Privacy policy.

Drais provides software for managing bikes, components, maintenance, ride history, gear and community features. For personal data processed within Drais, Drais acts as the data controller unless a feature states otherwise.

Data controller: Lukasz Klemens, trading as Drais (sole trader, Netherlands). Dutch Chamber of Commerce (KVK) number 64745239. Contact: info@drais.app. Our postal address is available on request by email.

Contact point under the Digital Services Act (Regulation (EU) 2022/2065). info@drais.app is our single point of contact both for users of the service (Article 12) and for Member State authorities, the European Commission and the European Board for Digital Services (Article 11). We can be contacted in Dutch, English or Polish, and messages are read by a person.

• Account data. Email address, display name, authentication identifiers, language, settings and support messages. If you sign in with Apple or Google, we receive the identifier and email address that service returns to us — we never receive your password.
• Subscription data. If you view, buy, restore or manage Drais Premium, Drais and RevenueCat process your pseudonymous Drais account UUID as the RevenueCat App User ID, the store, product and offer identifiers, purchase, renewal, cancellation, expiry and refund events, entitlement status, and the App Store receipt or Google Play purchase token. Apple or Google processes the payment; Drais and RevenueCat do not receive your full card or bank details.
• Device permissions. Depending on your device and settings, Drais may use: location (ride recording, live group-ride location, SOS, nearby group rides), camera and photo library (bikes, parts, receipts), microphone (voice messages and voice dictation), speech recognition (converting dictated notes into text), Bluetooth (cycling sensors), biometrics (unlocking the app with Face ID or a fingerprint) and notifications. You can manage every one of these in your device settings, and the related feature simply stops working if you decline.
• Bike and component data. Bike names, photos, serial numbers (if you add them), component details, installation dates, costs, weight, wear estimates and service intervals.
• Maintenance data. Service logs, reminders, notes, receipts (if you upload them) and cost records for DIY or workshop work.
• Ride data, including GPS routes. Distance, duration, date, elevation, speed, linked bike, imported ride metadata and manually entered rides. When you record a ride, the app uses your device's GPS — including while the screen is off or the app is in the background, so the route is not lost mid-ride. The recorded route is stored on your device and synchronized to your account on our servers, so your rides are available across your devices and survive losing your phone. Routes are never shown to other users unless you choose to share or publish a ride, and are never used for advertising. If you set privacy zones, the parts of a route inside them are removed before the route is stored — they are not reconstructed anywhere. Deleting a ride deletes its route from your device and from our servers.
• Health and fitness data. Ride distance, duration, elevation, speed and pace. If you pair Bluetooth cycling sensors, we also record heart rate, power, cadence and speed, and store per-ride summaries (such as average and maximum heart rate, average power and cadence) in your account. If you connect Strava, imported activity detail can contain the same categories. We use this to show you your own rides and to keep bike and component mileage accurate and, only if you turn on the AI Assistant and choose to share it, to write your AI ride summaries and answer your questions (see AI Assistant in section 3). We do not share health or fitness data with other users, do not use it for advertising, and do not use it to train machine-learning models.
• Live location during group rides. If you join a group ride and enable live tracking, the app shares your current GPS position in real time with the other participants. Live tracking is opt-in and off by default, is active only during the group ride, and stops as soon as you leave it. Raw position updates are deleted from our servers after 90 days. A reduced-resolution track of the ride (roughly one point every five minutes) is kept so participants can review the route afterwards, and is also deleted after 90 days. Live location data is never used for advertising and never sold.
• SOS and emergency contacts. If you set up SOS, we store the emergency contacts you choose. When you trigger SOS, each contact receives a message identifying you by display name together with a link showing your current location, for as long as the alert is active. SOS is not an emergency service — see our Terms of Service. If an emergency contact is not a Drais user and we cannot notify them directly, this policy serves as the information required by Article 14 GDPR; they can ask us to delete their details at info@drais.app. Please only add someone who has agreed to be your emergency contact.
• Photos, video and voice messages. Photos and videos you add to bikes, parts, maintenance logs, posts or listings. If you send a voice message in chat, the app uses your microphone; recordings are stored only if you send them and are deleted when you or the recipient deletes the message. If you dictate a maintenance note, your device's own speech-recognition service converts the audio to text — on some devices and settings that processing happens on Apple's or Google's servers under their privacy policies, and the resulting text is what Drais stores.
• Integration data. Access tokens and imported activity data from services you choose to connect, such as Strava or Wahoo. See section 05.
• Community data. Profile data, forum posts, chat messages, marketplace listings, group rides, club activity, reports you submit and moderation records.
• Technical data. Device type, app version, logs, crash diagnostics, security alerts, sync metadata and — if you enable notifications — a push notification token issued by Apple or Google.
• Website analytics. When you visit drais.app, Google Analytics (GA4) collects page views, an approximate location derived from IP, browser/device type, referring URL and session duration — only after you accept the cookie notice.
• Session replays and heatmaps. Only after you accept the cookie notice, Microsoft Clarity records a pseudonymized replay of your visit: mouse movement, clicks, scrolling, the page URLs you visit, referring URL, browser and device type, and an approximate location derived from your IP address. Text you type into form fields (such as your email address) is masked by Clarity in every masking mode and is not sent to Microsoft. Clarity is not loaded on pages whose URL can contain a sign-in or recovery code.

