Privacy policy

1. The short version

• StreetFlow records rides and spots, so it stores positions. Rides and spots are linked to your account and are private to you unless you choose to share them.

• Your profile is private by default. Rides are visible to your approved followers by default; you can change this for every ride.

• Beacon (live location) is off by default, stores only your current position while you ride and keeps no history.

• Anonymous app analytics run only if you agree. Advertising cookies on the website run only if you agree.

• You can download your data and delete your account at any time in the app. Accounts with no activity for 12 months are deleted.

• We do not sell your data.

2. What we store and why

Account and sign-in. When you scan the QR code on your Garmin watch, StreetFlow creates an account without any registration. If you secure the account, we store your e-mail address and/or a passkey (a public key; the private key never leaves your device). Sign-in codes sent by e-mail are stored only as a hash and expire after 10 minutes. For each signed-in browser we keep a session record with its IP address and browser type, and for each paired watch its model, a name, the time it was last seen and a hashed device identifier. Purpose: to provide your account and keep it secure.

Profile. Nickname, name, photo, bio, the sports and disciplines you ride, the year you started riding, country, city (and the approximate coordinates of the city), time zone, weekly riding goal, whether your profile is public, notification preferences and the date you finished onboarding. Purpose: to show your profile and to make streaks, News and weather features work.

Rides. For each ride recorded on the watch: start and end time, ride mode, duration, distance, Flow score and Flow Points, time in Flow, phases of the ride (riding / at a spot, with the centre of each spot phase), maximum speed, average and maximum heart rate, calories, the watch model, title, visibility and the gear setup used. We also store the GPS track of the ride: for each point the time, position, Flow value, speed and heart rate. Rides you log by hand contain the date, length, mode, intensity, optionally a spot or a place on the map, a note and a photo. Purpose: to show your rides, statistics, streak and score.

Spots. Each spot you save contains its position, category, name, optional description, ride mode, the time it was saved and, if you recorded one, a voice note of up to 12 seconds. Pro riders can add up to 5 photos per spot. Purpose: to back up your spots and show them on the watch and in the app.

Photos and videos. Photos (profile, spots, gear, manual rides, community places) are resized and stored as images. Videos for a place’s riders’ gallery are up to 60 seconds long. Photos are normally converted to a new image file, which drops most camera metadata; if the conversion fails, the original file is stored as uploaded, including any location data your camera saved in it. If you do not want to share where a photo was taken, turn off location in your camera before taking it.

Community content. If you publish a spot, it becomes part of a community place that other Pro riders can see. Your voice note and note are attached as a tip under your name (you can publish without the voice note). Gallery items, tips, photos and their captions, the trick and obstacle you tag, and the props they receive are visible to other riders as described in section 4.

Social connections. Who you follow and who follows you (including pending requests), your Close friends list (the other person is not told they are on it), riders you blocked, props you gave and reports you sent, including the reason and your note. Purpose: to run the social features and keep the community safe.

Progress and content. Bonus points, streak weeks, freezes and pauses, weekly quests, badges, the tricks you want to learn or have landed (side, date, spot, clip), gear setups and parts, saved places (Later / Favourites) and collections with the people you share them with. Purpose: to provide these features.

Beacon. When Beacon is on and you are riding, the watch sends your position every 30 to 60 seconds. We store only your latest position, a copy rounded to about 100 metres and delayed by at least 2 minutes (for “everyone nearby”), your chosen audience and ride mode. Nothing is stored or sent while you are inside one of your private zones (up to 5 areas, such as home or work, which you set in the app). The record is deleted when the ride ends or a few minutes after the last position. There is no history of Beacon positions.

Notifications. If you allow push notifications, we store the browser’s push subscription (an endpoint address and encryption keys). We also keep an in-app inbox of your notifications.

Consents. Every consent you give or withdraw (terms, storing spots and rides, analytics, e-mails, Beacon) is logged with its time and version, so we can show what you agreed to.

