Privacy Policy

Effective and Last Updated: August 25, 2026

Engelbaher, LLC ("Engelbaher," "we," "us," or "our") provides mobile applications, websites, and related products and services, including Zora Cycling (collectively, the "Services"). This Privacy Policy explains how information is handled when you use the Services.

Features differ between Services and versions. A section applies only when you use the feature it describes. An in-app notice or permission screen may provide additional details for a particular feature.

1. Information Handled by the Services

1.1 Information Processed on Your Device

Depending on the Service and the features you choose, the app may process and store information locally on your device, including:

• workout details and performance metrics, such as dates, duration, distance, speed, cadence, power, heart rate, energy, elevation, training zones, and calculated statistics;
• fitness profile information, such as height, weight, age or birth date, sex, functional threshold power, heart-rate values, and training preferences;
• routes, favorites, custom workouts, equipment settings, display choices, and other preferences;
• technical information from compatible accessories, such as accessory names or identifiers, connection status, and sensor readings; and
• records derived by the app, such as personal records, route attempts, progress, and ghost or replay data.

Information that remains solely on your device is not received by Engelbaher. Local information is protected by the security features of your device and operating system.

1.2 Apple Health and Fitness Information

Some Services may integrate with Apple HealthKit. With your permission, the app may read or write health and fitness types needed for the feature you request. These may include workouts, heart rate, resting heart rate, active or basal energy, cycling power, cadence, speed, distance, effort score, functional threshold power, height, weight, biological sex, and date of birth.

HealthKit information is used to record workouts, restore or display your history and profile, calculate fitness insights, personalize training features, and keep information consistent with the Health app. HealthKit access is optional and controlled through Apple’s permission interface. We do not use HealthKit information for advertising, marketing, data mining unrelated to health and fitness, or sale to data brokers.

1.3 Bluetooth and Connected Equipment

When you connect a trainer, heart-rate monitor, power meter, cadence sensor, or similar accessory, the app exchanges information directly with that equipment using Bluetooth or another supported connection. This may include sensor readings, technical identifiers, and control instructions such as target power, resistance, or simulated gradient. The app may remember an accessory identifier on your device to reconnect later.

1.4 iCloud and Cross-Device Sync

If you are signed in to iCloud and the feature is available, selected information may be stored in Apple’s CloudKit or iCloud key-value storage so it can sync between devices associated with your iCloud account. For Zora Cycling, synced information may include preferences, favorites, premium trial status, personal records, route attempts, route progress, ghost or replay data, and fitness progression values such as functional threshold power and body weight.

Full workout records, detailed HealthKit samples, birth date, biological sex, height, and heart-rate profile values are intended to remain in the local app database or Apple Health rather than the app’s CloudKit database. Apple processes iCloud and Health data under its own terms and privacy policy. Engelbaher does not receive your Apple Account password or payment-card details.

1.5 Purchases

If a Service offers a paid download, in-app purchase, subscription, or trial, Apple or another app marketplace processes the transaction. The app may receive product, entitlement, transaction, trial, and purchase-status information needed to provide or restore access. Payment credentials are handled by the marketplace, not by Engelbaher.

1.6 Information You Send Us

If you contact us, we receive the information you choose to provide, such as your email address, message, attachments, and details needed to respond or troubleshoot. Please do not send sensitive health information unless it is necessary for your request.

1.7 Website and Diagnostic Information

Our hosting provider may automatically process ordinary web-request information, such as an IP address, browser or device type, requested page, and time of access, to deliver and secure the website. Apple may also provide crash, performance, sales, or usage information to developers when permitted by your Apple settings and Apple’s policies. We may use information made available to us to maintain, secure, and improve the Services. Zora Cycling does not include a third-party advertising or analytics SDK as of the effective date above.