Product analytics in the mobile app. The mobile app includes Google Analytics for Firebase (GA4), provided by Google, which we use only for aggregate product-usage analytics — which screens and features are opened, and whether a flow such as onboarding was completed. It is off by default: nothing is collected until you explicitly opt in, and you can turn it off again at any time in Settings → Privacy. While it is off, the app sends no analytics events at all. These events carry no names, no email addresses, no tokens and no free-text content you have written.

Advertising identifiers. Drais contains no advertising SDKs and shows no ads, and our own code never reads the advertising identifier of your device. Because the Android app includes Google Analytics for Firebase, Google's analytics library adds the com.google.android.gms.permission.AD_ID permission to the Android app, and while product analytics is switched on Google Analytics for Firebase can access the Google Advertising ID. Product analytics is off by default, and while it is off nothing is collected — including the advertising ID. We never use the advertising ID for advertising profiling, for building audience segments, for sharing with ad partners, or to track you across other apps or websites. You can reset or delete your Google Advertising ID at any time in your Android settings. On iOS, Drais does not use the Apple Identifier for Advertising (IDFA): the app never requests tracking permission and no IDFA is collected. Microsoft Clarity runs only on the drais.app website and is never loaded in the mobile app.

We do not sell personal data. We do not use bike, ride, maintenance, health or device data for advertising profiling, for creating audience segments, or for sharing with ad partners.

• To create and secure your account.
• To store, sync and display your bikes, parts, rides, gear, maintenance and costs.
• To calculate component mileage, wear estimates, service reminders and ownership insights.
• To provide community, chat, marketplace, club and group ride features when you use them.
• To deliver notifications you have asked for.
• To connect optional integrations you authorize.
• To respond to support, security and privacy requests.
• To moderate content, keep the community safe and act on reports of illegal content.
• To improve reliability, prevent abuse and meet legal obligations.
• To write AI ride summaries and answer questions about your riding, bikes and costs, only if you turn on the AI Assistant (see below).

AI Assistant. Drais includes an optional AI Assistant. It powers two features: the AI ride summary, a short written analysis of a ride you open, and, once it is available in your app, Ask Insights on the Insights tab, which answers questions you ask about your riding, bikes and costs. The AI Assistant is off until you turn it on in Settings → Privacy. While it is off, nothing is sent to our AI provider for these features.

