tapiriik stores...

	Your email	Your password1	Access tokens	Activity metadata	Activity data
	Opt-in	Opt-in	No	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	Cached
	Opt-in	Opt-in	No	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	Opt-in	Opt-in	No	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	No	No	Yes	Yes	No
	Opt-in	Opt-in	No	Yes	No
	No	No	Yes	Yes	No
	Opt-in	Opt-in	No	Yes	No
Automatic Sync	Yes2	N/A

...until you disconnect your account or they are no longer needed, whichever is sooner

What areAccess tokens?

Access tokens allow tapiriik to perform actions on your behalf. By using access tokens, tapiriik never needs to store your username or password. In order to obtain an access token, tapiriik may need to ask for your credentials - which are erased immediately after being exchanged for an access token.

What isActivity metadata?

Activity Medatada are the basic details of any activity: start time, time zone, duration, distance, and type. tapiriik needs to store this information to determine which activities should be synchronized to each of your accounts.

What constitutesActivity data?

Activity data is the complete record of an activity: the GPS track, sensor data, and all metadata. Certain services require tapiriik to temporarily store ("cache") this data as part of synchronization.

¹ I've done a good deal to keep your password safe, but there has to be a way for tapiriik to use it to sync your account. Therefore, anyone with enough access and resources to the tapiriik database and servers could access it, too.

² The email address you used to pay is stored so that you can transfer or recover your payment.

All the juicy details

tapiriik moves your activities between the services you connect - period. No activity data or metdata is ever shared with third parties beyond the accounts you connect.

However, the services you connect may, of their own accord, share your activity data with third parties. For instance, at the time I write this, Strava reserves the right to "collect certain use data and information related to [tapiriik's] use of the Strava API Materials, and Strava Platform in connection with [tapiriik's] Developer Application ("Usage Data"), and that Strava may use such Usage Data for any business purpose, internal or external, including, without limitation, providing enhancements to the Strava API Materials or Strava Platform, providing developer of user support, or otherwise." Please consult the privacy policy for the services you connect in order to determine how they handle your data.

Limited data regarding your interaction with tapiriik.com is recorded in order to monitor the performance of the website itself. Google Analytics is used to track website performance, while Sentry records internal server errors.

Exporting & erasing your personal data

Most of the data tapiriik stores regarding your accounts and activities is automatically deleted once you disconnect your last service from tapiriik.com. Only diagnostic logs regarding your account will remain for a limited period afterwards - but are not stored permanently. When you disconnect a service from tapiriik, any activities that tapiriik synchronized to that service will remain untouched. If you wish to receive a copy of all the data tapiriik has stored regarding your user account, or request the deletion of this data, please contact me and mention GDPR in the subject line.