Legal
Privacy & cookies
Last updated: October 2026
At Draftline we take your data seriously. This page explains what we collect, why, and what control you have. Plain and simple, no fine print.
What we collect
Your account
Email, name and @username to identify you; your FTP and weight (optional) to compute your zones and metrics.
Your training
The sessions you save from the app: power, cadence, heart rate, speed, distance and the .fit file. They're yours; we use them to show your history and progress.
Connections
If you connect intervals.icu, Strava or Garmin Connect, we only store access tokens, encrypted on our servers. Your Garmin password is never stored. You can disconnect any of them at any time.
Garmin Connect data
If you connect Garmin, and only with your authorization, we may import the workouts on your calendar, send the workouts and courses you build in Draftline to your calendar, upload the .fit file of your rides, and receive your activities to show you your training history and load. We use this data only to provide these features, always associated with your account: we do not sell it, share it with third parties or use it for advertising. The only provider that processes it is Amazon Web Services, where it is stored (EC2 servers and S3 files, in the United States, us-east-2), with access tokens encrypted and everything encrypted in transit. We do not use artificial intelligence or machine learning with your Garmin data, and it is never used to train or evaluate models. You can view it in your history, correct your profile, download the .fit file of each activity, and ask us for a copy of all of it or to delete it: we do so within 30 days. To withdraw your consent, disconnect Garmin from your Draftline profile or from Garmin Connect: we stop receiving data immediately and automatically delete the activities and files we received from Garmin. The same happens if you delete your account.
Community
Your friends, clubs and communities, and your live presence (world and position) while you ride, so others can see you in the moment.
Analytics
Only if you accept analytics cookies, we use PulseView (privacy-first) to understand site usage and catch errors. We never sell your data.
Who we share with
We don't sell or hand off your data. We rely on a few providers to operate:
- ›A server on AWS (EC2) where the app and database run.
- ›AWS S3 to store your .fit files.
- ›Amazon SES for verification emails.
- ›PulseView for analytics and errors (only with your consent).
- ›intervals.icu, if you connect it.
- ›Strava, if you connect it: we upload the .fit of each new ride.
- ›Garmin Connect, if you connect it: whatever you authorize (see “Garmin Connect data”).
Security & retention
Your password is hashed, and sensitive keys (intervals.icu, Strava, Garmin) are encrypted. We keep your data while you have an account; if you close it, your sessions, groups and friendships are deleted.
Your rights
You can view and edit your data from your profile, disconnect intervals.icu, Strava or Garmin at any time, ask us to delete what we received from them, and request deletion of your account (with all your data) by writing to us.
Contact
Privacy questions: support@draftline.live.