When you first turn it on, you choose which categories of data it may send. Summaries start ticked and raw values and spending start unticked, and you can change the selection at any time:

Summaries of your riding and bikes (ticked by default):

• Effort — how hard a ride was compared with your power threshold, as a percentage and a class. Effort measured against your heart-rate threshold is sent only under Heart rate.
• Training load — training stress, fitness, fatigue and form, and how many rides you did recently. When a ride has no power data, its training stress may be calculated from its heart rate; only the result is sent, not the heart rate itself.
• Comparisons — how much a ride's average speed differs from your usual rides, as a speed difference, and, in Ask Insights, how your riding changes over time, as percentage changes.
• Ride structure — time in power zones, intervals, intensity, normalized power and best efforts in watts.
• Goals — your goal and your progress towards it.
• Ride context — ride type, weather, bike type, start time, stops, ride highlights and parts due for service.
• Bikes and parts (Ask Insights only) — part wear, service status and dates, part types and bike types. Bike names are never sent.

Your raw values and spending (unticked by default):

• Ride stats — distance, moving time, speed, elevation, cadence and energy, your recent ride count and distance totals, and in Ask Insights the distances, times and elevations your answer is about.
• Heart rate — this is health data: a ride's average, maximum and peak heart rate, its time in heart-rate zones, how its heart rate differs from your usual rides and its effort measured against your heart-rate threshold, and your maximum, threshold and resting heart rate.
• Power — a ride's average power and your FTP.
• Body weight — your body weight, and watts per kilogram when Power is also shared.
• Spending (Ask Insights only) — what you spent by category and bike, cost per distance, DIY savings and your 12-month cost forecast.

While the AI Assistant is on, four items are always sent because a reply cannot be written without them: the weekday of the ride, how complete the ride's data is (whether it has heart-rate or power readings the summary can use, without the readings themselves), the suggested next step (a fixed label chosen by the app) and the app language. None of them identifies you. We never send your name, email address, account identifier, GPS route, location or bike names to our AI provider. Only rides you entered yourself, imported from a FIT file or synced from Wahoo are ever sent. Rides imported from Strava or any other source, and anything derived from them, are never sent to the AI Assistant, whatever you choose (see section 5).

Your choice is stored on our servers with the time you made it, and our servers enforce it: categories you have not chosen are removed before anything is sent. Your raw values — FTP, body weight, and maximum, threshold and resting heart rate — are read from your profile by our server only when you have ticked the matching category, and are never sent from your device for this purpose.

We send the chosen data to Anthropic, our AI provider, which acts as our processor. Anthropic processes it to write the reply, does not use it to train its models, and may keep it for a limited period to detect and prevent abuse, under its commercial terms. Anthropic processes data in the United States; see Transfers outside the EEA in section 6.

The legal basis is your consent (Article 6(1)(a) GDPR). Heart-rate data concerns your health and is sent only when you tick Heart rate; for it, the legal basis is your explicit consent under Article 9(2)(a) GDPR, given when you turn on the AI Assistant and tick that category. This consent is separate from the consent you give when you pair a sensor or connect an activity platform.

What is kept, and for how long. An AI ride summary is stored in your account on our servers and is visible only to you. It stays until you delete the ride or your account, or switch the AI Assistant off. If you change the categories while the AI Assistant is on, summaries already written stay in your account, are marked as written under an earlier choice, and are rewritten from your new choice only when you tap to regenerate them. Ask Insights answers are kept on our servers for no more than 30 days, and are deleted earlier when the rides they are based on are deleted, when you change your choice, or when you delete your account.

Changing or withdrawing your choice. You can change the categories or switch the AI Assistant off at any time in Settings → Privacy. Switching it off stops all sending for these features straight away and deletes all your AI ride summaries from our servers. Withdrawing consent does not affect processing carried out before you withdrew it. You can also ask us to erase summaries already written (see section 10).

