Privacy Policy

1. Who is responsible for your data

MINI WATT is operated by Nick Smet, Kalmthout, Belgium. For privacy questions, legal notices, access requests, correction requests, account deletion, or complaints, contact info@miniwatt.app or use the contact form.

For users in the European Economic Area, Nick Smet is the controller of the personal data described in this policy, unless a third-party service states that it acts as an independent controller for its own processing.

2. What MINI WATT is

MINI WATT is sports entertainment and indoor cycling training software. It connects to smart trainers and cycling sensors, runs structured workouts, simulates routes, stores ride history, supports leaderboards, and can upload activities to Strava when you connect Strava yourself.

MINI WATT is not a medical device and does not provide medical diagnosis, medical monitoring, treatment, or professional health advice.

3. Data we collect

MINI WATT gets data directly from you, from the MINI WATT desktop app, from connected trainers and cycling sensors, from the companion web app, from generated ride calculations, and from service providers such as Supabase, Lemon Squeezy, Tally, Google Analytics, PostHog, SendGrid, and Strava when you choose to use them.

• Account data: email address, Supabase user ID, generated username, authentication/session data, and OTP login events.
• Profile data: required profile metrics such as gender, age, weight, height, FTP, unit preference, and device type.
• Ride and training data: workouts, route rides, route and segment times, full ride telemetry, power, cadence, heart rate if connected, speed, distance, calories, training effect, charts, history, and FIT export data.
• Leaderboard and route data: generated username, created or published MINI WATT routes, GPX source data where used, GPS coordinates, elevation data, route titles, route times, segment times, results, ranking data, and admin moderation records.
• Companion app data: email OTP authentication, Supabase realtime presence, gear-shift commands, map zoom commands, route name, ride status, connection state, timestamps, and session cookies needed for the companion controller.
• Strava data: when you connect Strava, MINI WATT can send ride activity data to Strava. Strava login tokens are stored locally on your device and removed locally when you disconnect Strava.
• Payment data: Lemon Squeezy handles checkout, taxes, billing, invoices, subscription status, cancellation, and payment processing as merchant of record. MINI WATT does not store full card details.
• Support data: messages, contact details, and attachments you send through Tally, email, or the contact form.
• Analytics and technical data: app and website usage events, device type, operating system, app version, page views, basic diagnostics, error context, approximate location inferred from network data, and marketing attribution where available.

4. Health and fitness data

Some MINI WATT data, including heart rate, weight, FTP, training load, calories, ride telemetry, and performance history, may be treated as health or fitness data under privacy laws. MINI WATT processes this data to provide the training features you request, including workout scaling, route physics, ride history, exports, and leaderboards.

Where the law requires explicit consent for this kind of data, MINI WATT relies on your explicit consent given during onboarding or use of the product. You can withdraw consent by requesting account deletion, but MINI WATT cannot provide its core training features without this data.

5. Why we use your data

• To create and secure your account.
• To provide the desktop app, companion controller, workouts, routes, smart-trainer control, ride history, FIT exports, and Strava upload features.
• To calculate training metrics, route physics, segment times, leaderboard results, and fraud checks.
• To run the 14-day free trial, paid subscription, billing support, refunds, and account access checks.
• To answer support requests and investigate bugs or bad experiences.
• To improve MINI WATT, understand feature usage, and fix performance issues.
• To prevent cheating, abuse, fraud, security incidents, and misuse of the service.
• To comply with legal, tax, accounting, consumer-protection, and platform obligations.

6. Legal bases

For EEA and UK users, MINI WATT relies on the following legal bases: performance of the contract for core product features, legitimate interests for security, fraud prevention, service improvement, and support, consent for analytics cookies and Strava authorization, explicit consent where health or fitness data requires it, and legal obligations for tax, accounting, and compliance records.

You can withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that already happened lawfully before withdrawal.

7. Sharing and processors

MINI WATT does not sell your personal data.

MINI WATT does not use your health, fitness, ride, telemetry, Strava, or leaderboard data for targeted advertising, data broker sales, or AI model training.

MINI WATT uses trusted service providers to run the product: Vercel for website hosting, Supabase for authentication, database, and realtime services, Google Analytics for website analytics, PostHog for product analytics, Tally for contact forms, Lemon Squeezy for payments as merchant of record, Strava for optional activity uploads, GitHub for release hosting, and SendGrid for email delivery.

