Privacy Policy

Summary

• UltraCue includes a Garmin Connect IQ data field and a website/platform used to manage your account, plans, and linked devices.
• You may create an account, sign in, manage your profile, link devices, and create or edit plans and cues.
• You may also subscribe to our newsletter by providing your email address.
• To sync your active plan to your Garmin device, UltraCue may process a device identifier or device token.
• We do not sell your personal data.
• We do not intentionally collect or store ride metrics such as heart rate, power, cadence, or GPS track for profiling or analytics unless clearly stated otherwise in the future.

1) Who we are

This Privacy Policy explains how UltraCue (“we”, “us”, “our”) processes personal data when you use:

• the UltraCue website,
• the UltraCue Garmin Connect IQ data field (the “App”), and
• related services, including user account registration, login, profile management, newsletter subscription, plan management, and linked device management.

2) What data we process

2.1 Account information

When you register for an UltraCue account, sign in, or manage your profile, we may process information such as:

• email address,
• name or display name (if provided),
• authentication-related data,
• basic profile information you choose to add or update.

2.2 Newsletter subscription data

If you subscribe to our newsletter, we process your email address and related subscription preferences so we can send you updates, product news, and service communications where permitted by law.

2.3 Device identifier and linked device data

When the App needs to retrieve the active plan associated with your device, it may send a device identifier (for example a token configured on our platform) to our API endpoint, such as via an X-Device-Token header.

We may also process data needed to associate one or more devices with your account and to manage device links inside your UltraCue profile.

2.4 Plan and cue content

We process the plans, cues, titles, distances, notes, and related content that you create, edit, store, or select in the UltraCue platform in order to provide the service.

2.5 Technical and log data

Like most online services, our systems may automatically record limited technical data, such as:

• IP address,
• timestamp,
• request path,
• browser or device type,
• error codes,
• basic server and authentication logs.

We use this information to operate the service, maintain security, detect abuse, and troubleshoot issues.

2.6 What we do not intentionally collect

UltraCue does not intentionally collect or store personal ride metrics such as GPS tracks, heart rate, cadence, speed, or power for profiling or analytics, unless this is explicitly introduced in a future version of the service and reflected in an updated Privacy Policy.

3) Why we process data (purposes)

We process personal data for the following purposes:

• to create and manage your user account,
• to authenticate users and enable login,
• to allow you to manage your profile, plans, cues, and linked devices,
• to retrieve and display your active plan on your Garmin device,
• to send service-related messages and account communications,
• to send newsletters where you have subscribed or where otherwise permitted by law,
• to secure the service, prevent abuse, and detect malicious activity,
• to debug technical issues and improve reliability and performance.

4) Legal basis (EEA/UK users)

Where applicable, we rely on one or more of the following legal bases:

• Performance of a contract — when processing is necessary to provide the UltraCue services you request, including account access, plan management, and device syncing.
• Legitimate interests — when processing is necessary to secure, maintain, and improve the service, including fraud prevention, abuse detection, and troubleshooting.
• Consent — where required, for example when you subscribe to marketing or newsletter communications.

5) Sharing of data

We do not sell your personal data.

We may share limited data with service providers that help us operate UltraCue, such as hosting, database, authentication, email delivery, analytics, and infrastructure providers. These providers are only permitted to process data on our behalf and under appropriate contractual and legal safeguards.

We may also disclose data where required by law, regulation, legal process, or to protect the rights, security, and integrity of UltraCue, our users, or others.

6) Data retention

• Account and profile data: retained for as long as your account remains active, and for a limited period thereafter where necessary for legal, security, or administrative reasons.
• Plans, cues, and linked device data: retained as long as needed to provide the service or until deleted by you or upon account deletion, subject to legal and technical retention needs.
• Newsletter data: retained until you unsubscribe or request deletion, unless a longer retention period is required by law.
• Server and technical logs: retained for a limited period for security, abuse prevention, and troubleshooting, then deleted or anonymized where appropriate.

7) Security

We use reasonable technical and organizational measures designed to protect personal data, such as secure transmission methods, restricted access, and authentication controls where appropriate.

However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

8) Your choices and rights

Depending on your location and applicable law, you may have the right to:

• access your personal data,
• correct inaccurate data,
• request deletion of your data,
• restrict or object to certain processing,
• withdraw consent where processing is based on consent,
• request portability of your personal data.

You may also unsubscribe from newsletter communications at any time by using the unsubscribe link in the email or by contacting us at info@ultracue.app.

9) Children’s privacy

UltraCue is not intended for children under 13, or the minimum age required by applicable law in your country. We do not knowingly collect personal data from children.

10) International data transfers

If personal data is transferred outside your country or outside the European Economic Area, we will take appropriate steps to ensure that such transfers are protected by suitable safeguards as required by applicable law.

11) Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. If changes are material, we may provide additional notice where appropriate.

12) Contact

For privacy questions, requests, or account-related data inquiries, contact: info@ultracue.app