Privacy Policy

This policy covers what information Minou collects, how we use it, and what rights you have over it.

What we collect

Information you give us

Account details. Your email address and name when you sign up.
Profile data. Training thresholds, preferences, and settings you configure.
Third-party connections. Connecting Strava gives us an authorization token that lets us read your activity data on your behalf.

Information we collect automatically

Device data. Browser type, operating system, and approximate geographic location.
Usage data. Which pages you view and which features you use.
Network data. Your IP address and connection details.
Cookies and similar technologies. See "Tracking technologies" below.

Strava data

Connecting your Strava account gives Minou access to the following through the Strava API:

Activity history — runs, rides, swims, and the rest
Activity metrics: distance, duration, elevation, heart rate, pace, cadence, power, and calories
Heart-rate zone distribution and best efforts
Activity route summary polylines
Your athlete ID

What we do not do:

We never modify, delete, or post to your Strava account.
We do not share your Strava data with third parties.
We do not sell your data.
We do not use your data to train AI or machine learning models.

Disconnect Strava at any time from Basecamp Settings. That stops all future access.

Strava limits how many athletes an application may connect at once. To stay within that limit, we monitor for connections that have not synced any new activity for an extended period and may disconnect them to free capacity for active users. This is the same action as disconnecting from Basecamp Settings: it revokes our access token with Strava and stops future syncing. It does not delete activity data you have already synced. To resume syncing new activity after an inactivity disconnect, reconnect Strava from Basecamp Settings.

Our monitoring for this purpose uses only the connection's non-identifying details — the workspace identifier, your Strava athlete ID, and how long it has been since the last sync. It does not read your activity contents.

How we use your information

To run and improve the service. Training analysis, activity sync, and progress tracking.
To communicate with you. Answering support messages and sending account notices.
To understand usage. Which features are used, so we know what to work on.
To keep records. Internal operational and legal records.
To meet legal obligations. Responding to lawful requests and regulatory requirements.

Tracking technologies

Minou uses cookies and similar technologies to keep you signed in and to understand usage. Cookies are small text files stored on your device. You can delete or block them in your browser, though parts of Minou will not work properly without them.

We use third-party services, including Google Analytics, to collect technical information about how you interact with Minou. These services may set their own cookies.

Google Analytics. Google collects and processes this data under the Google Analytics Terms of Service and the Google Privacy Policy. You can opt out with the Google Analytics Opt-out Browser Add-on.

Managing cookies

Browser settings. Most browsers can delete or block cookies. See allaboutcookies.org.
Advertising networks. To opt out of targeted advertising, see optout.networkadvertising.org.

Bot protection

Minou uses Cloudflare Turnstile to keep automated abuse off its forms. Submitting the sign-in, waitlist, or support forms runs a background check that confirms you are a person rather than a bot.

Turnstile may read technical signals from your browser and device to make that determination. Cloudflare processes them under the Cloudflare Turnstile Privacy Policy. We do not use Turnstile to track you across sites or for advertising.

Data retention

Account data is kept while your account is active.
Synced activity data is kept until you disconnect Strava or delete the workspace holding it. If we disconnect an inactive connection to free Strava API capacity, your already-synced activity data is retained on the same terms.
Messages sent through the in-app support chat, including attachments, are deleted automatically after 30 days. This applies to your messages and to our replies.
Request full account deletion by writing to support@minou.io.

Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your rights

You have the right to:

Access the personal data we hold about you
Correct data that is inaccurate or incomplete
Delete your account and the data attached to it
Disconnect third-party services, meaning Strava, at any time
Export your data on request

To exercise any of these, write to support@minou.io.