Introduction

Misfit ("we," "our," or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our cycling tracking and group coordination application.

Information We Collect

Activity Data:

• GPS location data during rides (when tracking is active)
• Heart rate, power, cadence, and other sensor data from connected devices
• Ride duration, distance, speed, and elevation
• Routes and waypoints you create or save

Account Information:

• Apple ID (through iCloud authentication)
• Device information and app usage analytics

Group Features:

• Messages sent in ephemeral group chats
• Real-time location data (only when you explicitly enable location sharing)
• Shared maps and waypoints within groups

How We Use Your Information

• To track and display your cycling activities
• To generate activity files compatible with third-party platforms
• To enable group coordination features including chat and map sharing
• To improve app performance and user experience
• To sync your data across your Apple devices via iCloud

Data Storage and Security

Your activity data is stored locally on your device using SwiftData and synced to your private iCloud account. Group coordination features use Apple's CloudKit, which encrypts data in transit and at rest. We do not maintain our own servers or databases for storing your personal information.

Location Data and Privacy

Privacy-first approach: Location sharing is always opt-in. You can participate in group chats and view shared maps without broadcasting your location. Real-time location sharing is only enabled when you explicitly choose to share it, and you can disable it at any time.

Location data is only collected when you're actively recording a ride or when you've opted in to share your location with a group. We do not track your location in the background without your explicit consent.

Third-Party Integrations

Misfit can export activity files to third-party platforms like Strava and Garmin Connect. When you use these integrations:

• You authorize us to upload activity data to your connected accounts
• Those platforms' privacy policies govern how they use your data
• You can disconnect integrations at any time through the app settings

Data Retention

Your activity data is retained on your device and in your iCloud account until you delete it. Ephemeral group chats are automatically deleted at the end of each day. You can delete individual activities or your entire account at any time through the app.

Health Data

Heart rate and other health metrics collected from Bluetooth sensors are treated as sensitive health information. This data is stored securely on your device and in your private iCloud account. We do not share health data with third parties unless you explicitly export activities to external platforms.

Children's Privacy

Misfit is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Your Rights

You have the right to:

• Access your personal data stored in the app
• Delete your data at any time
• Export your activity data in standard formats
• Disable location services and sensor connections
• Opt out of data syncing via iCloud

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Your continued use of Misfit after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

Email: misfit@hunterleebrown.com