Privacy
Last updated 22 October 2026
Torque is a training app. It needs your rides to do its job, and that is the only reason it asks for them. It has no advertising in it, no trackers, and nothing to sell. This page says exactly what it keeps, where, and how to get it back or delete it.
Who is responsible
Torque is made by The Luna Project, which is the data controller for everything described here. The person responsible for privacy is Mikkel Køster. For anything on this page — a copy of your data, a correction, a deletion, or a complaint — write to privacy@torque-fitness.com.
What Torque collects
Nothing here is optional decoration: each line exists because a screen in the app would not work without it.
| What | Why |
|---|---|
| Your email address | To sign you in. Torque has no passwords — it emails you a six-digit code. If you joined the waitlist on this site, that is the same address and nothing else. |
| Your rider profile | Name, weight, FTP, maximum heart rate, your date of birth if you give it, and the days and hours you can train. Watts per kilo, training zones and the plan are all calculated from these; your age makes recovery weeks come more often from 45. Your weight can come from Apple Health until you type your own. |
| Your rides from Strava, if you connect it | Name, date, duration, distance, elevation, the device you recorded on, second-by-second power, heart rate, cadence, speed and altitude, lap splits, and the route map Strava provides — which includes where the ride started and the line it followed. Torque also stores the access tokens that keep the connection alive. Disconnecting Strava deletes the rides that came only from Strava. |
| Your rides from Hammerhead or Wahoo, if you connect them | The file your bike computer recorded for each ride: date, duration, distance, elevation, second-by-second power, heart rate, cadence, speed and altitude, laps, gear changes, the device’s name, and the route it recorded — which includes where the ride started and the line it followed. Rides from the last year come in when you connect, then each new ride as it syncs. Torque also stores the access tokens that keep the connection alive. |
| Your rides and health data from Garmin, if you connect it | Once Garmin has approved Torque and you connect your Garmin account: the activities your Garmin device records, with the same details as above and the activity file; and the daily summaries Garmin shares of your sleep, heart rate variability and resting heart rate, to work out your daily readiness. Torque also stores the access tokens that keep the connection alive. If you choose to, Torque sends your planned sessions to your Garmin Connect calendar, so they appear on your watch or bike computer. Disconnecting Garmin stops new data arriving and deletes the data that came only from Garmin. |
| Health data from your iPhone, if you allow it | Heart rate variability, resting heart rate, sleep and heart rate, to work out your daily readiness; your most recent body weight; and cycling workouts with their power, cadence, speed, distance, calories and heart rate. Apple Health data is read on your device and only what is listed here leaves it. When you record an indoor ride with Ride now, Torque saves it to Apple Health as a cycling workout with its heart rate, power, cadence and calories. |
| Indoor rides you record, with Ride now | Power, heart rate and cadence from the trainer and sensors you pair over Bluetooth, second by second while you ride, saved as a ride like any other. The sensors are used only during the ride. |
| Your calendar, if you turn on rides in your calendar | Torque reads your calendar events on your iPhone to find times you are free, and adds your planned rides to the calendar you choose. Your events never leave your phone. |
| Notifications, if you allow them | A token from Apple that lets Torque send notifications to your phone, such as a new ride or a change to your plan. It is deleted when you sign out. |
| Feedback you send | Your message, a screenshot if you add one, and the app version, iOS version, device and connected sources, so the problem can be found. Kept until it has been dealt with, and deleted with your account. |
| What Torque works out | Power curves, fitness, fatigue and form, readiness scores, your training plan, and how each ride compared with the session that was planned. |
| Error reports | When something in the app fails, it records what failed so it can be fixed. No ride content. |
What Torque does not do
- No advertising, and no advertising networks.
- No third-party analytics, no tracking pixels, no cookies on this website.
- Your data is never sold, rented, or shared with data brokers.
- Your rides are never shown to other users. There is no social feed and no leaderboard.
Artificial intelligence: the written ride analysis and plan notes
What this is for. Torque uses an AI model for two things only: to write the short note on what each ride did for your fitness, and to turn notes you write to your plan, such as “sick this week”, into changes to your sessions. Your training plan itself is built by fixed coaching rules, not by AI. Torque does not train AI models on your data, and neither does Anthropic, the company whose model writes the notes.
You choose AI analysis when you set up Torque, with its own switch, which is off until you turn it on. If you leave it off, Torque asks again the first time you ask for an analysis, and again if what is sent ever changes. Turn it off any time in Profile → Account → AI analysis, and nothing more is sent.