Pro and trial. Your trial end date, whether you have Pro and until when, and, once payments start, your plan (monthly, yearly or Founder), its status, the payment provider’s reference and your Founder number. We do not receive or store your card details. To give each watch only one trial, we keep a one-way hash of the watch’s device identifier together with the account that used the trial.

Platform votes. On the website you can vote for the next watch platform without an account. If you also leave your e-mail address and tick the box, we store it with the time of your consent and send you one e-mail when StreetFlow becomes available on that platform.

E-mails. We send sign-in codes, the warning before an inactive account is deleted, and, only if you agreed, news about new features (about once a month).

Analytics. Only if you agree in onboarding or in Settings → Privacy, the app collects anonymous usage and crash information. It does not include locations.

3. Legal bases

• Performance of our contract with you (Art. 6(1)(b) GDPR): your account, sign-in, profile, rides, tracks, spots, voice notes, photos and videos, social features, progress, notifications you turned on, Pro and the trial. Storing spots and rides on our servers is what the service is; without it nothing syncs, which is why onboarding asks you to agree to it.

• Consent (Art. 6(1)(a) GDPR): Beacon, app analytics, news e-mails, the platform-vote e-mail, and advertising cookies and pixels on the website. You can withdraw consent at any time in Settings → Privacy (or by writing to us) without affecting what happened before.

• Legitimate interests (Art. 6(1)(f) GDPR): security, rate limiting and preventing abuse (session IP addresses, sign-in limits), keeping the one-trial-per-watch rule (the hashed watch identifier), moderation of reports and community content, and defending legal claims. You can object to this processing (section 8).

• Legal obligations (Art. 6(1)(c) GDPR): for example records needed for tax or consumer law, and answering lawful requests from authorities.

Heart rate. Ride summaries and tracks include heart rate measured by your watch. We use it only to show your ride and its statistics. [For the lawyer: confirm whether heart rate here counts as health data under Art. 9 GDPR and, if so, whether explicit consent should be collected.]

4. Who can see what

• Profile: private by default. Anyone can see your nickname, name and photo (for example in search or a follow request). The rest of your profile (bio, sports, country, city, rank, streak, badges) is visible to approved followers, or to everyone if you make your profile public. A public profile is available at getstreetflow.com/u/<nickname>.

• Rides: visible to your approved followers by default. For each ride you can choose Only me, Followers or Everyone. Followers see the ride map, which shows where you rode, including where it started and ended.

• Your own spots: private. They become visible to others only if you publish them to the community.

• Community places, tips, photos and gallery items: visible to riders with Pro. Followers may see in their feed that you added a clip or a community spot.

• Beacon: only while you ride and only for the audience you pick: Close friends or Followers see your exact position; “Everyone nearby” sees a position rounded to about 100 metres and at least 2 minutes old. Blocked riders never see you.

• Weekly leaderboard: only if you opt in, and only your Flow Points, shown to riders who follow you and have also opted in.

• Moderator: our moderator can see reported content and the community queue in order to handle reports and duplicates.

5. Who processes your data

Cloudflare, Inc. hosts the whole service for us as our processor: application servers (Workers), databases (D1), file storage for voice notes, photos and tracks (R2), image resizing (Images), the sending of our e-mails from noreply@mail.getstreetflow.com (Email Sending) and, once gallery videos are switched on, video storage and playback (Stream). We keep data in the EU region where our provider allows. Cloudflare is a US company, so some processing may take place outside the EU; such transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses. [For the lawyer: confirm Cloudflare’s DPA and transfer basis, and which storage locations are actually configured.]

Garmin. Rides are recorded on your watch as normal activities and also stay in Garmin Connect. The watch app talks to our servers through the Garmin Connect app on your phone. Garmin is a separate, independent controller for that data and Garmin’s own terms and privacy policy apply to it. We do not read your Garmin Connect account.

