Privacy Policy
Last updated: April 16, 2026
Overview
RouteFuel™ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.
Information We Collect
Account Information
- Username and email address (for traditional registration)
- Securely hashed password (we never store plain-text passwords)
Strava Data
When you connect your Strava account, we access:
- Your Strava athlete profile (name, profile picture)
- Your activity data (routes, segments, timestamps, GPS coordinates)
- Segment effort details and statistics
We only access data you authorize through Strava's OAuth process. You can revoke access at any time through your Strava settings.
Spotify Data
When you connect your Spotify account, we access:
- Your Spotify user profile
- Your soundtracks and saved tracks
- Ability to create soundtracks on your behalf
- Playback control for the Activity Simulator feature
We only access data you authorize through Spotify's OAuth process. You can revoke access at any time through your Spotify account settings.
How We Use Your Information
- Display your Strava activities on interactive maps
- Enable creation and management of Music Pins™ on your routes
- Provide AI-powered music recommendations based on segment data
- Create Spotify soundtracks from your Music Pins™
- Simulate activity playback with synchronized music
- Improve and personalize your experience
Cookies & Session Data
RouteFuel uses session cookies to:
- Keep you logged in during your browsing session
- Maintain your authentication state with Strava and Spotify
- Store temporary session information
Our session cookies are:
- Essential only - we do not use tracking or advertising cookies
- Secure - cryptographically signed to prevent tampering
- Session-based - cleared when you close your browser
Data Security
- Passwords are securely hashed using industry-standard algorithms
- OAuth tokens are stored securely and refreshed automatically
- All data transmission uses HTTPS encryption
- We do not sell or share your personal data with third parties
Third-Party Services
RouteFuel integrates with the following third-party services:
- Strava - For activity and segment data (Strava Privacy Policy)
- Spotify - For music playback and soundtrack creation (Spotify Privacy Policy)
- OpenStreetMap - For map tiles (OSM Privacy Policy)
Your Rights
You have the right to:
- Access your personal data stored in RouteFuel
- Request deletion of your account and associated data
- Disconnect your Strava and/or Spotify accounts at any time
- Revoke OAuth permissions through Strava or Spotify settings
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at help@routefuel.ai.