With it on, the numbers from a ride — power, heart rate, cadence, speed, duration, training load, and the session it was checked against — together with the ride’s name and how it felt if you said, your FTP, weight, recent training, and your last 7 days of heart rate variability, resting heart rate and sleep with the readiness score made from them (when you have a watch or ring), are sent to Anthropic’s API, which writes the analysis in plain language and sends it back. That happens when you ask, after each new ride, and when you tell Torque how a ride felt. Rides from every source you connect can be sent, Garmin included, and only while AI analysis is on. A ride’s route and its lap splits are never sent. Your name, your email and where you ride are not part of that request. Anthropic does not use data sent through its API to train its models, and the text comes straight back to your account.
The same choice covers notes to your plan. When you write a note such as “sick this week” or “party on Friday”, its words are sent to Anthropic together with your planned sessions for the next two weeks, your FTP and that morning’s readiness score, so the coach can change the plan to fit. With AI analysis off, notes are not sent and the plan is not changed from them.
Where it is kept
Everything is stored with Supabase, on servers in the European Union (Ireland). Each row carries your user id, and the database refuses to return a row to anyone but you — that rule is enforced by the database itself, not by the app asking nicely.
This website is hosted by Vercel. Vercel keeps standard server logs, which include IP addresses, for security and troubleshooting.
These services process data on Torque’s behalf, under data processing agreements that hold them to it:
- Supabase, in the European Union (Ireland): storage, sign-in and the calculations behind your plan.
- Anthropic, in the United States: the written ride analysis and plan notes, only with AI analysis on, as described above.
- Resend, in the United States: sending Torque’s emails, such as the welcome and your weekly summary. It receives your email address and the mail’s content.
Transfers to the United States are covered by the European Commission’s Standard Contractual Clauses in those agreements. Notifications go through Apple’s push notification service. Strava, Hammerhead, Wahoo, Garmin and Apple are sources you connect yourself, and their own privacy policies govern what they hold. When you send planned sessions to Garmin Connect, Garmin’s privacy policy covers them from then on.
What Torque is allowed to do with it
Under the GDPR, Torque relies on performance of a contract for everything the app needs to function — your account, your rides, your plan. Health data and the rides you import are special-category data and are handled only on your explicit consent, which you give when you connect Strava, Hammerhead, Wahoo or Garmin or allow Apple Health, and can withdraw at any time by disconnecting them. Sending ride numbers and plan notes to Anthropic rests on a separate explicit consent, given when you choose Continue with AI analysis during set-up or turn it on later, and withdrawn by turning it off.
How long it is kept
Your data stays while your account exists. Delete your account and the rides, plans, analyses, feedback and profile go with it, permanently, along with your Strava, Hammerhead, Wahoo and Garmin tokens. Backups roll off within 30 days. Error reports are kept for 90 days.
What you can do
- See it — it is all in the app, and a full export is yours on request.
- Correct it — profile figures are editable in the app; write to us for anything else.
- Delete it — Profile → Account → Delete account, in the app. It is immediate and cannot be undone.
- Disconnect Strava — in Profile → Connections, and at strava.com under My Apps. New rides stop arriving, and the rides that came only from Strava are deleted from Torque. Rides recorded on your bike computer or in Apple Health stay.
- Disconnect Hammerhead or Wahoo — in Profile → Connections. Torque’s access is revoked with them and new rides stop arriving; the rides already in Torque stay until you delete them or your account.
- Disconnect Garmin — in Profile → Connections, once Garmin is available in Torque, or in Garmin Connect. New data stops arriving, and the data that came only from Garmin is deleted from Torque.
- Take back Health access — in the iPhone Health app, under Sharing → Apps. Torque stops reading immediately.
- Complain — if we have not put something right, you can complain to your national data protection authority. In Denmark that is Datatilsynet.
A note on the waitlist. If you gave your email on this site, it is stored for one purpose: to tell you when Torque is available. There is no newsletter. Reply to any mail from us, or write to the address above, and it is deleted.
Children
Torque is not intended for anyone under 16, and it is not designed or marketed for children. If we learn that an account belongs to someone under 16, we delete it and everything in it.
Changes to this page
If what Torque collects changes, this page changes with it and the date at the top moves. If a change matters to you — a new kind of data, a new processor — you will be told in the app before it takes effect, not quietly.