Payments. Pro will be sold by a merchant of record (Paddle or Lemon Squeezy; we will name the chosen one here before payments start). The merchant of record is the seller, handles payment, VAT and invoices, and is an independent controller for your payment and billing data under its own privacy policy. We only receive what we need to switch Pro on: your plan, its status, the period and a reference.

Maps. Map tiles in the app are loaded by your browser directly from OpenFreeMap (openfreemap.org), which therefore receives your IP address and the map area you are looking at, as with any website you visit.

Weather and city search. To locate the city you enter and to check the weather for Rain check, our servers send the city name and country, or the city’s coordinates rounded to about 10 km, to Open-Meteo. These requests come from our servers, not from your device, and contain no account information.

Push notifications. If you turn them on, notifications are delivered through your browser’s push service (for example Google, Apple or Mozilla, depending on your browser). The content is encrypted on the way.

Authorities. We disclose data to public authorities only when the law requires it.

6. How long we keep data

• Your account and everything in it: until you delete it, or until it has had no activity (no sync from the watch and no visit to the app) for 12 months. A month before such deletion we warn you in the app and, if we have your e-mail address, by e-mail.

• When an account is deleted, we delete its data and files. Your community contributions (tips, photos, gallery items) are deleted too. A community place or obstacle that other riders have also saved stays, without your name.

• Beacon positions: only during the ride and a few minutes after the last position.

• Sign-in codes: 10 minutes. Browser sessions: up to one year from the last use, or until you sign out.

• Unfinished video uploads: removed within 24 hours.

• The hashed watch identifier used for the one-trial rule stays after the account is deleted. It contains no other personal data, but it lets us refuse a second trial on the same watch.

• Platform-vote e-mails: until we send the launch e-mail for that platform or you ask us to delete it.

• Data that we must keep by law, or need for a pending legal claim, for as long as that requires.

• Deleted data may remain for a short time in our provider’s backups before they are overwritten. [For the lawyer / operator: confirm the backup window, e.g. D1 point-in-time recovery.]

7. Children

StreetFlow is intended for people aged 16 and over. If you are younger, please do not use it. If we learn that an account belongs to a child under 16, we will delete it. Parents who believe their child uses StreetFlow can write to us.

8. Your rights

• Access and portability: in the app, Settings lets you download a copy of your data as a JSON file. If you want anything that is not in the file, write to us.

• Rectification: you can edit your profile, rides and spots in the app, or ask us.

• Erasure: you can delete individual rides, spots and contributions, or your whole account, in the app at any time. Deleting is never behind the paywall.

• Withdrawing consent: in Settings → Privacy, at any time.

• Restriction and objection: you can ask us to restrict processing or object to processing based on legitimate interests.

• Complaint: you can contact us at hello@getstreetflow.com, and you have the right to lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (www.uoou.gov.cz), or the authority in your EU country.

We answer requests within one month. We may ask you to prove that the account is yours, for example by signing in.

9. Cookies and storage on your device

• The app uses a single necessary cookie that keeps you signed in. For an account without an e-mail or passkey, this cookie is the only key to the account, so clearing it can lock you out.

• The app also keeps a small copy of your data in your browser’s local storage so it works offline. This stays on your device and is removed when you sign out.

• The app uses no advertising cookies.

• The website (landing pages) measures visits and sign-ups to evaluate our advertising. Advertising pixels and cookies run only after you accept them in the cookie banner; without consent only anonymous measurement without cookies takes place. You can change your choice at any time from the cookie settings link on the website.

10. Security

Data is transferred encrypted (HTTPS). Sign-in codes are stored as hashes, passkeys as public keys only, and watches authenticate with tokens stored as hashes. Access to the databases is limited to the operator. No system is perfectly secure; if a breach affecting your data occurs, we will inform you and the authority as the law requires.

11. Changes to this policy

When StreetFlow starts storing something new or we change how we use data, we update this policy and the date above. We will tell you about significant changes in the app or by e-mail before they take effect, and ask for your consent again where the law requires it.

12. Contact

[Operator: name, company ID, address — to be filled in before launch]

E-mail: hello@getstreetflow.com