Privacy Policy

01 — What I collect

goodjob stores only what it needs to function:

• — Account information (email, name) used for authentication. If you sign in with Google, goodjob also receives your Google account ID and profile picture.
• — Bike and component data you enter manually
• — Service logs and notes you record
• — Ride mileage and dates (not raw GPS or activity data)
• — Devices recorded in your ride files (e.g. bike computer, power meter) and their battery level

02 — Third-party integrations

goodjob can sync rides via Dropbox, Wahoo, Hammerhead, and Garmin Connect™. In every case, only the information needed to power the app is extracted from the file — distance, date, and the like:

• — Dropbox: your FIT files are read from where they already live. Nothing is copied or saved.
• — Wahoo & Hammerhead: connecting grants goodjob OAuth access to fetch your ride activities and FIT files. The raw FIT files themselves are not stored.
• — Garmin Connect™: connecting grants goodjob access to the activity files you approve on Garmin's consent screen. When Garmin notifies goodjob of a new activity, goodjob downloads the file and imports only cycling activities, keeping the activity name, date, distance and device details. Non-cycling activities are not imported, though a minimal record (activity ID, name, type and start time) may be kept so the same file isn't fetched twice. The raw FIT files are not kept.
• — If a ride has a GPS track, its coordinates are converted to a relative shape (distances from the ride's start, with no location on Earth), which is stored with the ride along with a rendered outline image so you can see its shape. Each point of that shape also records how many seconds into the ride it was. The GPS coordinates themselves are not stored.
• — If weather checking is switched on for your account, goodjob sends up to three rounded locations from the ride (accurate to roughly 11 km) and the ride's time window to Open-Meteo to check for rain. Nothing that identifies you or the ride is sent, and the locations are not stored; only whether the ride was wet is kept.
• — You can disconnect any of these integrations at any time, which stops all imports. For Garmin, disconnecting in goodjob also asks Garmin to remove goodjob's access; you can confirm or remove it yourself under connected apps in your Garmin Connect™ account settings.

03 — What I don't do

• — I don't sell your data
• — I don't share it with third parties for advertising
• — I don't use your data to build profiles or run analytics beyond what's needed to operate the app
• — I don't retain data I don't need
• — I don't send data from your integrations (Garmin, Wahoo, Hammerhead, Dropbox) to AI systems, and it is never used to train, evaluate, or improve AI models. The one exception to AI use: if catalog matching is turned on for your account, your bike's details (make, model, year, nickname and any link you added) may be processed by an AI assistant to match it to catalog parts.

04 — Data storage & security

goodjob runs on a small number of service providers. They process your data only to run the app, and none of them receive it for their own purposes:

• — Render — hosts the app, its Postgres database, and the background job queue
• — Google Cloud Storage — stores archived ride records, route outline images, and photos, videos and documents (manuals, receipts) you upload
• — Sentry — receives error reports when something breaks, which can include details of the request involved
• — Resend — sends account emails (sign-up confirmation, password reset, bike transfer invites) and notification emails if you've turned them on
• — Your browser's push service — delivers notifications, if you've allowed them

I follow reasonable security practices, but I'm one person running a side project — I can't make guarantees that a mature company with a security team could. Treat this accordingly and don't store anything you'd be devastated to lose.

05 — Your data, your control

You can ask to see, correct, export, or delete your data at any time by emailing privacy@goodjob.bike. I'll make it happen. You can withdraw consent for any integration by disconnecting it, which stops all further imports. As the product matures, self-serve options will follow.

06 — Changes to this policy

If anything meaningful changes, I'll update the date at the top of this page. For significant changes, I'll notify active users directly.

07 — Contact

Questions or requests about your data: privacy@goodjob.bike.