• Contract. To deliver the Drais app and account features you request.
• Consent. For optional integrations, live location sharing, SOS, the AI Assistant, certain communications, in-app product analytics (Google Analytics for Firebase), and website analytics (Google Analytics and Microsoft Clarity) when you accept the cookie notice. You can withdraw consent at any time via Cookie settings on the website, or Settings → Privacy in the app.
• Legitimate interests. To secure the service, prevent fraud and abuse, moderate community content, and monitor crash rates and sync reliability so we can fix defects. Where we rely on this basis, you can object at any time — see section 10.
• Legal obligation. When we must retain or share limited information to comply with applicable law, including our obligations under the Digital Services Act.

Health-related data. Heart rate and comparable physiological metrics from Bluetooth sensors or imported activities may constitute data concerning health under Article 9 GDPR. Where they do, we process them only on the basis of your explicit consent under Article 9(2)(a), given when you pair a sensor or connect an activity platform, to show you your own rides and calculate your maintenance schedules. If you turn on the AI Assistant, heart-rate data is sent to it only when you tick Heart rate, on the basis of the separate explicit consent you give there, to write your AI ride summaries and answer your questions (see AI Assistant in section 3). You can withdraw consent at any time by unpairing the sensor or disconnecting the integration and, for the AI Assistant, by switching it off or unticking categories in Settings → Privacy.

Automated decision-making. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 GDPR. We use a limited set of automated signals to flag suspected spam, fraudulent listings, duplicate accounts and abusive content for review, but a person at Drais makes the final decision to remove content or restrict an account, and you can ask for that decision to be reviewed — see our Terms of Service.

Do you have to give us this data? An email address and a display name are required to create an account: without them we cannot provide the service or enter into the contract with you. Everything else — bike and component records, photos, rides, GPS recording, Bluetooth sensors, microphone access, live group-ride location, SOS contacts, integrations, the AI Assistant and website analytics — is optional. If you do not provide it, the related feature will not work, but the rest of Drais will.

If you connect a third-party service (such as an activity platform or a bike computer), Drais only imports the data necessary for the feature you authorize — distance, date, duration and linked gear where available, plus activity detail where the platform provides it. Drais uses this data to update ride history, bike mileage, component wear and maintenance reminders. Drais does not write activities back to activity platforms and does not sell or share integration data for advertising.

Alongside Strava, Drais can connect to Wahoo where that integration is available to you. The Wahoo integration is optional, is authorized through Wahoo's own consent screen, and can be disconnected in the app at any time. Your use of Wahoo remains subject to its own terms and privacy policy. When you disconnect, we delete the stored access tokens and stop importing new data. Rides imported from Wahoo are deleted within about 10 minutes; the kilometers they added stay on your parts. Reconnecting Wahoo within that time keeps the rides.

Strava. When you connect Strava, Drais requests the following OAuth scopes with your explicit consent on Strava's authorization screen:

• profile:read_all — your Strava athlete profile (name, profile photo, and bikes/gear registered on your Strava account).
• activity:read — your activity list and summaries (distance, date, duration, gear used). This is the default.
• activity:read_all — requested only if you opt in to importing your private activities. If you do not opt in, Drais uses activity:read only and cannot see activities you have marked private on Strava.

When you open an imported ride, Drais fetches that activity's detail from Strava. That detail can include heart rate, power, cadence, energy, suffer score, achievement and PR counts, the GPS route (map polyline), and the recording device. This is your own Strava data, shown only to you. It is kept while your Strava connection is active, as are the kilometers a ride added to your bike and the parts installed on it (see Strava-derived mileage below).

Drais uses your Strava data solely to (1) maintain your bike mileage automatically when a Strava activity logs mileage against a linked bike, and (2) populate your Drais ride timeline and inform maintenance schedules. We do not use your Strava data, or any data derived from it, for artificial-intelligence or machine-learning training, evaluation, grounding, embeddings, retrieval, or operation; for analytics, customer-insight generation, product improvement, benchmarking, advertising, or resale; or for disclosure to any person other than you. Strava may monitor and collect usage data related to Drais's use of the Strava API — see the Strava API Policy.