These providers process data only as needed to provide their services, secure their systems, comply with law, or as described in their own terms and privacy notices. Strava and Lemon Squeezy may act as independent controllers for parts of their services.

8. Strava

Strava is optional. MINI WATT only uploads activities to Strava after you connect Strava and choose to upload. MINI WATT requests the authorization needed to write activities and does not use Strava to import your training history.

Activity data sent to Strava may include ride title, sport type, time, distance, speed, power, cadence, heart rate, route or workout data, and the FIT file generated by MINI WATT. After upload, Strava handles that activity under Strava's own terms and privacy policy.

Strava may monitor and collect usage data related to MINI WATT's access to the Strava API for security, compliance, support, and platform operations under Strava's own API terms and privacy policy.

MINI WATT stores Strava authorization data locally on your device. Disconnecting Strava removes that local authorization data. If you delete an activity in Strava, Strava controls deletion of the Strava-hosted activity. If MINI WATT ever receives or caches Strava-originated personal data, MINI WATT will delete it when required by Strava's API terms or applicable law.

9. Cookies and analytics

MINI WATT uses necessary cookies and local storage for authentication, security, the companion app, and remembering your cookie choice. These are required for the service to work.

MINI WATT uses Google Analytics on the website to understand usage and improve reliability. On the website, Google Analytics is only loaded after you accept analytics cookies. MINI WATT does not use website session recording.

The website cookie banner controls website analytics. Desktop app analytics is handled separately and may use a different analytics provider. If an in-app analytics control is not available, you can contact MINI WATT to ask for analytics to be disabled where required by applicable law.

You can reject analytics cookies without losing access to MINI WATT. Rejection does not disable strictly necessary authentication or security storage. You can reopen cookie settings from the website after making a choice.

10. Retention

• Account and profile data are kept while your account exists.
• Ride history and full telemetry are currently kept indefinitely so your training history, FIT export, and leaderboard results remain available.
• Route and segment times are currently kept indefinitely. MINI WATT may later move to a one-year retention period for route and segment times and will update this policy if that changes.
• Leaderboard and anti-fraud records may be kept as long as needed to maintain fair rankings and investigate suspicious activity.
• Support messages are kept as long as needed to handle the request, maintain records, and improve support.
• Payment, tax, invoice, and subscription records are kept by Lemon Squeezy and, where MINI WATT receives records, as long as required for legal, tax, accounting, and dispute purposes.
• When you request account deletion, MINI WATT deletes your account data, profile data, ride history, telemetry, and leaderboard entries unless retention is legally required. Deletion requests are handled within a reasonable time and normally within 30 days after identity verification, though backups and legal records may take longer to age out.

11. International use and transfers

MINI WATT is available worldwide. MINI WATT aims to use EU-hosted services where available, but some providers may process limited data outside the EEA for hosting, security, support, infrastructure, or legal reasons.

Where international transfers require safeguards, MINI WATT relies on appropriate safeguards such as standard contractual clauses, adequacy decisions, or the provider's approved transfer mechanisms.

12. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to the use of your personal data. You may also have the right to withdraw consent and to complain to a data protection authority.

Users in places with consumer privacy laws, including parts of the United States, may also have rights to know what categories of personal data are collected, request correction or deletion, request portability, opt out of sale or sharing where applicable, and appeal a privacy-rights decision. MINI WATT does not sell personal data or share personal data for cross-context behavioural advertising.

MINI WATT uses automated calculations to generate workout targets, route physics, ride metrics, route and segment rankings, and suspicious-result signals. These calculations are part of the product experience and are not intended to make legal or similarly significant decisions about you. Admin moderation can review, edit, hide, or remove results where fraud, abuse, or technical issues are suspected.

EU users can contact the Belgian Data Protection Authority. You should contact MINI WATT first at info@miniwatt.app or through the contact form so the request can be handled directly.

13. Security

MINI WATT uses passwordless OTP login, access controls, hosted infrastructure providers, and transport security to protect user data. No system is perfectly secure, and you are responsible for keeping access to your email account and devices secure.

If MINI WATT becomes aware of a personal-data breach that legally requires notice, MINI WATT will notify affected users and authorities as required by applicable law.

14. Age limit

MINI WATT is for adults only. You must be at least 18 years old to create an account or use the product.

15. Changes

MINI WATT may update this policy when the product, law, or providers change. The latest version will be posted on this page with a new Last Updated date.

16. Contact

Privacy questions and requests can be sent to info@miniwatt.app or through the contact form.