2. How We Use Information

We use information as reasonably necessary to:

• provide, personalize, sync, and restore the features you request;
• record workouts, calculate fitness metrics, and communicate with connected equipment;
• process and verify purchases and trials;
• respond to support, legal, privacy, or security requests;
• diagnose problems and improve safety, reliability, and performance;
• protect users, the Services, and our legal rights; and
• comply with law and enforce our agreements.

Where applicable law requires a legal basis, we rely on performance of our contract with you, your consent, our legitimate interests in operating and protecting the Services, and compliance with legal obligations. You may withdraw consent through system settings where processing depends on a device permission.

3. How Information Is Disclosed

We do not sell personal information, share it for cross-context behavioral advertising, or use HealthKit information for advertising. Information may be disclosed only as described below:

• At your direction. For example, when you choose to write a workout to Apple Health, sync through iCloud, connect an accessory, or use a system sharing feature.
• Service providers and platforms. Apple and providers that host or support the Services may process limited information on our behalf or under their own terms. We require providers acting on our behalf to protect information consistently with this Policy and applicable law.
• Legal and safety reasons. We may disclose information if reasonably necessary to comply with law, legal process, or a valid government request; protect rights, safety, and security; or investigate fraud or abuse.
• Business transactions. Information may be transferred as part of a merger, financing, reorganization, sale of assets, or similar transaction, subject to applicable law and appropriate protections.

4. Retention and Deletion

• On-device information remains until you delete individual records, reset the relevant feature, or delete the app, subject to device backups.
• Health information written to Apple Health remains there until you delete it in the Health app. Revoking permission prevents future access but does not automatically delete prior records.
• iCloud information may remain in your private iCloud account and on other synced devices until it is deleted from the app or through Apple’s iCloud data-management options. Deleting the app from one device may not delete synced information or copies on other devices.
• Purchase records are retained by the applicable marketplace under its policies. The app may retain entitlement or trial state for as long as needed to provide paid access and prevent trial abuse.
• Support and business records are retained only as long as reasonably needed for the request, security, legal compliance, dispute resolution, and ordinary recordkeeping.

We cannot access or delete information that remains only on your device, in Apple Health, or in areas of your private iCloud account that Apple does not make available to us. You can contact us for help identifying the appropriate deletion steps.

5. Your Choices and Rights

You may:

• change Health, Bluetooth, notification, analytics, iCloud, and other permissions in your device or Apple Account settings;
• view, edit, or delete records using controls provided in the app or by Apple Health and iCloud;
• choose not to connect accessories or enable optional sync features; and
• contact us to request access, correction, deletion, restriction, or another privacy right available in your jurisdiction.

We may need to verify your request. Some rights are subject to exceptions, and we may not possess or control information stored solely by you or Apple. We will not discriminate against you for exercising applicable privacy rights.

6. Security and International Processing

We use reasonable administrative and technical safeguards appropriate to the nature of the information. No storage or transmission method is completely secure. Protect your devices and accounts with a strong passcode, current software, and appropriate account-security settings.

Engelbaher is based in the United States. If you send information directly to us, it may be processed in the United States or other places where our providers operate, which may have different data-protection laws than your location.

7. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information directly from a child under 13 without authorization required by law. If you believe a child has provided personal information to us, contact us so we can review the matter. Parents and guardians should supervise minors’ exercise, device permissions, purchases, and connected-equipment use.

8. Third-Party Services

The Services may link to or interoperate with Apple, app marketplaces, equipment manufacturers, websites, or other third-party products. Their privacy practices are governed by their own policies. For information about Apple’s practices, visit Apple’s Privacy Policy.

9. Changes to This Policy

We may update this Policy as the Services, laws, and our practices change. We will post the updated version and revise the date above. If a change materially affects how we handle information, we will provide additional notice or request consent when required by law. An update to this Policy does not retroactively authorize a materially different use of information where consent is required.

10. Contact Us

For privacy questions or requests, contact:

Engelbaher, LLC
Email: privacy@engelbaher.com
Website: https://engelbaher.com