Strava-derived mileage. The component-wear mileage Drais calculates from your Strava activities is kept only while your Strava connection is active. When you disconnect or revoke access, this derived mileage is deleted or recalculated from your non-Strava data within 48 hours. Strava access and refresh tokens are stored securely server-side (not on your device and never in app builds) and are deleted when you disconnect or revoke access.

Disconnect and deletion. You can withdraw consent and remove all Strava data at any time via Profile → Connected Apps → Disconnect. This revokes Drais's access at Strava, deletes your tokens, removes rides imported from Strava, and deletes or recomputes any Strava-derived mileage. You can also revoke access directly in Strava's app settings — Drais receives an automatic deauthorization notification and deletes your Strava data within 48 hours. The app shows confirmation after server-side deletion completes. Other devices update when they next sync. For deletion requests made outside the app, contact info@drais.app for written confirmation. Imported routes and Strava gear links are removed; Strava-derived bike distance, chain mileage snapshots and recurring reminder mileage baselines are cleared. Your bike records, manually entered data and data from other integrations remain when you disconnect Strava, except the kilometers on older records described below. Account deletion removes those records too.

Mileage on older records. When you disconnect Strava, we also clear the kilometers recorded on maintenance, part-install and part-history records created before September 9, 2026, even if you typed them by hand. Before that date the app could copy your bike's odometer imported from Strava onto these records, and we can no longer tell which values came from Strava. The records themselves — dates, parts, notes and costs — stay.

Strava and the Strava marks are trademarks of Strava, Inc. Drais uses these marks under the Strava API Agreement and Strava Brand Guidelines solely to identify Strava as the source of imported activity data. Drais is not affiliated with, endorsed by, or sponsored by Strava, Inc.

You can disconnect integrations in the app at any time. If you revoke access through an external provider, Drais stops using that connection and deletes tokens in accordance with the provider's deauthorization flow and our retention periods.

Drais stores core data locally on your device and syncs it with cloud infrastructure so that your account works across multiple devices. We use the following service providers:

• Supabase — authentication, database and file storage, in the Ireland (EU) region.
• PowerSync — offline-first synchronization between your device and your account.
• Render — hosting for the Drais application and website, in the Frankfurt (EU) region.
• Sentry — crash reporting and performance monitoring.
• Resend — transactional email delivery.
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) — delivery of push notifications for chat messages, group-ride invitations, reminders and SOS alerts. They receive a device push token and the notification content; they do not receive your account data.
• Google Ireland Limited (Google Analytics) and Microsoft (Clarity) — website analytics only, after cookie consent. Microsoft Clarity is not present in the Drais mobile app.
• Google (Google Analytics for Firebase) — aggregate product-usage analytics in the mobile app, and only after you have opted in.
• Apple and Google — if you use Sign in with Apple or Google Sign-In, they broker the credential and tell us that you authenticated.
• RevenueCat — Drais Premium subscription infrastructure, purchase validation, entitlement status, restoration and subscription management.
• Anthropic — AI processing for three features: the AI Assistant (AI ride summaries and Ask Insights), only with your consent and only the categories you choose (see section 3); marketplace price suggestions, using the listing details you enter, such as category, condition, model, year, groupset and frame size; and bike-specification lookups, using a bike's brand, model and year. Anthropic receives no name, email address or account identifier from us, and does not use this data to train its models.

Subscriptions. RevenueCat acts as our processor. Subscription data is retained while your account or subscription is active and, where needed, for a limited period for disputes, fraud prevention or legal obligations. Deleting your Drais account asks RevenueCat to erase its Drais customer record, but it does not cancel Apple or Google billing; cancel in the relevant store first. Apple and Google retain their own transaction records under their policies and legal duties.

After account deletion, Drais retains one opaque account UUID in a deletion-suppression ledger. The UUID is pseudonymous personal data. It is used solely to prevent RevenueCat from recreating the deleted customer and to repeatedly verify erasure; access is restricted to backend processes and authorized operators, and it is not used for a profile, product functionality or analytics. We retain it until the RevenueCat integration or project is decommissioned, or until customer recreation is technically impossible. The lawful basis for this processing is our legitimate interest in honoring deletion requests and preventing erased provider records from being recreated.

