Privacy Policy

This Privacy Policy explains how Recon ("Recon," "we," "us") collects, uses, and shares information when you use the website and app at ridewithrecon.com (the "Service").

Recon is operated by an individual. If you have questions about this policy or your data, contact us at support@ridewithrecon.com.

We've tried to write this plainly. If anything is unclear, email us and we'll explain.

1. Information we collect

Account information. When you create an account, we collect your email address and a password. Authentication and password storage are handled by our provider, Supabase; we do not see or store your raw password.

Rider profile information. Information you choose to add to your profile, which may include your body weight, FTP, experience level, gear weight, age, and unit preference. These are used to calculate pacing and fueling estimates. Most are optional.

Race information. Information about races you add, including names, dates, locations, distances, elevation, discipline, descriptions, and source URLs, and any GPX course files you upload (which contain route coordinates and elevation data).

Generated information. Briefs and analyses the Service produces from your inputs, including course analysis, pacing and fueling plans, weather summaries, and checklists.

Usage analytics. We use Vercel Web Analytics to understand aggregate traffic (such as page views and general usage patterns). This analytics is cookieless and does not collect personally identifying information or track you across other sites.

2. How we use information

We use your information to provide and operate the Service: to run your account, generate your race briefs, save your races, and improve how Recon works. We do not sell your personal information.

3. Services that process your data

To operate, Recon relies on the following third-party services, and relevant data is shared with them only to provide the Service:

• Supabase — hosts our database, authentication, and file storage (your account, profile, races, and uploaded GPX files).
• Vercel — hosts the Service and provides the cookieless usage analytics described above.
• Anthropic (Claude API) — when you request AI analysis, the relevant race text (such as a race description you provide or paste) is sent to Anthropic to generate the analysis. Per Anthropic's API terms, inputs sent through the API are not used to train their models.
• Open-Meteo — provides weather forecasts and historical data; we send race location coordinates to retrieve a forecast.
• Nominatim (OpenStreetMap) — provides geocoding; we send a race's location text to look up its coordinates when no GPS file is available.

Each of these has its own privacy practices. We share only what's needed for that service to function.

4. Cookies

Recon uses essential cookies required for sign-in and keeping you logged in. We do not use third-party advertising or cross-site tracking cookies, and our usage analytics is cookieless. Because of this, Recon does not require a cookie consent banner.

5. Data retention

We keep your information for as long as your account is active. You can delete individual races at any time, which removes the race, its brief, and its uploaded file. If you ask us to delete your account, we will delete your account and associated data (see Section 6).

6. Your choices and rights

• Access and update: You can view and edit your profile and race information at any time in the app.
• Delete races: You can delete any race you've created, which also deletes its brief and uploaded GPX file.
• Delete your account: To delete your account and all associated data, email us at support@ridewithrecon.com and we will process the deletion. (A self-service account-deletion option may be added in the future.)

Depending on where you live, you may have additional rights over your personal data. Email us to exercise them and we'll do our best to help.

7. Security

We protect your data with measures including row-level access controls in our database (so users can only access their own data), encryption of data in transit, and restricted administrative access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Recon's operator may access user data through an internal administrative tool for the purpose of operating, maintaining, and supporting the Service.

8. Children

Recon is not intended for children under 13, and you must be at least 13 years old to use it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, email us and we will delete it.

9. International users

Recon is operated from the United States, and your information is processed and stored in the United States and by the services listed in Section 3. By using Recon, you understand your information may be processed in the United States.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll change the effective date above and, for significant changes, make a reasonable effort to notify you.

11. Contact

Questions about this policy or your data: support@ridewithrecon.com

This policy describes Recon's current practices in good faith. It is provided for transparency and is not legal advice.