Site Policy

Cyklot respects the privacy of its users and is committed to processing personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation and purpose limitation. Data we collect: name, email address and an encrypted password at the time of registration; usage and language preferences; and the activity files, routes, workouts and equipment information that the user voluntarily uploads to the Platform. Purpose of processing: to provide the requested service, authenticate the user, store their sporting information, allow analysis of their activities and, where appropriate, communicate operational matters relating to their account. Legal basis: the performance of the service contract accepted by the user upon registration, as well as their explicit consent where applicable. Retention: data will be kept for as long as the account remains active or as required to comply with legal obligations. The user may request the deletion of their account at any time. Data controller: the team behind Cyklot. The Platform does not share, sell or transfer personal data to third parties for commercial purposes.

Accessing and using the Platform implies full acceptance of these terms. The user undertakes to use the service diligently, lawfully and in good faith. Permitted use: the Platform is offered for personal, non-commercial sporting purposes. Users may create, store, edit and export their own routes, workouts and activities. Prohibited uses: it is strictly forbidden to (i) use the Platform for unlawful or immoral purposes; (ii) attempt to access other users' accounts or compromise the security of the system; (iii) upload content that infringes third-party rights or contains malicious code; (iv) carry out mass data extraction (scraping) without express authorisation. Account responsibility: the user is solely responsible for safeguarding their access credentials, as well as for any activity carried out from their account. Any unauthorised use must be reported immediately. Content ownership: the files, routes, workouts and other data generated by the user are their exclusive property. Cyklot merely stores and processes them in order to provide the service, claiming no rights over such content. Disclaimer of warranty: the Platform is provided "as is", without any express or implied warranty of uninterrupted operation, freedom from errors or fitness for a particular purpose. Use of the data generated, including routes and training plans, is carried out under the sole responsibility of the user, who must assess the actual conditions of their environment and physical state.

Cyklot uses only strictly necessary cookies for the operation of the website. We do not use advertising, cross-site tracking or commercial profiling cookies. Session cookies: keep the user authenticated during their visit and protect the security of the session. CSRF cookie (security token): protects forms against cross-site request forgery attacks. Language cookie: stores the user's language preference so the interface can be displayed in the chosen language. These cookies are considered essential for the provision of the service and therefore do not require prior consent under the applicable regulations. The user may, in any case, configure their browser to block or delete cookies, although this may affect the proper functioning of the Platform.

In order to provide certain features, the Platform may integrate services supplied by third parties. In such cases, the user is informed of the following: OpenStreetMap: the cartographic layers shown on the maps come from the collaborative OpenStreetMap project, subject to its own ODbL licence. Viewing maps entails an HTTP request to its servers. BRouter: route calculation is performed via the open BRouter API, based on OpenStreetMap data. No personally identifiable information is transmitted, only the coordinates needed to calculate the route. Social authentication (optional): if the user chooses to log in via an external provider (for example, Google) through Laravel Socialite, said provider will share basic profile data with the Platform (name, email address and identifier). This feature is entirely optional. AI-assisted workout generation (optional): if the user requests the automatic generation of a workout, the parameters provided may be sent to a language-model provider in order to obtain the response. No personal information is transmitted other than that strictly necessary for the request. The Platform does not perform third-party advertising or analytics tracking by default. Use of any external service is governed by the privacy policies of its respective provider.

In accordance with current data-protection regulations, the user is granted the following rights: Access: to know which personal data are being processed and to obtain a copy thereof. Rectification: to request the correction of inaccurate or incomplete data. Erasure: to request the deletion of their account and associated data, unless there is a legal obligation to retain them. Portability: to obtain their data in a structured, commonly used format, especially their routes and activities, which can be exported in open formats such as GPX. Restriction and objection: to request the restriction of processing or to object to it in the cases provided for by law. Withdrawal of consent: to revoke at any time the consent given, without affecting the lawfulness of prior processing. Complaint to the supervisory authority: users residing in the European Union may lodge a complaint with the corresponding national data-protection authority. To exercise any of these rights, the user may contact us through the channel indicated below.

Cyklot is a free and open-source software project. Its source code is publicly available and may be examined, modified and redistributed under the terms of the licence under which it is published. This nature allows users to audit how the software actually works, host it on their own infrastructure and retain full control over their data. The Platform is provided "as is", without warranties of any kind, in keeping with the usual philosophy of free software. Community collaboration through proposals, improvements, translations and bug reports is greatly appreciated.

For any enquiry relating to this policy, the exercise of the rights described or any other legal matter, the user may contact the responsible team through the contact form available on the Platform itself. We undertake to respond to requests received within a reasonable timeframe and to handle them with due diligence.