Drais enables RevenueCat processing only after the written data-processing terms required by GDPR Article 28 and any necessary international-transfer safeguards have been reviewed and documented. Other third parties that process personal data on our behalf are subject to written terms requiring them to protect your data, process it only on our instructions, and delete or return it when our agreement ends.

Sentry processes crash logs, stack traces and device context (model, OS, app version). Sensitive fields — access tokens, refresh tokens, encrypted payloads, GPS coordinates and chat messages — are stripped before transmission. Crash data is processed on Sentry infrastructure in the EU (Frankfurt) or the US.

Crash reporting is on by default, and you can disable crash reporting at any time in Settings → Privacy. Crash reports are linked to the identifier of the account you are signed in with, which makes them pseudonymous rather than anonymous — that link is what allows us to find your reports and delete them. The app therefore also offers an Erase my crash data action in Settings → Privacy, which asks Sentry to delete the crash reports stored for your account. In any case, crash reports are retained for no more than 90 days.

Microsoft Clarity provides session replays and heatmaps for the drais.app website. For the data Clarity collects, Microsoft acts as an independent data controller and processes that data under the Microsoft Privacy Statement; for the collection and transmission of that data from our website, we and Microsoft act as joint controllers, and you can ask us for the essence of that arrangement at info@drais.app. Clarity is only loaded after you accept the cookie notice, at which point it sets the first-party cookies _clck and _clsk. We send Clarity a consent signal with advertising storage denied, so Microsoft's advertising cookies are not set. Data is processed on Microsoft infrastructure, including outside the EEA.

OpenStreetMap. Map tiles are served by the OpenStreetMap Foundation. When a map is displayed, your device requests tiles directly, which means the tile server receives your IP address and the map area you are looking at. We do not send it your account identifier or your route.

Open-Meteo provides weather forecasts for ride planning features. When the app needs a forecast, we send your approximate latitude and longitude to the public API. No account identifier, device identifier or API key is sent along. Open-Meteo states that it does not log personal data.

Transfers outside the EEA. Some providers process data outside the European Economic Area. Where they do, we rely on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework for providers certified under it, or on the Standard Contractual Clauses (Commission Decision (EU) 2021/914) together with a transfer impact assessment and additional technical measures such as encryption in transit and at rest. You can obtain a copy of the safeguards we rely on by emailing info@drais.app.

All data transmitted between the app and our servers is encrypted in transit using TLS, and data stored with our hosting providers is encrypted at rest. Database access is governed by row-level security rules so that one account cannot read another account's data. Photos, videos, voice messages and ride data are stored in access-controlled buckets that require an authenticated, time-limited link. Access to production systems is restricted and protected by multi-factor authentication. Integration tokens are held in the device keychain or server-side secret storage, never in app builds. Crash diagnostics are kept separate from account content, with location coordinates and message content stripped before transmission.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will inform you and the Dutch Data Protection Authority as required by Articles 33 and 34 GDPR.

We retain account and app data for as long as your account is active or as long as needed to provide the service. Community content — forum posts, listings, club posts and chat messages — is retained while your account is active and until you or the other participant deletes it.

Group-ride location. Raw live-location updates and the reduced-resolution ride track are both deleted 90 days after the group ride.

Imported Strava records and Strava-derived mileage are kept while your connection is active. Within 48 hours of disconnection, revocation, a deletion request or account deletion, the records are deleted and the mileage is deleted or recalculated. Activities you delete on Strava are removed from Drais within 48 hours, including their mileage contribution.

AI Assistant. AI ride summaries are kept in your account until you delete the ride or your account, and are all deleted from our servers when you switch the AI Assistant off. Ask Insights answers are kept for no more than 30 days, and are deleted earlier when the underlying rides are deleted, when you change your data-sharing choice, or when you delete your account.

