Long Haul: Cycling & Routes ("Long Haul," "we," "us," or "the App") is a cycling route, ride recording, and group coordination service. By using the App, you acknowledge the practices described in this policy.
1. Scope
This policy applies to the Long Haul iOS app, its Apple Watch companion, Live Activities, and the web and server services operated for the App. It does not control third-party websites or services that publish their own privacy policies.
2. Information we collect
2.1 Information you provide
| Category | Examples | When it is used |
|---|---|---|
| Account information | Phone number, SMS verification code, password credentials, and an Apple Sign In identifier | Registration, sign-in, account recovery, and security |
| Profile information | Display name, profile photo, bio, gender, birthday, and region when you choose to provide them | Profile and social features |
| Routes and ride content | Saved routes, GPX files, ride tracks, ride statistics, photos, comments, and group ride information | Route, history, sharing, social, and group ride features |
| Preferences | Units, language, time format, auto-pause, display layout, and other app settings | Personalizing your experience |
| Support communications | Email address, message content, screenshots, and diagnostic files you send to us | Responding to support requests |
2.2 Information collected with your permission or while features are active
| Category | Examples | Purpose |
|---|---|---|
| Location | Precise GPS coordinates, altitude, speed, heading, accuracy, and derived city or region | Recording rides, navigation, route display, weather, and live group position sharing. Background location may be used while an active ride requires it. |
| Motion and fitness | Accelerometer, gyroscope, device attitude, and barometer readings | Speed filtering, grade estimates, auto-pause, and ride metrics |
| Health data | Heart rate, age, height, weight, workout status, and cycling workout records | Showing heart-rate zones, estimating calories, and reading or writing workouts through HealthKit after authorization |
| Bluetooth sensor data | Sensor name, signal strength, heart rate, cadence, speed, and power readings | Connecting cycling sensors you choose to pair |
| Apple Watch data | Live heart rate, workout state, elapsed time, and ride metrics | Synchronizing an active ride between your iPhone and Apple Watch |
| Device and diagnostics | Device model, operating system, app version, network type, crash reports, and technical logs | Compatibility, reliability, security, and troubleshooting |
| Service activity | Authentication events, feature requests, rate-limit events, and server logs | Operating the service, preventing abuse, and diagnosing failures |
2.3 Information we do not use for advertising
- We do not sell personal information.
- We do not use third-party advertising SDKs or the advertising identifier (IDFA).
- We do not access your contacts, text messages, or call history.
- We do not access photos beyond the images or files you choose to import, upload, or save.
3. How we use information
- Provide the service: record rides, calculate statistics, display maps, navigate routes, coordinate groups, and synchronize supported Apple services and sensors.
- Manage accounts: verify identity, maintain sessions, recover accounts, and manage profile information.
- Personalize the App: apply your units, language, display, sensor, and ride preferences.
- Keep the service safe: detect suspicious sign-ins, enforce reasonable limits, prevent SMS abuse, and protect users and infrastructure.
- Improve reliability: diagnose crashes, investigate support requests, monitor performance, and maintain compatibility.
- Meet legal obligations: respond to valid legal requests and enforce our Terms of Service.
4. Device permissions
iOS asks for your permission before Long Haul accesses protected device capabilities. You can change these choices at any time in iOS Settings. Disabling a permission may prevent the related feature from working.
| Permission | Why Long Haul requests it | If disabled |
|---|---|---|
| Location | Ride tracking, speed and distance, navigation, maps, nearby routes, weather, and active group rides | Core tracking and location features will be unavailable or limited |
| Motion & Fitness | Motion sensors, barometer data, and more stable ride metrics | Grade, movement, and auto-pause accuracy may decrease |
| Health | Heart rate and body measurements, plus cycling workouts written to Apple Health | Health metrics and workout sync will be unavailable |
| Bluetooth | Heart-rate, cadence, speed, and power sensors | External cycling sensors cannot connect |
| Camera and Photos | Profile photos, ride images, and route file import or export | Photo and file features will be limited |
| Notifications and Live Activities | Ride events, group updates, and progress on the Lock Screen or Dynamic Island | Those alerts and live views will not appear |
5. Service providers and platform services
Long Haul relies on selected providers to deliver specific features. They process only the information needed for those services and operate under their own terms and privacy policies.
| Provider | Purpose | Information involved |
|---|---|---|
| Amazon Web Services | Application hosting, databases, and media storage in the United States (Oregon) | Account, route, ride, group, media, and service log data stored by Long Haul |
| Apple | Sign in with Apple, HealthKit, WatchConnectivity, WidgetKit, ActivityKit, App Store distribution, and system sharing | Apple account identifier, authorized health and workout data, ride status, and content you choose to share |
| AMap | Maps, search, geocoding, route planning, and navigation | Location, search terms, IP address, and device or app information required by the SDK |
| Caiyun Weather | Current conditions and forecasts along your ride | Approximate or precise coordinates used for the weather request |
| Alibaba Cloud | SMS delivery and human verification that prevents automated abuse | Phone number for delivery, network environment, device information, and interaction signals |
| Sentry | Error monitoring and technical diagnostics when enabled | App or server errors, request context, device or software details, and technical identifiers |
Provider policies are available from AWS, Apple, AMap, Caiyun Weather, Alibaba Cloud, and Sentry.
6. Sharing and disclosure
- Your instructions: when you join a group ride, authorized participants may see your live ride position and status. When you publish or share a route, ride, profile, photo, comment, or card, the audience you choose can receive that content.
- Service providers: we disclose information to the providers listed above only as needed to operate their services.
- Legal and safety reasons: we may disclose information when required by applicable law, a valid legal process, or when reasonably necessary to protect users, the public, our rights, or the security of the service.
- Business changes: if Long Haul is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction subject to appropriate notice and safeguards.
7. Storage, international transfers, and retention
- On your device: preferences, cached maps and media, sensor samples, and offline ride data may remain in the App's protected storage until you delete them or uninstall the App.
- On our servers: account, route, ride, group, social, and uploaded media data may be stored on AWS infrastructure in Oregon, United States.
- International processing: using Long Haul may transfer information to countries other than the one where you live, including the United States and locations used by the providers above.
- Retention: account data is generally kept while your account is active. Operational logs and backups are retained for limited periods based on security and recovery needs. We may retain information longer when required by law, necessary to resolve disputes, or needed to prevent abuse.
- Deletion: after a verified deletion request, we remove or de-identify account information from active systems within a reasonable period. Residual copies may remain temporarily in encrypted backups until they rotate out.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information. These include TLS in transit, password hashing, access controls, restricted infrastructure ports, security monitoring, and backup procedures. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
9. Your choices and rights
- Access and correction: review and update supported profile fields inside the App.
- Permissions: withdraw location, health, Bluetooth, motion, photo, camera, or notification access in iOS Settings.
- Content control: delete supported ride records and choose what to publish or share.
- Account deletion: use the account deletion control in the App or follow our Data Deletion instructions. Deletion is permanent and may remove cloud content that cannot be restored.
- Privacy request: email us to request access, correction, deletion, or a copy of information associated with your account. We may need to verify your identity before completing a request.
10. Children
Long Haul is not directed to children under 14, and we do not knowingly collect personal information from them without appropriate parental or guardian authorization. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.
11. Policy updates
We may update this policy as the App, our providers, or legal requirements change. For material changes, we will provide notice in the App or through another appropriate channel before the revised policy takes effect. The effective date and version at the top identify the current policy.
12. Contact us
For privacy questions, account deletion, or requests related to your information:
- Email: kaelcao7@gmail.com
- Developer: Long Haul Team
- Website: longhaul.me/support.html