Privacy Policy
01Who we are
The RawWatts app and rawwatts.com are operated by blue media labs GmbH, Germany (registered at Amtsgericht Hannover, HRB 204968). For all matters concerning this policy, contact marco@bluemedialabs.com. Full company details are listed in the Legal Notice / Impressum.
02Two things, described separately
This policy covers the RawWatts iOS app (sections 03–05) and the rawwatts.com website (section 06). Section 07 lists the service providers involved.
03The app — your rides
RawWatts connects to your smart trainer and heart-rate strap over Bluetooth, directly from your iPhone. Everything it records — power, target watts, cadence, heart rate, speed, distance and time — is stored locally on your device. There are no user accounts and no sign-in, and we never receive your rides. When you delete a ride, it is removed from the app.
Heart rate is health data. It stays on your iPhone unless you send a ride somewhere yourself. Exporting a ride (a FIT file) happens only when you choose, through the iOS Share Sheet, and the file goes directly from your device to the destination you pick; from that point the destination's own privacy terms apply.
04The app — Strava (optional)
You can connect RawWatts to your Strava account so finished rides are uploaded automatically. You sign in on Strava's own page. To complete the connection, the app sends the one-time code Strava returns to a small server we operate on Google Cloud, which exchanges it for access tokens — this keeps our Strava credentials out of the app. The server passes the tokens and the basic athlete profile Strava includes in its response (your Strava athlete ID and name) back to your iPhone; it does not store tokens, profiles or rides. The tokens are kept in your iPhone's Keychain.
Rides, including heart rate if recorded, are then uploaded directly from your iPhone to your Strava account, where Strava's privacy policy applies. You can disconnect Strava in the app at any time; this also revokes RawWatts' access at Strava.
05The app — no analytics, no tracking
The app contains no analytics, advertising or tracking software. We set no user ID, use no advertising identifier (IDFA), serve no ads, and do not track you across other apps or websites. If you have allowed it in your iPhone's settings ("Share with App Developers"), Apple may give us anonymized crash reports and aggregate usage statistics; these do not identify you. Purchases, if any, are processed by Apple under Apple's privacy policy.
06The website
rawwatts.com sets no cookies, uses no analytics, and loads nothing from third parties — fonts and images are served from our own site. It is hosted on Netlify; like every web host, Netlify processes technical connection data (such as IP addresses) to deliver the site securely and keeps short-lived server logs.
Launch list. If you sign up to be notified, we store your email address, your consent and the time of signup in Netlify's form service. We use your address only to send you one email when RawWatts launches; we may use an email service provider acting on our behalf to send it. We delete the list once that email has gone out, or earlier if you ask. Write to marco@bluemedialabs.com and your address is removed.
07Processors and international transfers
We rely on the following processors: Apple (App Store, purchases, crash reports), Netlify (website hosting and launch-list forms), Google Cloud (the Strava connection server), and, for the launch email, an email service provider. Strava is not our processor: when you connect it, you share data with Strava directly under its own terms. Some of these providers process data outside the EU, including in the United States; such transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.
08Legal basis for processing
Where we process personal data we rely on the following legal bases under the GDPR: consent (Art. 6(1)(a)) for the launch list and when you connect Strava; legitimate interest (Art. 6(1)(f)) for hosting logs and protecting our services against abuse; and performance of a contract or pre-contractual steps (Art. 6(1)(b)) when we answer your requests. You can withdraw consent at any time with effect for the future.
09Data retention
Launch-list addresses are deleted once the launch email has been sent, or earlier on request. Emails you send us are kept only as long as needed to handle your request, plus any statutory retention periods. Hosting logs are kept according to Netlify's standard retention. Data you create in the app lives on your device and remains until you delete it or remove the app.
10Data security
We apply appropriate technical and organizational measures to protect the limited data we process, and we rely on established providers (Apple, Google, Netlify) that maintain their own security programs. Because the app works on-device, your rides are protected by your iPhone's own security; Strava tokens are stored in the iOS Keychain.
11Children's privacy
RawWatts is not directed at children under 16, and we do not knowingly collect personal data from children.
12California privacy rights (CCPA)
We do not sell or share personal information, and we do not use it for cross-context behavioral advertising. California residents have the right to know what personal information is collected and how it is used, to request its deletion, and to not be discriminated against for exercising these rights. To make a request, contact marco@bluemedialabs.com.
13Your rights
Under the GDPR you may request access to, correction of, or deletion of personal data we hold about you; you may request restriction of processing and data portability, object to processing based on legitimate interest, and withdraw any consent at any time with effect for the future. Write to marco@bluemedialabs.com — we answer personally.
You also have the right to lodge a complaint with a supervisory authority. Ours is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.
14Changes to this policy
When this policy changes, the effective date above is updated. Material changes, for example when the app gains new features that handle data differently, are announced on this website before they take effect.