Crash logs and diagnostics (Sentry) are retained for up to 90 days and then automatically deleted. If you switch crash reporting off, or use Erase my crash data in Settings → Privacy, we ask Sentry to delete the reports already linked to your account instead of waiting for that period to expire.

Moderation records — what we removed, why and when — are kept for 12 months, so that we can give you a statement of reasons and handle any challenge, as required by Regulation (EU) 2022/2065.

Session replays and heatmaps (Microsoft Clarity) are retained by Microsoft for 30 days. Recordings marked as favorites, a sampled subset of recordings, heatmaps and labels remain available for up to 9 months.

You can delete your Drais account at any time from Settings → Account → Delete account in the app, or from drais.app/en/delete-account. You do not need to email us or call anyone.

Deleting your account removes your profile, bikes, components, maintenance records, rides and routes, photos and videos, voice messages, gear, costs and marketplace listings. Data on your device is erased at the time of deletion. Except for the narrowly scoped RevenueCat deletion-suppression UUID described in section 6 and the exceptions below, server-side account and app records are deleted or irreversibly anonymized within 30 days unless a longer period is required by law, and backup copies expire as backups rotate.

Two things do not disappear automatically: chat messages you sent remain visible to the recipient unless they also delete them, and forum and club posts are either deleted or detached from your identity and shown as a deleted user, because they form part of another person's conversation. You can ask us to remove specific posts at info@drais.app. We may retain a minimal record where the law requires it — for example fraud or abuse records — and we will tell you if that applies to you.

Under the GDPR you have the right to access, rectify, erase, restrict, export or object to processing of your personal data. You may also withdraw consent where processing is based on consent, without affecting the lawfulness of processing before you withdrew it.

You can withdraw consent for optional processing (analytics, crash reporting, integrations, live location, the AI Assistant) via Settings → Privacy in the Drais app and via Cookie settings on the website, or by emailing info@drais.app.

To exercise any other right, email info@drais.app. We will respond without undue delay and in any event within one month of receiving your request. If your request is complex or you have made several requests, we may extend this by up to two further months; if we do, we will tell you within one month and explain why.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in the country where you live.

Drais is not intended for children under 16, and you must be at least 16 to create an account. If you believe a child has provided personal data without appropriate consent, please contact us so we can review and remove it.

We may update this policy as Drais evolves. We will publish every version on this page with its version number and date. Where a change is significant, we will tell you by email or an in-app notice before it takes effect. Where a change concerns processing based on your consent, we will ask for your consent again rather than rely on this notice.

Editorial corrections (October 2, 2026). We removed references to an activity-platform integration that is not yet offered, and brought the English page in line with US spelling conventions (synchronized, authorized, kilometers, deauthorization, pseudonymized, anonymized, favorites, honoring, email). No processing purpose or data category changed, and the policy version remains v 3.4.

What changed in v 3.5 (2026-10-05). When you disconnect Strava, we now also clear the kilometers on maintenance, part-install and part-history records created before September 9, 2026, even if you typed them by hand; the records themselves stay (section 5). When you disconnect Wahoo, rides imported from Wahoo are deleted within about 10 minutes; the kilometers they added stay on your parts (section 5). The AI feature that writes a short analysis of your ride is now called AI ride summary throughout (section 3). The previous version was v 3.4 (2026-10-01).

What changed in v 3.4 (2026-10-01). Imported Strava records are no longer purged 7 days after we fetch them. They are kept while your Strava connection is active and deleted within 48 hours of disconnection or revocation (sections 5 and 8). We also name the region where Supabase stores your data (section 6) and added Polish as a contact language (section 1). The previous version was v 3.3 (2026-09-19).

What changed in v 3.3 (2026-09-19). We added the optional AI Assistant (section 3), its consent and health-data basis (section 4), Anthropic as a processor (section 6) and its retention periods (section 8). The AI Assistant stays off until you turn it on and choose what it may send. The previous version was v 3.2 (2026-09-15).