Privacy Policy (Dash)

Last updated: December 26, 2025

This Privacy Policy explains how Dash (“we”, “us”) handles information when you use the Dash iOS app (the “App”).

1) Who we are

Controller: Rui Peres
Location: London, United Kingdom
Contact: [email protected]

2) What Dash does

Dash is a companion app for Strava that displays your Strava statistics and widgets. Dash connects to Strava only after you choose to connect your Strava account.

3) Information we process

A) Strava authentication information

When you connect Dash to Strava, Dash stores:

Strava access token and refresh token
Token expiration time
Strava athlete ID

Storage: on your device (e.g., iOS Keychain).
Purpose: authenticate with Strava and fetch your Strava data.

Cookies note: Strava’s login page is owned and controlled by Strava. Strava may use cookies on their website. Dash does not read or access Strava cookies.

B) Strava activity information used by the App

Dash fetches Strava data needed to display your stats and widgets (for example, athlete profile fields and activity summaries).

Storage: on your device (local storage/cache).
No server storage of activities: Dash does not store your Strava activities on Dash-controlled servers.

C) Push notifications (silent notifications)

Dash may use silent push notifications to trigger background refresh.

Our notifications server stores:

Strava athlete ID
Device push token (APNs token)

We store nothing else (no activities, no webhook payloads, no history).
Retention: deleted immediately when you log out.

D) Purchases and subscriptions

Payments are processed by Apple In-App Purchase. Dash does not receive your payment card details.

Dash uses RevenueCat to manage subscription entitlements. RevenueCat processes purchase/receipt information and related technical identifiers necessary to provide subscription status.

E) Crash and error diagnostics (Sentry)

Dash uses Sentry to diagnose crashes and improve reliability.

Dash sets a Sentry user identifier to your Strava athlete ID and may send diagnostic events (such as breadcrumbs and error context) to help troubleshoot issues.

4) What we do not do

No analytics SDKs (e.g., Firebase Analytics, Amplitude, Mixpanel)
No ads
No IDFA / App Tracking Transparency for advertising tracking
No collection of location, contacts, or HealthKit data
No sale of personal data

5) Why we process data (purposes)

We process information to:

Provide the App’s features (Strava connection, widgets, stats)
Maintain your session
Provide subscriptions and entitlement checks
Deliver silent notifications for refresh
Diagnose crashes and fix bugs

6) Legal bases (UK GDPR / GDPR)

Where applicable, we rely on:

Contract (to provide the service you request)
Legitimate interests (app security and reliability, crash diagnostics)
Consent (where required by iOS for certain permissions)

7) Sharing

We share information only with:

Strava (authentication + data fetching)
Apple (purchases)
RevenueCat (subscription management)
Sentry (crash reporting)
Hosting providers for the notifications service (to store athleteId + push token)

We do not share data with third parties for advertising.

8) International transfers

Our service providers may process information outside the UK. Where required, appropriate safeguards are used.

9) Retention

On-device tokens and cached data: until logout or app deletion
Notifications server record (athleteId + push token): deleted on logout
Crash reports: retained according to Sentry retention settings

10) Your rights

You may have rights to access, delete, or restrict processing of your personal data. To request help, contact [email protected].

Because most activity data originates from Strava, you can also manage much of it directly via your Strava account.

11) Children

Dash is not directed to children under 13. We do not knowingly collect personal data from children under 13.

12) Changes

We may update this Privacy Policy. The “Last updated” date will reflect changes.

Contact

Email: [email protected]