• Service Providers: We share data with third-party vendors (e.g., cloud hosting providers like AWS) who assist us in operating our Service, under strict confidentiality agreements. These providers do not have independent rights to use or disclose your data.
• Legal Requirements: We may disclose information if required by law, such as in response to a court order, subpoena, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, with continued protection under this or a similar policy.
• With Your Consent: We may share activity data with other apps or services if you explicitly authorize it (e.g., via API integrations).
• Aggregated Data: We may share anonymized, aggregated data (where individual identities cannot be discerned) for research, benchmarking, or partnerships.

We do not sell your personal information or activity data to third parties. Specifically, Garmin activity data is only disclosed as necessary for the functionality you authorize and is not shared for advertising or unrelated commercial purposes.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or alteration. This includes encryption for data in transit and at rest, access controls, and regular security audits. However, no system is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your data:

• Access and Correction: Request access to or correction of your personal information and activity data.
• Deletion: Request deletion of your data, subject to legal retention requirements.
• Opt-Out: Withdraw consent for data processing or marketing communications at any time.
• Data Portability: Request a copy of your data in a structured format.

To exercise these rights, contact us at joel@pedalmentor.com. We will respond within a reasonable timeframe, typically 30 days.

You can also manage Garmin-specific consents directly through your Garmin account.

7. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy or as required by law. Activity data is typically retained for 2 years after your last interaction with the Service, unless you request deletion earlier.

8. Children's Privacy

Our Service is not intended for children under 13 (or 16 in certain jurisdictions). We do not knowingly collect data from children. If we become aware of such collection, we will delete it promptly.

9. International Transfers

If you are located outside the United States, your data may be transferred to and processed in the US or other countries. We ensure appropriate safeguards, such as standard contractual clauses, are in place for such transfers.

10. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted here with the updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy. For material changes, we may provide additional notice.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

This Privacy Policy is designed to comply with Garmin's requirements for API integrations, ensuring transparency in the use and disclosure of activity data.