Privacy policy

Last updated 9 November 2026.

• Who we are

  TurboTime is operated by Linear Consulting Limited, a company registered in Ireland. For anything in this policy, or to exercise any of the rights below, contact david@linearconsulting.ie.

• What we collect

  Account — your email address and a hashed password (we never store your password in plain text). Optionally, your FTP in watts and body weight in kg, if you choose to enter them in your profile.

  Ride data — for every completed ride: the workout you ran, when and how long you rode, and a full time-series of power, cadence, heart rate, and speed recorded from your trainer and heart rate strap. Trainer-reported distance is included where your trainer supports it. We never collect GPS location. TurboTime is an indoor, trainer-based app and has no location feature.

  Bluetooth — the app requests Bluetooth permissions (and, on Android versions older than 12, a location permission) purely because the Android operating system requires it to scan for nearby Bluetooth devices. We do not request, read, or store your device's actual location; the app's Bluetooth scan is explicitly flagged to Android as not being used for location.

  Strava — if you connect a Strava account, we store the OAuth access token needed to upload your completed rides to Strava on your behalf (scope: read and write access to your activities only — we never request access to your Strava profile, followers, or anything beyond activity upload). This token is stored on our server and is never sent to or stored on your phone.

  Intervals.icu — if you connect an Intervals.icu account, you give us your Intervals.icu API key, which we store on our server and use to read your fitness figures (fitness, fatigue, form and estimated FTP) so we can show them in your profile, and, only if you switch it on, to write your daily resting heart rate and HRV to your Intervals.icu wellness record (see Readiness below). The key is never stored on your phone after you enter it, and we use it only for those two purposes.

  Readiness (optional) — if you use the Readiness feature, which records a few minutes of heart rate from your chest strap each morning, we collect your resting heart rate, your heart rate variability (RMSSD and related figures), the individual beat-to-beat intervals recorded during the session, a quality rating for the recording, the posture you were in, the date and time, and the name and Bluetooth address of your strap. If you choose to add them, we also collect a sleep quality rating, a soreness rating, and a free-text note. This is health information. Readings are saved on your phone first and then synced to your account on our server, so they are kept if you reinstall the app. The calculations behind your trend, 7-day average and normal range are done on your phone.

  Contact form — if you use the in-app contact form, we collect the name, email address, and message you submit, so we can reply to you.

• How we use it

  To provide the service itself: scaling workouts to your FTP, controlling your trainer, showing your ride history, and uploading finished rides to Strava if you've connected it. To respond to support requests made through the contact form. We do not use your data for advertising, and we do not sell or rent your data to anyone.

  Readiness data is used only to show you your own readings and trend and, if you switch it on, to send your daily resting heart rate and HRV to your Intervals.icu account. We do not use it for any other purpose, and we do not profile you or make automated decisions about you from it.

  Readiness is for training guidance only. TurboTime is not a medical device and nothing it shows you is medical advice, a diagnosis, or a substitute for speaking to a doctor.

• Who we share it with

  Strava — only if you connect your account, and only the ride you choose to upload gets sent there, governed by Strava's own privacy policy.

  Intervals.icu — only if you connect your account. If you also switch on sending Readiness to Intervals.icu, we send one resting heart rate figure and one HRV figure per day (the reading that counts for that day) to your own Intervals.icu account, using your API key. It is off by default, you can switch it off at any time, and it is governed by Intervals.icu's own privacy policy. We never send your sleep rating, soreness rating, notes or the beat-to-beat series.

  Notion — contact form submissions are also logged in a private Notion workspace we use to track support requests, so we don't lose track of your message.

  Infrastructure providers — our hosting provider (Google Cloud) and our transactional email provider process data on our behalf, strictly to run the service (hosting the database, delivering account emails like password resets). None of them use your data for their own purposes.

  We do not share your data with advertisers, data brokers, or anyone else.

• Analytics

  Our website (not the app) uses Google Analytics to understand how visitors find and use the site. It only loads after you actively accept the cookie banner — if you decline, no analytics data is collected from your visit. The TurboTime Android app itself contains no analytics or advertising SDKs of any kind.

• Where your data lives

  Your data is stored on servers hosted on Google Cloud in the EU, and transmitted using TLS encryption. Passwords are hashed, never stored or transmitted in plain text.

• Health data and your consent

  Readiness readings are health data, which the GDPR treats as a special category. We only record and store them when you choose to take a reading, and we rely on your explicit consent to do so. You can withdraw that consent at any time by deleting your readings in the app (Readiness → Trend, then Delete next to a reading) or by asking us to delete your account, and you can stop using Readiness without it affecting anything else in the app. Deleting a reading removes it from your phone and from our server. A value already sent to Intervals.icu stays in your Intervals.icu account until you remove it there.

• How long we keep it

  We keep your account and ride data for as long as your account is active. Readiness readings are kept until you delete them or your account is deleted. If you'd like your account and all associated data deleted, email david@linearconsulting.ie and we'll delete it within 30 days. Self-service in-app deletion isn't available yet — email is the way to request it today.

• Your rights

  If you're in the EU/EEA or UK, you have the right under GDPR to access, correct, export, or delete your data, and to object to how we use it. Contact us to exercise any of these. If you're not satisfied with our response, you can lodge a complaint with the Irish Data Protection Commission (dataprotection.ie), our lead supervisory authority.

• Children

  TurboTime isn't directed at children, and we don't knowingly collect data from anyone under 16.

• Changes to this policy

  If we make a material change to how we handle your data, we'll update this page and change the date at the top.